vptechops
1b8bd843d9
bw's name search is fuzzy: every agent email contains "coo"
(tsgstaff-coo-*), so `bw get totp "coo Cloudron"` matched 10 items and
errored. get_totp now resolves via get_item_id (exact-name filter)
first, mirroring get_item_password.
Added validate-all-logins.py: per-agent fresh-browser-context login
(shared contexts carry session cookies and hide the login form),
asserts password+TOTP round-trip, then verifies every stored API
credential against its system. First full run: 9/10 PASS.
Known failure: vp-compliance stored password does not match the
account ("Incorrect username or password" pre-TOTP) -- enrollment
typed a different value than stored. Needs Cloudron admin reset,
then update_item and re-validate.
29 lines
1.3 KiB
YAML
29 lines
1.3 KiB
YAML
services:
|
|
provision:
|
|
build: .
|
|
container_name: tsys-agent-provisioner
|
|
env_file:
|
|
- ${BW_ENV_FILE:-${HOME}/.config/bw/env}
|
|
user: "provision"
|
|
volumes:
|
|
- ./agents.yaml:/app/agents.yaml:ro
|
|
- ./state:/app/state
|
|
- ./bw-state:/home/provision/.config/Bitwarden CLI
|
|
- ./bw_helper.py:/app/bw_helper.py:ro
|
|
- ./provision-agent.py:/app/provision-agent.py:ro
|
|
- ./test_bw_helper.py:/app/test_bw_helper.py:ro
|
|
- ./test_bw_persistence.py:/app/test_bw_persistence.py:ro
|
|
- ./dump-cloudron-dom.py:/app/dump-cloudron-dom.py:ro
|
|
- ./enable-cloudron-2fa.py:/app/enable-cloudron-2fa.py:ro
|
|
- ./verify-cloudron-2fa.py:/app/verify-cloudron-2fa.py:ro
|
|
- ./investigate-2fa-login.py:/app/investigate-2fa-login.py:ro
|
|
- ./dump-sso-flows.py:/app/dump-sso-flows.py:ro
|
|
- ./provision-discourse.py:/app/provision-discourse.py:ro
|
|
- ./provision-discourse-apikey.py:/app/provision-discourse-apikey.py:ro
|
|
- ./provision-redmine.py:/app/provision-redmine.py:ro
|
|
- ./merge-invites.py:/app/merge-invites.py:ro
|
|
- ./dump-invite-page.py:/app/dump-invite-page.py:ro
|
|
- ./validate-all-logins.py:/app/validate-all-logins.py:ro
|
|
- ./diagnose-vp-compliance.py:/app/diagnose-vp-compliance.py:ro
|
|
- ./validate-coo.py:/app/validate-coo.py:ro
|