cyber.hendryadrian.com
YouTube · CYBERWOX

Tutorial Demonstrates Passbolt Secret Retrieval for GitLab CI/CD on AWS

· 41:17 · Watch on YouTube ↗

Summary

A sponsored tutorial deploys Passbolt on AWS and demonstrates a GitLab pipeline retrieving encrypted secrets, while identifying decryption and other requirements for production use.

Key points

  • The proof of concept deploys a self-hosted Passbolt instance on EC2 and configures HTTPS.
  • GitLab CI/CD variables hold the Passbolt URL and an API token used to request application secrets at job time.
  • A successful pipeline retrieved an encrypted database password and API key as artifacts; it did not demonstrate runtime decryption.
  • The presenter used legacy clear-text metadata and debug mode for the demo, noting that neither is recommended for production.
  • Production considerations include private-key storage, runtime decryption, key rotation and revocation, environment separation, backups and monitoring.

Article Details

Topics
  • [00:24] Protecting CI/CD pipeline credentials
  • [01:42] Deploying Passbolt on AWS EC2
  • [07:28] Configuring a domain and HTTPS
  • [15:27] Setting up Passbolt and its administrator account
  • [19:28] Creating demonstration secrets and legacy metadata
  • [23:44] Creating an API token and configuring GitLab CI/CD variables
  • [30:00] Building and troubleshooting the pipeline
  • [38:43] Encrypted retrieval results and production considerations

People

DaveCybersecurity engineer and presenter who demonstrates the Passbolt and GitLab CI/CD secrets workflow.

Vendors

Amazon Web Services[01:43] installing Passbolt on AWS. Uh there's aPassbolt[01:03] sponsored by Passbolt, which is the

Products

AWS[01:43] installing Passbolt on AWS. Uh there's aEC2[02:31] let's set up a EC2 instance. Do a launchGitLab[00:26] protecting GitLab CI/CD pipelines or anyPassbolt[01:03] sponsored by Passbolt, which is the

Related Articles