cyberark/secretless-broker

version: 2
services:
  token-service:
    connector: generic_http
    listenOn: tcp://0.0.0.0:9030
    credentials:
      token:
        from: keychain
        get: service#elasticsearch/access_token
    config:
      headers:
        Authorization: Bearer {{ .token }}
      forceSSL: true
      authenticateURLsMatching:
        - ^http[s]*\:\/\/
  api-key-service:
    connector: generic_http
    listenOn: tcp://0.0.0.0:9020
    credentials:
      id:
        from: keychain
        get: service#elasticsearch/api_key_id
      api_key:
        from: keychain
        get: service#elasticsearch/api_key
    config:
      headers:
        Authorization: ApiKey {{ printf "%s:%s" .id .api_key | base64 }}
      forceSSL: true
      authenticateURLsMatching:
        - ^http[s]*\:\/\/