cyberark/secretless-broker

version: 2
services:
  jfrog-basic-authentication:
    connector: generic_http
    listenOn: tcp://0.0.0.0:8071
    credentials:
      user:
        from: keychain
        get: service#jfrog/username
      pass:
        from: keychain
        get: service#jfrog/password
    config:
      headers:
        Authorization: Basic {{ printf "%s:%s" .user .pass | base64 }}
      forceSSL: true
      authenticateURLsMatching:
        - ^http[s]*
  jfrog-apikey:
    connector: generic_http
    listenOn: tcp://0.0.0.0:8081
    credentials:
      api_key:
        from: keychain
        get: service#jfrog/api_key
    config:
      headers:
        X-JFrog-Art-Api: "{{ .api_key }}"
      forceSSL: true
      authenticateURLsMatching:
        - ^http[s]*
  jfrog-oauth:
    connector: generic_http
    listenOn: tcp://0.0.0.0:8091
    credentials:
      token:
        from: keychain
        get: service#jfrog/auth-token
    config:
      headers:
        Authorization: Bearer {{ .token }}
      forceSSL: true
      authenticateURLsMatching:
        - ^http[s]*