CyberArk Digital Vault secrets provider plugin

[patk1002]

Environment

• Nautobot version: 1.2.10
• secrets version: 0.1.0

Proposed Functionality

Use Case

Same use case as other Secrets use case but with a different provider, here Cyberark.

[u1735067]

Some notes & resources if it can be useful:

• https://pypi.org/project/conjur/ & https://pypi.org/project/conjur-client/
  • https://github.com/conjurinc/conjur-api-python3 -> https://github.com/cyberark/cyberark-conjur-cli
  • https://github.com/cyberark/cyberark-conjur-cli/commit/a2f9f912aa9696b1bda81122745647c43fa9ac49
• https://pypi.org/project/conjur-api/
  • https://github.com/cyberark/conjur-cli-python -> https://github.com/cyberark/conjur-api-python
• https://docs.conjur.org/Latest/en/Content/Overview/Conjur-OSS-Suite-Overview.html
  • https://docs.conjur.org/Latest/en/Content/Developer/Conjur_Auth_REST_APIs.htm
  • https://docs.conjur.org/Latest/en/Content/Developer/Conjur_API_Retrieve_Secret.htm

[jathanism]

@patk1002 Thanks for the submission! We'll review this and get it on the backlog!

[RobinBria]

I am working for Cyberark, and we would be really interesting on discussing how we could work together to achieve this feature :) Feel free to reach me out.

[patk1002]

@RobinBria - 2 open source locations you might look at are https://github.com/nautobot/nautobot/tree/develop/nautobot/extras/secrets (since CyberArk would likely be a Secrets Provider for Nautobot) and https://github.com/nautobot/nautobot/tree/develop/examples (a good overview source of example Nautobot code, especially the example_plugin folder)

[MyGrayMatter]

I would love to have this working with Cyberark and I'm willing to be a tester.

[itsMrRobot]

I second this, we will be implementing CyberArk soon and I would be willing to test this in our environment as well.

[nathanielfernandez]

We use cyber ark as well but so far we are only able to use it for creds on our nautobot config file. Would love to be able to use it for secrets too.

[Never77]

If you can check the code i've done and test to improve the provider i made, i'll be happy to update it and make it as user-friendly as possible. I don't have any CyberARK instance at home btw, if someone of you have a solution to help me on this, i'll be able to test the code in a good way then and make improvements easier. Thanks in advance.