Hey everyone! I'm still pretty new to the whole data pipeline and secrets management world, but I've been trying to automate more of our team's setup. We use Delinea Secret Server for our credentials and Jenkins for CI/CD, and I got tired of manually updating secrets whenever something changed.
I ended up writing a PowerShell script that pulls secrets from Delinea and syncs them to Jenkins as credentials. It felt like a mini ETL job! I used the Delinea REST API to fetch the secrets and the Jenkins CLI to create/update the credentials. I'm sure there are better ways to do this, but it works for our small team.
One thing I struggled with was handling nested JSON from the API response and mapping the right fields to the Jenkins credential types. Also, figuring out the authentication for both systems took a while—I'm using a service account with a token in Delinea and an API token for Jenkins.
I was wondering if anyone else has tried something similar? I'm curious about pitfalls I might have missed, especially around error handling if a secret name changes in Delinea. Should I be logging every sync somewhere, like to BigQuery, for auditing? Any tips would be super helpful!