sandromello

-----BEGIN CERTIFICATE-----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sandromello

cat > /etc/nftables.d/hoop-sidecar.nft <<'EOF'
define SNIP = <NETSCALER_SNIP>
define VDAS = <PROTECTED_VDA_CIDR>

table inet hoop_sidecar {
  chain prerouting {
    type filter hook prerouting priority mangle; policy accept;
    meta l4proto tcp socket transparent 1 meta mark set 1 accept
    ip saddr $SNIP ip daddr $VDAS tcp dport 2598 counter tproxy ip to :2598 meta mark set 1 accept
    ip saddr $SNIP ip daddr $VDAS counter drop

sandromello

log_level: info

admin:
  listen: 127.0.0.1:19000

audit:
  file: /var/log/hoop/sidecar-audit.jsonl

ica:
  ocr_worker: /opt/hoop/active/sidecar/ica/bin/hoop-tesseract-worker

sandromello

Hoop Gateway Helm Chart

Prerequisites

• Kubernetes 1.19+
• Helm 3.x
• A running PostgreSQL instance

Installation

sandromello

time curl -X POST http://presidio-analyzer:3000/analyze -H "Content-Type: application/json" -d @-<<EOF
{
  "language": "en",
  "entities": [
    "DATE_TIME"
  ],
  "text": "john.doe@hoop.dev\tJohn  Doe\t+5511959606844\tjohndoe.com\t192.168.5.10\tNew York\t1990-04-15\t123.456.789-00\tAB123456\t1234 5678 9012 3456\t123\t2027-08\tBank Of America\tDE89 3704 0044 0532 0130 00\t12345-6\tMale\tAmerican\tSoftware Engineer\tHoop Technologies\tFifth Avenue, 123\t04538-132\tGA\tBrazil\t192.168.5.10 john.doe@hoop.dev\tJohn  Doe\t+5511959606844\tjohndoe.com\t192.168.5.10\tNew York\t1990-04-15\t123.456.789-00\tAB123456\t1234 5678 9012 3456\t123\t2027-08\tBank Of America\tDE89 3704 0044 0532 0130 00\t12345-6\tMale\tAmerican\tSoftware Engineer\tHoop Technologies\tFifth Avenue, 123\t04538-132\tGA United States 192.168.5.10 john.doe@hoop.dev\tJohn  Doe\t+5511959606844\tjohndoe.com\t192.168.5.10\tNew York\t1990-04-15\t123.456.789-00\tAB123456\t1234 5678 9012 3456\t123\t2027-08\tBank Of America\tDE89 3704 0044 0532 0130 00\t1234

sandromello

#!/bin/bash
set -eo pipefail

LINUX_TARGET_USER=

while IFS= read -r line; do
  [ -z "$line" ] && continue
  USER_EMAIL=$(echo -n $line | awk '{print $1}')
  if [ $USER_EMAIL == "$HOOP_USER_EMAIL" ]; then
    LINUX_USER=$(echo -n $line | awk '{print $2}')

sandromello

config:
  POSTGRES_DB_URI: 'postgres://root:default-pwd@hoopgateway-pg/postgres?sslmode=disable'
  API_URL: http://localhost:8009

defaultAgent:
  enabled: true

postgres:
  enabled: true
  storageClassName: gp2

sandromello

config:
  POSTGRES_DB_URI: 'postgres://root:default-pwd@hoopgateway-pg/postgres?sslmode=disable'
  API_URL: http://localhost:8009

defaultAgent:
  enabled: true

postgres:
  enabled: true

sandromello

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: postgres-pvc
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 10Gi

sandromello

#!/bin/bash

PGPASSWORD=$(LC_ALL=C tr -dc A-Za-z0-9_ < /dev/urandom | head -c 43 | xargs)

set -eo pipefail

function echo_normal() {
    echo $'\e[1G----->' "$*"
}