installing and configuring Torus for secret key management


root@ip-172-31-25-91:~/.ssh# DISTRO=$(lsb_release -i | awk '{print tolower($3)}')
root@ip-172-31-25-91:~/.ssh# CODENAME=$(lsb_release -c | awk '{print $2}')
root@ip-172-31-25-91:~/.ssh# sudo tee /etc/apt/sources.list.d/torus.list <<< "deb https://get.torus.sh/$DISTRO/ $CODENAME main"
deb https://get.torus.sh/ubuntu/ xenial main
root@ip-172-31-25-91:~/.ssh# apt-get update
Hit:1 http://us-east-1.ec2.archive.ubuntu.com/ubuntu xenial InRelease
Get:2 http://us-east-1.ec2.archive.ubuntu.com/ubuntu xenial-updates InRelease [102 kB]
Get:3 http://us-east-1.ec2.archive.ubuntu.com/ubuntu xenial-backports InRelease [102 kB]
Ign:4 http://pkg.jenkins.io/debian-stable binary/ InRelease
Hit:5 http://pkg.jenkins.io/debian-stable binary/ Release
Get:6 http://security.ubuntu.com/ubuntu xenial-security InRelease [102 kB]
Hit:7 https://download.docker.com/linux/ubuntu xenial InRelease
Ign:8 https://get.torus.sh/ubuntu xenial InRelease
Get:9 https://get.torus.sh/ubuntu xenial Release [864 B]
Ign:11 https://get.torus.sh/ubuntu xenial Release.gpg
Get:12 https://get.torus.sh/ubuntu xenial/main amd64 Packages [324 B]
Fetched 308 kB in 0s (661 kB/s)
Reading package lists... Done
W: The repository 'https://get.torus.sh/ubuntu xenial Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
root@ip-172-31-25-91:~/.ssh# apt-get install torus
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  torus
0 upgraded, 1 newly installed, 0 to remove and 28 not upgraded.
Need to get 2,124 kB of archives.
After this operation, 0 B of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
  torus
Install these packages without verification? [y/N] y
Get:1 https://get.torus.sh/ubuntu xenial/main amd64 torus amd64 0.24.1 [2,124 kB]
Fetched 2,124 kB in 0s (7,829 kB/s)
Selecting previously unselected package torus.
(Reading database ... 124496 files and directories currently installed.)
Preparing to unpack .../torus_0.24.1_amd64.deb ...
Unpacking torus (0.24.1) ...
Setting up torus (0.24.1) ...
root@ip-172-31-25-91:~/.ssh# torus link
You must be logged in to run 'link'.
Login using 'login' or create an account using 'signup'.
root@ip-172-31-25-91:~/.ssh# torus link signup
You must be logged in to run 'link'.
Login using 'login' or create an account using 'signup'.
root@ip-172-31-25-91:~/.ssh# torus signup
By completing sign up, you agree to our terms of use (found at https://torus.sh/terms)
and our privacy policy (found at https://torus.sh/privacy)

✔ Full Name: satheesh kumar
✔ Username: jskcbe
✔ Email: satheeshj@soldatinc.com
✔ Password: ●●●●●●●●●
✔ Confirm Password: ●●●●●●●●●
Would you like to enable hints on how to use Torus?
They can be disabled at any time using `torus prefs`.
✔ Enable hints? [Y/n] y
Preferences updated.

You are now authenticated.
Keypairs generated
Signing keys signed
Signing keys uploaded
Encryption keys signed
Encryption keys uploaded

Your account has been created!

We have emailed you a verification code.
Please verify your email address by entering the code below.

✔ Verification code: CFKN6AAWG

Your email is now verified.
root@ip-172-31-25-91:~/.ssh# torus link
✔ Create a new organization: david
✔ Create a new project: scaleway
Keypairs generated
Signing keys signed
Signing keys uploaded
Encryption keys signed
Encryption keys uploaded
Org david created.
Project scaleway created.

This directory and its subdirectories have been linked to:
Org:     david
Project: scaleway

Use 'torus status' to view your full working context.
root@ip-172-31-25-91:~/.ssh# torus status
Org:         david
Project:     scaleway
Environment: dev-jskcbe
Service:     default
Identity:    jskcbe
Instance:    1

Credential path: /david/scaleway/dev-jskcbe/default/jskcbe/1
root@ip-172-31-25-91:~/.ssh# tourus services list
No command 'tourus' found, did you mean:
 Command 'torrus' from package 'torrus-common' (universe)
tourus: command not found
root@ip-172-31-25-91:~/.ssh# torus services list

scaleway (1)
------------
default

root@ip-172-31-25-91:~/.ssh# torus set organization
A secret name and value must be supplied.
Usage:
    torus set [command options] or =
root@ip-172-31-25-91:~/.ssh# torus set organization ac2680a1-df3f-4ca8-91e2-fb7e0e746ba6
Credentials retrieved
Keypairs retrieved
Encrypting key retrieved
Credential encrypted
Completed Operation

Credential organization has been set at /david/scaleway/dev-jskcbe/default/*/*/organization

Protip: See the exact path for each secret set using `torus view -v`
root@ip-172-31-25-91:~/.ssh# torus set token a272e8cd-5ac3-4a92-a82c-972f579e93c0
Credentials retrieved
Keypairs retrieved
Encrypting key retrieved
Credential encrypted
Completed Operation

Credential token has been set at /david/scaleway/dev-jskcbe/default/*/*/token

Protip: Start your process with your decrypted secrets using `torus run`
root@ip-172-31-25-91:~/.ssh# torus view
ORGANIZATION=ac2680a1-df3f-4ca8-91e2-fb7e0e746ba6
TOKEN=a272e8cd-5ac3-4a92-a82c-972f579e93c0

Protip: Start your process with your decrypted secrets using `torus run`
root@ip-172-31-25-91:~/.ssh#

No comments:

Installing Ingress Controller - Kubernetes

Installing the Ingress Controller Prerequisites Make sure you have access to the Ingress controller image: For NGINX Ingress controll...