Showing posts with label Tourus Secret Key Management. Show all posts
Showing posts with label Tourus Secret Key Management. Show all posts

installing and configuring Torus for secret key management


root@ip-172-31-25-91:~/.ssh# DISTRO=$(lsb_release -i | awk '{print tolower($3)}')
root@ip-172-31-25-91:~/.ssh# CODENAME=$(lsb_release -c | awk '{print $2}')
root@ip-172-31-25-91:~/.ssh# sudo tee /etc/apt/sources.list.d/torus.list <<< "deb https://get.torus.sh/$DISTRO/ $CODENAME main"
deb https://get.torus.sh/ubuntu/ xenial main
root@ip-172-31-25-91:~/.ssh# apt-get update
Hit:1 http://us-east-1.ec2.archive.ubuntu.com/ubuntu xenial InRelease
Get:2 http://us-east-1.ec2.archive.ubuntu.com/ubuntu xenial-updates InRelease [102 kB]
Get:3 http://us-east-1.ec2.archive.ubuntu.com/ubuntu xenial-backports InRelease [102 kB]
Ign:4 http://pkg.jenkins.io/debian-stable binary/ InRelease
Hit:5 http://pkg.jenkins.io/debian-stable binary/ Release
Get:6 http://security.ubuntu.com/ubuntu xenial-security InRelease [102 kB]
Hit:7 https://download.docker.com/linux/ubuntu xenial InRelease
Ign:8 https://get.torus.sh/ubuntu xenial InRelease
Get:9 https://get.torus.sh/ubuntu xenial Release [864 B]
Ign:11 https://get.torus.sh/ubuntu xenial Release.gpg
Get:12 https://get.torus.sh/ubuntu xenial/main amd64 Packages [324 B]
Fetched 308 kB in 0s (661 kB/s)
Reading package lists... Done
W: The repository 'https://get.torus.sh/ubuntu xenial Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
root@ip-172-31-25-91:~/.ssh# apt-get install torus
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following NEW packages will be installed:
  torus
0 upgraded, 1 newly installed, 0 to remove and 28 not upgraded.
Need to get 2,124 kB of archives.
After this operation, 0 B of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
  torus
Install these packages without verification? [y/N] y
Get:1 https://get.torus.sh/ubuntu xenial/main amd64 torus amd64 0.24.1 [2,124 kB]
Fetched 2,124 kB in 0s (7,829 kB/s)
Selecting previously unselected package torus.
(Reading database ... 124496 files and directories currently installed.)
Preparing to unpack .../torus_0.24.1_amd64.deb ...
Unpacking torus (0.24.1) ...
Setting up torus (0.24.1) ...
root@ip-172-31-25-91:~/.ssh# torus link
You must be logged in to run 'link'.
Login using 'login' or create an account using 'signup'.
root@ip-172-31-25-91:~/.ssh# torus link signup
You must be logged in to run 'link'.
Login using 'login' or create an account using 'signup'.
root@ip-172-31-25-91:~/.ssh# torus signup
By completing sign up, you agree to our terms of use (found at https://torus.sh/terms)
and our privacy policy (found at https://torus.sh/privacy)

✔ Full Name: satheesh kumar
✔ Username: jskcbe
✔ Email: satheeshj@soldatinc.com
✔ Password: ●●●●●●●●●
✔ Confirm Password: ●●●●●●●●●
Would you like to enable hints on how to use Torus?
They can be disabled at any time using `torus prefs`.
✔ Enable hints? [Y/n] y
Preferences updated.

You are now authenticated.
Keypairs generated
Signing keys signed
Signing keys uploaded
Encryption keys signed
Encryption keys uploaded

Your account has been created!

We have emailed you a verification code.
Please verify your email address by entering the code below.

✔ Verification code: CFKN6AAWG

Your email is now verified.
root@ip-172-31-25-91:~/.ssh# torus link
✔ Create a new organization: david
✔ Create a new project: scaleway
Keypairs generated
Signing keys signed
Signing keys uploaded
Encryption keys signed
Encryption keys uploaded
Org david created.
Project scaleway created.

This directory and its subdirectories have been linked to:
Org:     david
Project: scaleway

Use 'torus status' to view your full working context.
root@ip-172-31-25-91:~/.ssh# torus status
Org:         david
Project:     scaleway
Environment: dev-jskcbe
Service:     default
Identity:    jskcbe
Instance:    1

Credential path: /david/scaleway/dev-jskcbe/default/jskcbe/1
root@ip-172-31-25-91:~/.ssh# tourus services list
No command 'tourus' found, did you mean:
 Command 'torrus' from package 'torrus-common' (universe)
tourus: command not found
root@ip-172-31-25-91:~/.ssh# torus services list

scaleway (1)
------------
default

root@ip-172-31-25-91:~/.ssh# torus set organization
A secret name and value must be supplied.
Usage:
    torus set [command options] or =
root@ip-172-31-25-91:~/.ssh# torus set organization ac2680a1-df3f-4ca8-91e2-fb7e0e746ba6
Credentials retrieved
Keypairs retrieved
Encrypting key retrieved
Credential encrypted
Completed Operation

Credential organization has been set at /david/scaleway/dev-jskcbe/default/*/*/organization

Protip: See the exact path for each secret set using `torus view -v`
root@ip-172-31-25-91:~/.ssh# torus set token a272e8cd-5ac3-4a92-a82c-972f579e93c0
Credentials retrieved
Keypairs retrieved
Encrypting key retrieved
Credential encrypted
Completed Operation

Credential token has been set at /david/scaleway/dev-jskcbe/default/*/*/token

Protip: Start your process with your decrypted secrets using `torus run`
root@ip-172-31-25-91:~/.ssh# torus view
ORGANIZATION=ac2680a1-df3f-4ca8-91e2-fb7e0e746ba6
TOKEN=a272e8cd-5ac3-4a92-a82c-972f579e93c0

Protip: Start your process with your decrypted secrets using `torus run`
root@ip-172-31-25-91:~/.ssh#

Installing Ingress Controller - Kubernetes

Installing the Ingress Controller Prerequisites Make sure you have access to the Ingress controller image: For NGINX Ingress controll...