{"id":21601352,"url":"https://github.com/dominodatalab/jit-aws-auth","last_synced_at":"2025-10-12T06:23:49.062Z","repository":{"id":167270283,"uuid":"629135138","full_name":"dominodatalab/jit-aws-auth","owner":"dominodatalab","description":null,"archived":false,"fork":false,"pushed_at":"2025-03-13T17:15:46.000Z","size":197,"stargazers_count":0,"open_issues_count":2,"forks_count":0,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-03-13T18:30:09.524Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/dominodatalab.png","metadata":{"files":{"readme":"README-dev.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-04-17T17:36:04.000Z","updated_at":"2025-01-07T18:08:13.000Z","dependencies_parsed_at":"2023-09-29T15:57:00.550Z","dependency_job_id":"e0141ce7-9c88-4b94-80e9-84095c154511","html_url":"https://github.com/dominodatalab/jit-aws-auth","commit_stats":null,"previous_names":["dominodatalab/jit-aws-auth"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dominodatalab%2Fjit-aws-auth","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dominodatalab%2Fjit-aws-auth/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dominodatalab%2Fjit-aws-auth/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/dominodatalab%2Fjit-aws-auth/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/dominodatalab","download_url":"https://codeload.github.com/dominodatalab/jit-aws-auth/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":244227560,"owners_count":20419261,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-11-24T19:09:14.644Z","updated_at":"2025-10-12T06:23:44.017Z","avatar_url":"https://github.com/dominodatalab.png","language":"Python","funding_links":[],"categories":[],"sub_categories":[],"readme":"\n# JIT Installation Instructions\n\nFollow these set of instructions to install JIT. For AWS pre-requisites refer to this [README Document](README.md)\n\n## On the Domino Side Create the Tar balls \n\n1. Create JIT Client Tarball\n\nWe will define a project root folder as `$PROJECT_BASE_FLDR` all folders below are with respect to\nthis base folder\n\n```shell\ncd $PROJECT_BASE_FLDR\nexport image_name=jit-client\nexport image_tag=v1.0.0-release \ndocker build -f ./JITClientDockerfile -t $image_name:$image_tag .\ndocker images | grep jit-client\nexport image_id=2dd0fb322ebb\nrm -rf ./install/client/*\ndocker save -o ./install/client/jit-client.tar $image_id $image_name:$image_tag\ntar -cvpzf jit_install/jit_client.tar.gz ./install/client\n```\n\n2. Create JIT Server Tarball\n\nFor Mock JIT Server use the one below\n```shell\ncd $PROJECT_BASE_FLDR\nexport image_name=mock-jit-server\nexport image_tag=v1.0.0-release \ndocker build -f ./MockJITServerDockerfile -t $image_name:$image_tag .\ndocker images | grep jit-server\nexport image_id=#TBD\nrm  ./install/server/* \ndocker save -o ./install/server/jit-server.tar $image_id $image_name:$image_tag\ntar -cvpzf jit_install/jit_server.tar.gz ./install/server\n```\nFor  the actual JIT server use the one below\n```shell\ncd $PROJECT_BASE_FLDR\nexport image_name=jit-server\nexport image_tag=v1.0.0-release \ndocker build -f ./JITServerDockerfile -t $image_name:$image_tag .\ndocker images | grep jit-server\nexport image_id=#TBD \nrm  ./install/server/* \ndocker save -o ./install/server/jit-server.tar $image_id $image_name:$image_tag\ntar -cvpzf jit_install/jit_server.tar.gz ./install/server\n```\n\n## Push Images from Tarball to Docker Registry\n\n  \n1. Push the `jit-client` image\n```shell\ncd $PROJECT_BASE_FLDR\ncd jit_install\nrm -rf client\nmkdir client\nmv jit_client.tar.gz ./client\ncd client\ngunzip jit_client.tar.gz\ntar -xvf jit_client.tar \nrm  jit_client.tar*\n\nexport docker_registry=quay.io/domino\nexport image_name=jit-client\nexport image_tag=v1.0.0-release \ndocker load \u003c ./install/client/jit-client.tar \ndocker tag $image_name:$image_tag $docker_registry/$image_name:$image_tag\ndocker push $docker_registry/$image_name:$image_tag\n```\n\n2. Push the `jit-server` image\n```shell\ncd $PROJECT_BASE_FLDR\ncd jit_install\nrm -rf server\nmkdir server\nmv jit_server.tar.gz ./server\ncd server \ngunzip jit_server.tar.gz\ntar -xvf jit_server.tar \nrm  jit_server.tar*\n\nexport docker_registry=quay.io/domino\nexport image_name=jit-server\nexport image_tag=v1.0.0-release \ndocker load \u003c ./install/server/jit-server.tar \ndocker tag $image_name:$image_tag $docker_registry/$image_name:$image_tag\ndocker push $docker_registry/$image_name:$image_tag\n```\n\n\n## Install JIT\n\n1. Create a namespace `domino-field` in which this service will be installed\n\n2. Open the file `./helm/jit/values.yaml`\nAnd change the value for `\u003cEKS_ACCOUNT_NO\u003e`\n```yaml\nimage:\n  repository: quay.io/domino\n  serverContainer: jit-server\n  clientContainer: jit-client\n  serverAppVersion: v1.0.0-release\n  clientAppVersion: v1.0.0-release\n  pullPolicy: Always\n\nenv:\n  name: jit\n  service: jit-svc\n  iamrole: arn:aws:iam::\u003cEKS_ACCOUNT_NO\u003e:role/dev-domino-jit-role\n  namespace:\n    platform: domino-platform\n    compute: domino-compute\n    field: domino-field\n\n\n```\n\n## Helm Install\n\nFor helm installation run \n```shell\nhelm install -f ./helm/jit/values.yaml jit helm/jit -n domino-field\n```\n\nFor helm updates run \n```shell\nhelm upgrade -f ./helm/jit/values.yaml jit helm/jit -n domino-field\n```\n\nFor helm delete run\n```shell\nhelm delete jit -n domino-field\n```\n\n## Inside the Workspace\n\nYou should look for environment variables\n```properties\nAWS_SHARED_CREDENTIALS_FILE\nDOMINO_JIT_ENDPOINT\nDOMINO_JIT_REFRESH_ENDPOINT\n```\nLook inside the file `AWS_SHARED_CREDENTIALS_FILE` for credentials associated with your JIT Session\n\nLastly if you create new JIT sessions when your workspace is running, update the above file by running\n\n```shell\ncurl $DOMINO_JIT_REFRESH_ENDPOINT\n```\n\n## Debugging errors\n\nYou can access the JIT client (runs in a side-car container) logs in the workspace by viewing the file\n\n```shell\n/var/log/jit/app.log\n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdominodatalab%2Fjit-aws-auth","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdominodatalab%2Fjit-aws-auth","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdominodatalab%2Fjit-aws-auth/lists"}