An open API service indexing awesome lists of open source software.

https://github.com/duplocloud/duplo-jit

Command-line tools for JIT AWS access
https://github.com/duplocloud/duplo-jit

Last synced: 3 months ago
JSON representation

Command-line tools for JIT AWS access

Awesome Lists containing this project

README

        

# duplo-jit

Command-line tools for JIT Duplo, AWS and Kubernetes access

## Installation

### From release zip files

See the *Releases* section of this repository.

- Download a release artifact that matches your system's architecture.
- Unzip the artifact.
- Install the binaries somewhere in your `PATH`, such as the `/usr/local/bin` directory.

### With Homebrew

run `brew install duplocloud/tap/duplo-jit` from your terminal

## Usage

### duplo-jit aws

This tool is intended to be used in your `~/.aws/config`. It provides just-in-time access to AWS using short-lived, temporary access keys.

Example `~/.aws/config` for admin access to Duplo:

```ini
[profile myduplo-admin]
region=us-west-2
credential_process=duplo-jit aws --admin --host https://MY-DUPLO-HOSTNAME.duplocloud.net --interactive
```

Example `~/.aws/config` for tenant-level access to Duplo:

```ini
[profile myduplo-tenant]
region=us-west-2
credential_process=duplo-jit aws --tenant MY-TENANT-NAME --host https://MY-DUPLO-HOSTNAME.duplocloud.net --interactive
```

## Command help

### duplo-jit aws --help

```
Usage of duplo-jit:
-admin
Get admin credentials
-api-host string
Specify an alternate DuploCloud API base URL if it differs from the UI host (defaults to the value of --host if omitted)
-debug
Turn on verbose (debugging) output
-duplo-ops
Get Duplo operations credentials
-host string
DuploCloud base URL
-interactive
Allow getting Duplo credentials via an interactive browser session
-no-cache
Disable caching (not recommended)
-port int
Port to use for the local web server
-tenant string
Get credentials for the given tenant
-token string
DuploCloud API token
-version
Output version information and exit
```

### duplo-jit duplo --help

```
Usage of duplo-jit:
-api-host string
Specify an alternate DuploCloud API base URL if it differs from the UI host (defaults to the value of --host if omitted)
-debug
Turn on verbose (debugging) output
-host string
DuploCloud base URL
-interactive
Allow getting Duplo credentials via an interactive browser session
-no-cache
Disable caching (not recommended)
-port int
Port to use for the local web server
-token string
DuploCloud API token
-version
Output version information and exit
```

### duplo-jit k8s --help

```
Usage of duplo-jit:
-api-host string
Specify an alternate DuploCloud API base URL if it differs from the UI host (defaults to the value of --host if omitted)
-debug
Turn on verbose (debugging) output
-host string
DuploCloud base URL
-interactive
Allow getting Duplo credentials via an interactive browser session
-no-cache
Disable caching (not recommended)
-plan string
Get credentials for the given plan
-port int
Port to use for the local web server
-tenant string
Get credentials for the given tenant
-token string
DuploCloud API token
-version
Output version information and exit
```