| Ambos lados, revisión anterior Revisión previa Próxima revisión | Revisión previa |
| docs:cloud:vault:inicio [2019/07/25 17:49] – [Key=Value Store] rodolfo | docs:cloud:vault:inicio [2019/07/30 18:04] (actual) – [Setup from vault client] rodolfo |
|---|
| |
| $ export VAULT_TOKEN="s.nJdQXIaf61qygUCcpa84b1f" | $ export VAULT_TOKEN="s.nJdQXIaf61qygUCcpa84b1f" |
| $ export VAULT_ADDR='http://18.234.17.11:8200 | $ export VAULT_ADDR='http://18.234.17.11:8200' |
| |
| Check: | Check: |
| docker run -d --rm \ | docker run -d --rm \ |
| -p 8000:8000 \ | -p 8000:8000 \ |
| -e VAULT_URL_DEFAULT=http://18.234.131.2:8200 \ | -e VAULT_URL_DEFAULT=http://18.234.17.11:8200 \ |
| -e VAULT_AUTH_DEFAULT=TOKEN \ | -e VAULT_AUTH_DEFAULT=TOKEN \ |
| --name vault-ui \ | --name vault-ui \ |
| djenriquez/vault-ui | djenriquez/vault-ui |
| |
| | https://github.com/djenriquez/vault-ui |
| |
| |
| ssh-rsa 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 | ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAACAQCpf6I8qnyBi9LyXkAw/pHMUdX8Yoa3wi9QzKtw8Wvcddvd9nN01H18yaRjmZcMiuDvEgF+2jZUS6TAoAWHYH5EAJRMPIwxIZho35fEr6vxNerLoyfVujIMLDitzqG1r6cBAZgmGGPdmrEW82zXfXUUXGXEjTpMN8p/F52cr6mSeYyXDExUbi1Vg8SqeP9lVnixZHHdlKEnTFAA8GSZPth1IvHUFr1icCmJBMIcfUpiSZbVM/R5TsqDtQnh44N3kz/j14b9NiEtOsd3Jims3Up8Vqcd348QoVBe+d3RGVfobLgHC6O7peZs6J1Elcx0kRMIkvu4Dd4Y7qjCPVDcY3k07GbOiBhOPVDcJhiThabIocuxOF2V/yh2ZLENRudDTeD2fiHp5K7v52JH+VW7WgfQ4r3b0GswqHO84FCX9EH9xHo29yFPRnIATQ0BAsvfVkwcjxDExecOOfFmY4mpZofr1I1sVuhlsoKwG+JQL9Pb3Tz+XQKQCyNW675Xld2z4lmvZkSNCTCr/2qvkgZD9bdg9y2d5479EH2WRODPpmxony0vcDj+isfQyIg4w07auPDvr0edzs9iugZsRGrWmyjHZl2anh09q4kpcrJp96+fUuNhztXmLNlyr4kxioeT2rjM2DGRvG7Qfi95+iLzp41ONAAsxDKgLevnNAFmaYS+Gw== |
| |
| Create a role for signed keys: | Create a role to sign keys. Ref: [[docs:cloud:vault:roles|Vault roles]] |
| |
| $ vault write ssh-Team/roles/my-role -<<"EOH" | $ vault write ssh-Team/roles/my-role -<<"EOH" |
| ==== Sign key ==== | ==== Sign key ==== |
| |
| Send public SSH key to sign | Sing public SSH against role. ''public-key=@'' is required to process key file. |
| | |
| | Information is show just once. |
| |
| $ vault write ssh-Team/sign/my-role public_key=@$HOME/.ssh/id_rsa.pub | $ vault write ssh-Team/sign/my-role public_key=@$HOME/.ssh/id_rsa.pub |
rodolfo