secrets-cli

Command-line shell for managing secrets for authenticated OneOps users.

License	The Apache Software License, Version 2.0
Categories	CLI User Interface
GroupId	com.oneops
ArtifactId	secrets-cli
Last Version	1.1.0
Release Date	Jun 18, 2018
Type	jar
Description	secrets-cli Command-line shell for managing secrets for authenticated OneOps users.
Project URL	https://github.com/oneops/secrets-cli
Project Organization	Walmart, Inc.
Source Code Management	https://github.com/oneops/secrets-cli

Download secrets-cli

Filename	Size
secrets-cli-1.1.0.pom
secrets-cli-1.1.0.jar	77 KB
secrets-cli-1.1.0-uber.jar	3 MB
secrets-cli-1.1.0-sources.jar	63 KB
secrets-cli-1.1.0-javadoc.jar	265 KB
secrets-cli-1.1.0-executable.jar	3 MB

How to add to project

Apache Maven

<!-- https://jarcasting.com/artifacts/com.oneops/secrets-cli/ -->
<dependency>
    <groupId>com.oneops</groupId>
    <artifactId>secrets-cli</artifactId>
    <version>1.1.0</version>
</dependency>

Gradle Groovy

// https://jarcasting.com/artifacts/com.oneops/secrets-cli/
implementation 'com.oneops:secrets-cli:1.1.0'

Gradle Kotlin

// https://jarcasting.com/artifacts/com.oneops/secrets-cli/
implementation ("com.oneops:secrets-cli:1.1.0")

Apache Buildr

'com.oneops:secrets-cli:jar:1.1.0'

Apache Ivy

<dependency org="com.oneops" name="secrets-cli" rev="1.1.0">
  <artifact name="secrets-cli" type="jar" />
</dependency>

Groovy Grape

@Grapes(
@Grab(group='com.oneops', module='secrets-cli', version='1.1.0')
)

Scala SBT

libraryDependencies += "com.oneops" % "secrets-cli" % "1.1.0"

Leiningen

[com.oneops/secrets-cli "1.1.0"]

Dependencies

compile (8)

Group / Artifact	Type	Version
com.google.guava : guava	jar	25.1-jre
io.airlift : airline	jar	0.8
com.squareup.retrofit2 : retrofit	jar	2.4.0
com.squareup.retrofit2 : converter-moshi	jar	2.4.0
com.squareup.moshi : moshi	jar	1.6.0
com.squareup.okhttp3 : logging-interceptor	jar	3.10.0
com.typesafe : config	jar	1.3.3
org.slf4j : slf4j-simple	jar	1.7.25

provided (1)

Group / Artifact	Type	Version
com.google.code.findbugs : jsr305	jar	3.0.2

test (1)

Group / Artifact	Type	Version
org.junit.jupiter : junit-jupiter-api	jar	5.2.0

Project Modules

There are no modules declared in this project.

🐚 OneOps Secrets CLI

A command line tool for managing OneOps application secrets.OneOps Secrets CLI interacts with the OneOps Secrets Proxy API.

Usage

Detailed user documentation for installation and usage is available on the OneOps website as well as via the help function:

$ secrets
usage: secrets <command> [<args>]

The most commonly used secrets commands are:
    add        Add secret for an application.
    clients    Show all clients for the application.
    delete     Delete a secret.
    details    Get a client/secret details for an application.
    get        Retrieve secret from vault.
    help       Display help information
    info       Show OneOps Secrets CLI version info.
    list       List all secrets for the application.
    log        Tail (no-follow) secrets cli log file.
    revert     Revert secret to the given version index.
    update     Update an existing secret.
    versions   Retrieve versions of a secret, sorted from newest to oldest update time.

See 'secrets help <command>' for more information on a specific command.

Download

Download the latest JAR or grab via Maven:

<dependency>
    <groupId>com.oneops</groupId>
    <artifactId>secrets-cli</artifactId>
    <version>1.1.0</version>
</dependency>

Examples

• Add a secret for an application.

  $ secrets add -a oneops_test-assembly_dev logstash-forwarder.crt -d "Logstash cert" -n "Logstash-Cert"
  
    ✓ Secret 'Logstash-Cert' added successfully for application /oneops/test-assembly/dev.
    
    Note the followings,
      ● Secret 'Logstash-Cert' will be synced to '/oneops/test-assembly/dev' env computes in few seconds.
      ● Applications can access secret content by reading '/secrets/Logstash-Cert' file.
      ● You may need to restart the application inorder for this secret change to take effect.
      ● For security reasons, secrets are never persisted on the disk and can access from '/secrets' virtual memory file system.

• Show all secrets for an application.

  $ secrets list  -a oneops_test-assembly_dev
  Password for testuser :
  ✓ 3 secrets are stored for application env: /oneops/test-assembly/dev
  
  +------------------------+---------------------+----------+----------+--------+---------+
  |       Secret Name      |     Description     |  UserID  | Checksum | Expiry | Version |
  +------------------------+---------------------+----------+----------+--------+---------+
  | Logstash-Cert          | Logstash cert       | testuser | 5CCEB0   | Never  | 42295   |
  | app-private.key        | app ssl key         | testuser | B69967   | Never  | 42227   |
  | db-secret              | databse secret      | testuser | BE49B2   | Never  | 42239   |
  +------------------------+---------------------+----------+----------+--------+---------+

Build

• Source

  Make sure to provide proper secret-proxy truststore and application.conf before doing the build. Use InstallCerts tool to auto-generate trust-store from your secret proxy HTTPS endpoint.

   $ git clone https://github.com/oneops/secrets-cli
   $ cd secrets-cli
   $ ./mvnw clean package
  

After a build the binary executables is located in the target/ directory and name secrets-cli-*-executable.jar.

OneOps

Application Lifecycle Management of Cloud Based Workloads

Versions

Version
1.1.0 Jun 18, 2018
1.0.5 May 15, 2018
1.0.4 Oct 20, 2017
1.0.3 Oct 5, 2017