This is a component that enables cf ssh for Eirini CloudFoundry clusters.
It is the equivalent of diego-ssh for Eirini.
- Compile:
go build
- Start it with a working config.json (check the example one under
cmd/ssh-proxy/config.json) :
./ssh-proxy -config config.json
- Find your applications guid:
cf app myapp --guid
- Try to ssh to the proxy:
ssh -p 2222 cf:b654358e-edfd-4e9e-b646-7fa55d5f8eb7/[email protected]
- When promted for a password use the one from the command:
cf ssh-code
More information:
- https://github.com/cloudfoundry/diego-ssh#cloud-foundry-via-cloud-controller-and-uaa
- https://github.com/cloudfoundry/uaa/blob/master/docs/UAA-APIs.rst#client-obtains-token-post-oauthtoken
To create a correct config.json file you will need the ssh-proxy user's secret (password). You can find that with something like
kubectl get secrets -n scf secrets-2.17.1-1 -o yaml | less
(look for uaa-clients-diego-ssh-proxy-secret)
decode the value with echo "the_value_here" | base64 -d. This is the value you need for the config.json file.