cf-bosh-cli
is used to deploy several cli tools through docker image.
The container expose ssh port. Password or key (rsa only) authentication is supported.
bbr
- Bosh Backup and Restore cli (http://docs.cloudfoundry.org/bbr/)bosh
- Bosh cli (https://bosh.io/docs/cli-v2.html)bosh-gen
- Bosh releases creation (https://github.com/cloudfoundry-community/bosh-gen)cf
- Cloud Foundry cli (https://github.com/cloudfoundry/cli)credhub
- Credhub cli (https://github.com/cloudfoundry-incubator/credhub-cli)fly
- Concourse cli (https://github.com/concourse/fly)uaac
- Cloud Foundry UAA cli (https://github.com/cloudfoundry/cf-uaac)shield
- Shield cli (https://docs.pivotal.io/partners/starkandwayne-shield/)
argo
- Kubernetes workflow management (https://argoproj.github.io/argo-workflows/)cilium
- Kubernetes cilium network management (https://github.com/cilium/cilium-cli)crossplane
- Kubernetes crossplane (https://docs.crossplane.io/latest/cli)flux
- Kubernetes Gitops management (https://fluxcd.io/docs/cmd/)helm
- Kubernetes Package Manager (https://docs.helm.sh/)hubble
- Kubernetes Monitoring management (https://github.com/cilium/hubble/)kapp
- Kubernetes YAML tool (https://github.com/k14s/kapp/)klbd
- Kubernetes image build orchestrator tool (https://github.com/k14s/kbld/)kubectl
- Kubernetes cli (https://kubernetes.io/docs/reference/generated/kubectl/overview/)kyverno
Kubernetes policy engine (https://github.com/kyverno/kyverno/)k9s
- Kubernetes cli (https://github.com/derailed/k9s)oc
- Openshift cli (https://docs.openshift.com/dedicated/welcome/)
cmctl
- Cert-manager cli (https://github.com/cert-manager/cmctl)gcloud
- Google Cloud Platform cli (https://cloud.google.com/sdk/gcloud)git
- Git cligit-filter-repo
- Git rewriting history tool (https://github.com/newren/git-filter-repo)govc
- Vsphere cli (https://github.com/vmware/govmomi/tree/master/govc/)mc
- Minio S3 cli (https://github.com/minio/mc)jq
- JSON processing tool (https://stedolan.github.io/jq/)mdless
- Provides a formatted and highlighted view of Markdown files in Terminal (https://github.com/ttscoff/mdless)mongo
- MongoDB shell cli (https://docs.mongodb.com/manual/mongo/)mysqlsh
- MySQL shell cli (https://dev.mysql.com/doc/mysql-shell-excerpt/5.7/en/)redis
- Redis cli (https://redis.io/topics/rediscli/)spruce
- YAML templating tool, for Bosh deployment manifests generation (https://github.com/geofffranks/spruce)terraform
- Terraform cli (https://www.terraform.io/)vendir
- Define and fetch components to target directory (https://github.com/vmware-tanzu/carvel-vendir/)yarn
- Package manager (https://yarnpkg.com/fr/)ytt
- YAML Templating Tool (https://github.com/k14s/ytt/)
Pull the image from github container registry:
docker pull ghcr.io/orange-cloudfoundry/orange-cf-bosh-cli:<image_tag>
Clone the repository:
git clone https://github.com/orange-cloudfoundry/orange-cf-bosh-cli.git
Then, build the image:
docker build -t cf-bosh-cli:<image_tag> .
Note:
When connected, you can see cli/tools/aliases list withtools
command from shell interface.
Launch the image (don't miss to assign an host port to the container ssh port 22) :
docker run --name bosh-cli -d -p 2222:22 -v /home/bosh -v /data -e "SSH_PUBLIC_KEY=<path_to_your_public_ssh-rsa_key>" orangecloudfoundry/orange-cf-bosh-cli
Then, log into the container with ssh :
ssh -p 2222 -i <path_to_your_rsa_private_key> bosh@localhost
The password is completely disabled. By default, the file containing the public key ~/.ssh/authorized_keys
is overwrited after container restart or update.
Another option is to deploy the container threw the "Docker Bosh Release" (https://github.com/cloudfoundry-community/docker-boshrelease).
In the following example:
- We deploy 1 instance of the container.
- The homedirectory of the bosh account is a private docker volume.
- The directory /data is a shared docker volume (from the container called "data_container").
- The first container has a provided public key.
Bosh deployment manifest exmple:
deployment_name = 'bosh-cli'
static_ip = 'xx.xx.xx.xx'
dns_servers = 'xx.xx.xx.xx'
http_proxy = 'http://proxy:3128'
https_proxy = 'http://proxy:3128'
docker_image = 'orangecloudfoundry/orange-cf-bosh-cli'
docker_tag = 'latest'
---
name: <deployment_name>
director_uuid: <director_uuid>
releases:
- name: docker
version: latest
compilation:
workers: 1
network: default
reuse_compilation_vms: true
cloud_properties:
cpu: 1
disk: 8096
ram: 2048
update:
canaries: 0
canary_watch_time: 30000-1200000
update_watch_time: 30000-1200000
max_in_flight: 32
serial: false
networks:
- name: default
type: manual
subnets:
- range: xx.xx.xx.xx/xx
reserved:
- xx.xx.xx.xx-xx.xx.xx.xx
static:
- <static_ip>
gateway: xx.xx.xx.xx
dns: [<dns_servers>]
cloud_properties:
name: NET
resource_pools:
- name: default
stemcell:
name: xxx
version: latest
network: default
cloud_properties:
ram: 512
disk: 4_096
cpu: 2
jobs:
- name: bosh-cli
templates:
- name: docker
- name: containers
instances: 1
resource_pool: default
persistent_disk: 102_400
networks:
- name: default
default: [dns, gateway]
static_ips:
- <static_ip>
properties:
containers:
- name: data_container
image: <docker_image>:<docker_tag>
bind_volumes:
- "/data"
volumes:
- "/etc/ssl/certs:/etc/ssl/certs:ro"
- "/var/vcap/data/tmp/bosh-cli:/var/tmp/bosh-cli:ro"
- name: user1_bosh_cli
image: <docker_image>:<image_tag>
hostname: user1_bosh_cli
env_vars:
- "SSH_PUBLIC_KEY=<your_ssh-rsa_public_key>"
bind_ports:
- "2222:22"
volumes:
- /home/bosh
depends_on:
- data_container
volumes_from:
- data_container
- name: user2_bosh_cli
image: <docker_image>:<image_tag>
hostname: user2_bosh_cli
env_vars:
- "SSH_PUBLIC_KEY=<your_ssh-rsa_public_key>"
bind_ports:
- "2223:22"
volumes:
- /home/bosh
depends_on:
- data_container
volumes_from:
- data_container
Then, log into the container you want with ssh :
ssh -i <path_to_your_rsa_private_key> -p 2222 bosh@docker.bosh.release.deployment
To log into first container (replace docker.bosh.release.deployment with IP or dns name of docker host deployed using bosh release).
Shortcut | Description |
---|---|
F1 |
View kustomizations |
F2 |
View namespaces |
F3 |
View pods |
F4 |
View deployments |
F5 |
View daemonsets |
F6 |
View services |
F7 |
View helmreleases |
F8 |
View configmaps |
F1 |
View secrets |
Shortcut | Description |
---|---|
<0> |
Select all objects |
<?> |
Help |
<:q> |
Quit |
<enter> |
View |
<esc> |
Back |
<backtab> |
Field Previous |
<space> |
Mark raw |
<tab> |
Next field |
</term> |
Filter mode |
Shortcut | Description | Scope | Plugin |
---|---|---|---|
<a> |
Attach | pod, container | |
<b> |
Bench Run/Stop | service, portforwards | |
<c> |
Copy | node, pod, container | |
<d> |
Describe | all | |
<e> |
Edit | all | |
<f> |
Show PortForward | pod, container | |
<g> |
Goto Top | all | |
Namespace inventory | namespaces | X | |
<h> |
Left | all | |
<i> |
Set Image | ||
<j> |
Down | all | |
<k> |
Up | all | |
<l> |
Right/Logs | all | |
<m> |
Mark | ||
<n> |
Copy Namespace | pod | |
Flux inventory | namespaces | X | |
<o> |
Show Node | pod | |
<p> |
Logs Previous | ||
PSQL shell | cluster | X | |
<r> |
Toggle Auto-Refresh | ||
<s> |
Shell | ||
Cnpg status | cluster | X | |
<t> |
Trigger cron | ||
Run argo workflow | workflowtemplates | X | |
<u> |
Use/UsedBy | ||
<v> |
Vulnerabilities | ||
Helm values | helm | X | |
<w> |
Watch events | all | X |
<x> |
Decode | secrets | |
<y> |
YAML | ||
<z> |
zorg |
Shortcut | Description | Scope | Plugin |
---|---|---|---|
<ctrl-a> |
Aliases | ||
<ctrl-b> |
Page Up | ||
<ctrl-d> |
Delete | ||
<ctrl-e> |
Toggle Header | ||
<ctrl-f> |
Page Down | ||
<ctrl-g> |
Toggle Crumbs | ||
<ctrl-j> |
Display dependencies | X | |
<ctrl-k> |
Kill | ||
<ctrl-l> |
Display logs | deployment, daemonset, pod, container | X |
<ctrl-q> |
Sort MEM/L | ||
<ctrl-r> |
Refresh/Reload | ||
<ctrl-s> |
Save | ||
<ctrl-u> |
Command Clear | ||
<ctrl-w> |
Toggle Wide | ||
<ctrl-x> |
Sort CPU/L | ||
<ctrl-\> |
Mark Clear | ||
<ctrl-space> |
Mark Range |
Shortcut | Description | Scope | Plugin |
---|---|---|---|
<shift-a> |
Sort Age | all | |
<shift-b> |
Sort Binding | policy | |
Display shell cmd | all | X | |
<shift-c> |
Sort CPU | all | |
Show certs | secrets | X | |
<shift-d> |
Sort desired | ds/rs | |
Add debug container | containers | X | |
<shift-e> |
Sort errors | popeye | |
<shift-f> |
Port-Forward | containers, events | |
<shift-g> |
Goto Bottom | all | |
<shift-h> |
Helm inventory | helmreleases | X |
<shift-i> |
Sort IP | pods/popeye | |
<shift-j> |
NOT USED | ||
<shift-k> |
Sort Kind | workloads, groups, users | |
<shift-l> |
Sort MEM | ||
<shift-m> |
Sort Name | ||
<shift-n> |
Sort Name | ||
<shift-o> |
Sort Node | ||
<shift-p> |
Sort Ready | ||
<shift-q> |
Blame | all | X |
<shift-r> |
Sort Ready | ||
<shift-s> |
Sort Status | all | |
List suspended | helmreleases, kustomizations | X | |
Certificate status | certificates | X | |
<shift-t> |
Sort Restart | all | |
Suspend/resume | helmreleases, kustomizations, gitrepositories, terraform | X | |
<shift-u> |
Sort UpToDate | dp/pf/ds | |
<shift-v> |
Sort Volume | reference/pvc/img_scan | |
<shift-w> |
Sort Warning | popeye | |
<shift-x> |
Sort CPU/R | pod | |
<shift-y> |
NOT USED | ||
<shift-z> |
Sort MEM/R | pod | |
Flux reconcile | gitrepositories, helmreleases, helmrepositories, kustomizations, ocirepositories, terraform | X |