This is a Genesis Kit for the jumpbox-boshrelease. It creates a VM with persistent users, that can be used as a starting point for connecting to infrastructure internal to a VPC/Virtual Network in the IaaS.
The jumpbox contains a multitude of utilities useful for managing and interacting with BOSH, Cloud Foundry, Concourse, and other related components.
To use it, you don't even need to clone this repository! Just run the following (using Genesis v2):
# create a jumpbox-deployments repo using the latest version of the jumpbox kit
genesis init --kit jumpbox
# create a jumpbox-deployments repo using v1.0.0 of the jumpbox kit
genesis init --kit jumpbox/1.0.0
# create a my-jumpbox-configs repo using the latest version of the jumpbox kit
genesis init --kit jumpbox -d my-jumpbox-configs
Once created, refer to the deployment repo's README for information on creating and managing your jumpbox deployment.
The kit now features robust user management capabilities:
- Add users from GitHub/GitLab SSH keys with a simple command
- Import SSH keys from local files or directories
- Dynamically manage users without modifying deployment manifests
Example: genesis do my-env -- users add github/username
See the User Management documentation for details.
The kit now supports STACKIT as an IaaS provider, joining the existing support for AWS, vSphere, and OpenStack. STACKIT configuration follows similar patterns to OpenStack but with specific considerations for networking and security groups.
The addon system has been completely refactored to use modular Perl components, improving maintainability and extensibility. All addon commands now use a consistent interface, making them easier to use and extend.
This kit bundles an inventory errand, on the main jumpbox
instance, so that you can validate the installation and also get
information about the versions of things installed. To run it:
bosh run-errand inventory
This Genesis Kit supports the following Infrastructure-as-a-Service providers:
- Amazon Web Services (AWS)
- VMware vSphere
- OpenStack
- STACKIT
See the IaaS configuration documentation for details on each provider.
dev-tools- Include development build tools (compilers, etc.)bastion- Dual-home a jumpbox as a bastion hostopenvpn- Provide VPN access to internal infrastructure
inventory- Run the inventory errand against the deploymentssh- SSH into the jumpbox (interactively)who- See who is logged in to the jumpboxusers- Manage jumpbox users from various sources (GitHub, GitLab, local)
When openvpn is enabled:
certs- List all VPN certificatesissue-cert- Issue a VPN certificate to a userrevoke-cert- Revoke a VPN certificaterenew-cert- Renew a VPN certificate without changing the keyrenew-all-certs- Renew all VPN certificatesreissue-cert- Reissue a VPN certificate with a new keygenerate-vpn-config- Generate a client certificate and configuration
See the Addon Commands documentation for detailed usage.
For more in-depth documentation:
- Manual - Complete parameter and feature reference
- User Management - Detailed guide on managing users
- IaaS Configurations - Provider-specific configuration guides
- Addon Commands - Comprehensive guide to all addon commands