Skip to content

Latest commit

 

History

History
65 lines (45 loc) · 1.55 KB

cli.md

File metadata and controls

65 lines (45 loc) · 1.55 KB

CLI Tool

JVS is not an official Google product.

jvsctl facilitates the justification verification flow provided by abcxyz/jvs

Installation

go install github.com/abcxyz/jvs/cmd/jvsctl

Or download from a release.

Usage

jvsctl [command]

Run jvsctl -h for details of available flags.

Config

The jvsctl CLI accepts flags for all its configuration. To avoid repetition, some flags can be defined as environment variables. For example, to always use the same justification server for minting tokens, add the following to your .bashrc or .zshrc file:

export JVSCTL_SERVER_ADDRESS="https://jvs.corp.internal:8080"

Similarly, you can set the endpoint for getting the JWKS for verification:

export JVSCTL_JWKS_ENDPOINT="https://keys.corp.internal:8080/.well-known/jwks"

For the full list of options that correspond to your release, check the help output. Append -h to any command or subcommand to see detailed usage instructions:

jvsctl -h
jvsctl token -h

To increasing the logging verbosity or to change the logging format:

export JVS_LOG_LEVEL="debug"
export JVS_LOG_FORMAT="text"

Authentication

If you installed JVS using the provided Terraform module as described in the README, you can use gcloud generated ID token for authentication. E.g.

jvsctl token create --auth-token $(gcloud auth print-identity-token) -justification "just testing"