ssh-key-manager

• allows users to set their ssh public keys in their Google GSuite account
• does a periodic sync of all specified groups (members + ssh keys) from Google to AWS s3

server

Required environment variables:

env var	example	desc
SKM_CLIENT_ID	xxx.apps.googleusercontent.com	Google oidc client id
SKM_CLIENT_SECRET	xxxxxxxx	Google oidc client secret
SKM_CALLBACK_URL	https://app/callback	Callback URI where user will be redirected after successful Google interaction
SKM_AWS_BUCKET	bucket-name	AWS s3 bucket name
SKM_SA_KEY_LOC	/etc/skm/sa-key.json	Location on disk where Google service account key is (json format)
SKM_GROUPS	"[email protected]"	comma seperated list of groups that will be synced to s3
SKM_ADMIN_EMAIL	"[email protected]"	A G-Suite admin user

You will also need to configure the appropriate AWS credentials for your environment, as detailed on this page.

client

Use https://github.com/utilitywarehouse/ssh-key-agent on your host to populate authorized_keys