Package: chaim-cli
Centrica Chaim AWS Accounts CLIThis is the code for the command line utilitycca.cca is a re-imagining of the chaim cli using the click parameter parsing
python module.<a name='version>Changelogv2.5.0 Display role and region when listing managed accountsv2.4.0 Allow receiving and passing the Slack Workspace Id in the chaim
credentials requests.InstallLinuxMac OSXUpgradeccacca sub-commandsaccountdeleteguigsoinitlistlistalllistparkparkrenewunparkurlversionInstallThe chaim-cli is a python 3 application. It is recommended to install into your
local, users, python packages using pip.  If this is your first local python
package then you will need to adjust your path so that the shell can find it.echo 'export PATH=${HOME}/.local/bin:${PATH}' >>${HOME}/.bashrcLinuxThese instructions are for ubuntu and it's derivatives.  For other
distributions the process is similiar, though probably with different package
names.  You will need to have a version of python3 installed and a pip program
that is python3 aware.Install python3For ubuntu pre 18.04 you will need to install python3 and it's associated pip
application.  The easiest way to do this is:sudo apt install python3-pipwhich will pull in everything required.Install ccaTo install the chaim-cli:pip3 install chaim-cli --upgrade --user --no-cache-dirUpdate PATHOnce installed you will want to add$HOME/.local/binto your path, if it
isn't already there:echo 'export PATH=${HOME}/.local/bin:${PATH}' >>${HOME}/.bashrcTestingTo check that all went well:cca versionShould give you the current version number of the chaim-cli.Mac OSXInstall python3Recently the folks that manage homebrew changed the default python, which
conflicts with the python supplied by the OS.  See this home brewdiscussion.
So, to get python3 (and keep python2) you now need to do:brew upgrade python
brew install python2which will install python3 and the latest released version of python2.Install ccaTo install the chaim-cli:pip install chaim-cli --upgrade --user --no-cache-dirUpdate PATHOnce installed you will want to add$HOME/Library/.Python/3.7/binto your path, if it
isn't already there (adjust the version to suit your circumstances):echo 'export PATH=${HOME}/Library/Python/3.7/bin:${PATH}' >>${HOME}/.bashrcTestingTo check that all went well:cca versionShould give you the current version number of the chaim-cli.Upgradepip3 install chaim-cli --upgrade --usercca$ cca --help
Usage: cca [OPTIONS] COMMAND [ARGS]...

Options:
  --help  Show this message and exit.

Commands:
  account       Retrieve credentials for an account
  delete        delete an accounts credentials
  gso           obtains a console session url, logs out of...
  gui           obtains a console session url and opens a...
  init          Initialises the application for use with...
  list          list all registered accounts and their expiry...
  listall       list all accounts available to chaim
  listpark      list of parked accounts
  park          removes account from credentials and parks it...
  renew         Renews all account credentials
  setautorenew  sets the percentage of time remaining before...
  unpark        returns an account from parking to...
  url           obtains a console session url and copies it...
  versioncca sub-commandsaccount$ cca account --help
Usage: cca account [OPTIONS] ACCOUNT

  Retrieve credentials for ACCOUNT account

Options:
  -r, --role TEXT         optional the role to assume for this account
                          default: rro
  -d, --duration INTEGER  optional duration must be between 1-12 or 900-43,200
                          default 1
  -a, --alias TEXT        optional alias for the account name, to be used as
                          the profile name
  -D, --default           optional set this account to be the default account
                          profile to use
  -R, --region TEXT       optional region
  -T, --terrible          Add support for Terraform/Ansible to the credentials
                          file
  --help                  Show this message and exit.The-T|--terribleswitch copies theaws_session_tokenkey to theaws_security_tokenkey.
This ensures that products such as Ansible and Terraform which still use theaws_security_tokenwill continue to work.deleteDelete credentials for the named account(s).guiThis command generates a console session url and opens a browser window to it.
The credentials will be automatically renewed first.gsoThis command generates a console session url, attempts to logout of any current
session, and opens a browser window to the url.
The credentials will be automatically renewed first.Note: There doesn't seem to be any way to access the browser tab with AWS
running in it, so this process first opens a new tab to issue the logout
command, then a 2nd new tab to log you into the new account.  This will leave
you with 2 extra tabs, sorry.initInitialises the application with a user token obtained from Slack.  Either
supply the base64 encoded info from Slack as a parameter, or use the command
bare to be asked the pertinent questions.cca init YXBpPTh4eHNDczJmV4cGly...JlZ2lvbj1ldS13ZXN0LTE=
cca has been re-initialised.
Your token will expire in 29 days, 21 hours, 19 minutes and 52 seconds.orcca init
api (8xxssu8fs7):
username (chris.allison):
usertoken: ad2f05ed-78d7-xxxx-DDDD-8d90c64f9473
tokenexpires: 1536139015
stage (prod):
region (eu-west-1):
cca has been re-initialised.
Your token will expire in 29 days, 21 hours, 18 minutes and 58 seconds.listCurrent list of accounts that are managed by cca, the role and region and their expiry times.
This also shows which is the default account, and the percentage of time left.listallFull list of all available accounts.listparkList accounts that have been parked.$ cca listpark
hbetaus
hprodus
hprod
hbeta
hdev7parkRemove an account from credentials and park it and its definition for later
use.$ cca park extbackup
extbackup account has been parkedrenewThis will renew all managed accounts.$ cca renew
ignoring awsbilling as it is not managed by cca
account: secadmin-prod, alias: secadmin-prod, role: apu, duration: 4
Updated section secadmin-prod with new keys
updated default account
retrieval took 5 seconds.
account: chsre-dev, alias: chsre-dev, role: apu, duration: 4
Updated section chsre-dev with new keys
retrieval took 6 seconds.unparkRe-enable an account and automatically renew its session so that it is
available for immediate use.$ cca unpark hdev7
account: honeycomb-dev7, alias: hdev7, role: mpu, duration: 1
Updated section honeycomb-dev7 with new keys
retrieval took 7 seconds.urlThis command generates a console session url and copies it to the clipboard.
The credentials will be automatically renewed first.versionShow the current version of this application.