cyberark / conjur-quickstart

Start securing your secrets and infrastructure by installing Conjur, using Docker and the official Conjur containers on DockerHub.
Apache License 2.0
33 stars 36 forks source link

Quick start flow on website explains flow better at the start #19

Closed izgeri closed 4 years ago

izgeri commented 4 years ago

Based on this discourse post we'd like to add more context to the quick start flow on conjur.org.

From the post (via @JakeQuilty):

I do agree that for a good chunk of the tutorial running the commands from outside seem weird at first. I just think going back and forth would make the tutorial choppier. Maybe another paragraph explaining why it is the way it is?

In this card we'll define improvements we'd like to make to the quick start flow and validate them, and share them with the web team so that the site can be updated.

JakeQuilty commented 4 years ago

Suggested Changes

For the initial set up of the environment, we will be executing our commands in the Docker containers using <code data-lang="shell">docker-compose exec <CONTAINER NAME> <COMMANDS></code>. This enables us to execute commands in multiple containers without leaving our local session. At any point during the tutorial, you may choose to open a shell on the container to run the commands directly. See <a href="https://www.conjur.org/get-started/quick-start/run-demo-app/#step-1">Unit 4: Step 1</a> for an example.
docker-compose ps
Conjur generates the following API keys and stores them in a file, <strong>my_app_data</strong>:
docker-compose exec bot_app bash
<strong>Make sure to replace <code><BotApp Api Key></code> with the API key stored in my_app_data.</strong>

Topics for Discussion

alexkalish commented 4 years ago

I have an additional change to request. After some research, with @h-artzi's help, we realized that OSS doesn't have a master key. Just a data key. The Quick Start needs to be updated to remove the "master" descriptor from this key name, in the following step:

image

Essentially, every reference to "master key" or "master data key" need to be replaced with just "data key". Thanks!