Adding a JWT Token To a Configuration File

When running lbcli commands, the jwt token must be provided via the -J variable, like this: lbcli -J $LIGHTOS_JWT get cluster.

There is another way also, which is to configure the system jwt into a configuration file on the Lightbits server. In this way lbcli commands can be run from that server without the -J variable.

1. After deploying the cluster, grab the system jwt. From the Ansible installation host, the file will be in located in ~/lightos-system-jwt. Show the content of the file with cat:

cat ~/lightos-system-jwt

The output should show the token, as below. Note that the token has been cut for brevity.

export LIGHTOS_JWT=eyJhbGciOi<remaining jwt content>BaFEuMsT9gQNQA

Copy the jwt token portion (everything after "LIGHTOS_JWT="). Note that its long output will span multiple lines of terminal output; however, it should only take up one line in a file.

2. On a Lightbits server, edit /etc/lbcli/lbcli.yaml and append the jwt to the bottom.

jwt: <jwt>

The full content of /etc/lbcli/lbcli.yaml will be similar to this:

output-format: human-readable

dial-timeout: 5s

command-timeout: 60s

insecure-transport: false

insecure-skip-tls-verify: true

debug: false

api-version: 2

logger-max-size-mib: 100

logger-max-backups: 5

logger-max-age-days: 10

endpoint: https://127.0.0.1:443

jwt: eyJhbGciOi<remaining jwt content>BaFEuMsT9gQNQA

##