Hey? Is anyone familiar with how to generate JSON Web Tokens that can be used by Kolide Fleet, and Kolide Launcher? https://jwt.io/ The installer for Kolide Fleet requires a JWT token that hosts will use for enrolment, but the documentation doesn't mention how to generate one: https://github.com/kolide/fleet/blob/545bc6fccb278d9489914f36b85d879b1a0ba17d/docs/infrastructure/configuring-the-fleet-binary.md#auth_jwt_key I'm new to JWT, and am currently in the process of writing an Ansible playbook which can be used to deploy Kolide Fleet, and osquery via the Kolide Launcher.

It’s just looking for a random string to use as the secret key for the jwt tokens it generates.

Sweet, so

auth_jwt_key

is not actually the JWT token, it's the secret key that's used to create the JWT token?

Your first point is correct. This key is only used to generate JWT tokens that are used for user auth. The enroll secret is randomly generated, but you could perhaps write a script that updates the value in the db.

Here's how I'm doing it with Docker: Generate a string to be used for JWT:

openssl rand -base64 32

Paste that string into

.env

as

KOLIDE_AUTH_JWT_KEY

Awesome, thanks @zwass, @wtheaker! 😄 I was able to retrieve the token via `fleetctl get enroll-secret`:

# fleetctl config set --address <https://localhost:8080>
# fleetctl config set --rootca /opt/kolide/fleet/tls/fleet.crt
# fleet login
# fleetctl login
Log in using the standard Fleet credentials.
Email: <email>
Password:
[+] Fleet login successful and context configured!
# fleetctl get enroll-secret
sVhrv<...>8t6Ff

And it looks like JWT tokens are stored in the

kolide.sessions

table - so, I should be able to read the contents of this table before I try to enrol agents with the Kolide Fleet server I'm standing up.

Jwt is not something that you ever need to deal with directly. Agents do not use user sessions, they enroll with the enroll secret and are issued node keys.

Ah, gotcha, not familiar with the protocol, sorry, I'm trying to figure out how to get the enrol secret, I keep misusing terminology in weird ways...