Connect Smallstep to Lutril
Lutril connects to Smallstep with a bearer API token and only ever reads: it lists your SSH users, groups, grants and hosts to show who can reach which machines and who holds sudo. A read-only token is enough. You can optionally set the API base URL and the prefix of the groups Lutril should govern.
Access requested
- Bearer API token with READ scopes only - Lutril makes no write calls to Smallstep
- Reads /users, /groups, /grants and /hosts to derive who can reach which hosts, and with sudo or without
Setup steps
- 1
Log in to the Smallstep Dashboard.
Platform API reference - 2
Open the Settings section in the bottom left menu.
- 3
Click Add a Token, give it a descriptive title, choose the validity period, and select READ scopes only.
- 4
Copy the API Token Secret (it is shown only once). In Lutril, connect Smallstep and paste the token. Optionally set the API base URL, and the governed group prefix if your SSH groups are not named "Smallstep - ...".
Official docs
Sign in to Lutril to connect Smallstep, or book a demo and we set it up with you. No slides.