Originally published at orquesta.live/blog/collaborate-without-ssh-secure-your-environment
The traditional model of collaboration in software development often relies heavily on granting SSH access to your environment. While this has been a cornerstone of remote work, it comes with its own set of security and operational challenges. With Orquesta, we've reimagined this process, allowing teams to work together efficiently without the need for SSH access.
The Traditional SSH Model
SSH has long been the go-to method for developers to access remote servers. By securely logging into your infrastructure, team members can execute commands, deploy applications, and perform a host of critical tasks. However, this model poses several risks:
- Security Risk: Sharing SSH keys increases the attack surface of your environment. Unauthorized access can lead to devastating consequences.
- Operational Overhead: Managing user access and permissions across multiple servers is cumbersome and error-prone.
- Limited Monitoring: Traditional SSH sessions are difficult to monitor in real-time, making it challenging to audit actions effectively.
Orquesta's Agent-Based Collaboration
With Orquesta, we've developed a paradigm shift in collaboration by introducing a local AI agent. Here's how it works:
Installing the Agent
The first step is to install the Orquesta agent on your machine. This agent runs locally, meaning your code and sensitive data never leave your infrastructure. The local nature of the agent ensures that you maintain full control over your environment.
# Example installation command
curl -sSL https://orquesta.live/install | bash
Inviting Team Members
Once the agent is installed, you can easily invite team members to collaborate. Team members submit prompts through the Orquesta dashboard, where each action is transformed into real git commits and deployments.
- No SSH Keys Needed: By handling prompts through the dashboard, your team members never need access to your SSH keys.
- Role-Based Permissions: Fine-grained permissions ensure that only authorized actions are executed, with all activities logged for complete transparency.
Submitting Prompts
Team members can submit prompts directly from the dashboard or even via a Telegram bot. This flexibility means they can work from anywhere without compromising security.
- Prompt Submission: Users write prompts describing the desired actions. The local AI agent interprets these prompts, performing tasks autonomously or with your oversight.
Enhanced Security and Monitoring
Real-Time Monitoring
The Agent Grid feature allows you to monitor dozens of agents from a single screen, complete with live terminal outputs. This real-time visibility ensures that you can oversee all actions as they occur.
Quality Gates and Audit Trails
Orquesta implements quality gates where AI simulates changes before execution. A team lead must sign off on all actions, and every prompt, log, diff, and cost is recorded in a full audit trail.
- Audit Trails: Comprehensive logs provide accountability and traceability, crucial for post-mortem analysis and compliance.
Conclusion
By removing the need for SSH access, Orquesta provides a secure, efficient, and flexible collaboration model. The integration of local AI agents not only safeguards your infrastructure but also streamlines the development process. This approach offers a significant evolution in how we collaborate within development environments, prioritizing both security and efficiency.
