SSH

SSH keypairs are used to securely access compute instances.

A keypair contains:

a public key stored in redu.cloud
a private key stored on your machine

When creating an instance, the public key is injected automatically.

Requirement

A keypair is required when creating an instance.

If you don’t have one yet:

Keypairs Guide

List keypairs

Retrieve SSH keypairs available to the authenticated user.

Endpoint


GET /v1/keypairs

Example

cURL


curl https://api.redu.cloud/v1/keypairs \
  -H "x-api-key: YOUR_API_KEY"

Fetch


const response = await fetch("https://api.redu.cloud/v1/keypairs", {
  headers: {
    "x-api-key": "YOUR_API_KEY",
  },
});
 
if (!response.ok) {
  throw new Error(`HTTP ${response.status}`);
}
 
const data = await response.json();
console.log(data);

Axios


import axios from "axios";
 
const { data } = await axios.get("https://api.redu.cloud/v1/keypairs", {
  headers: {
    "x-api-key": "YOUR_API_KEY",
  },
});
 
console.log(data);

Python


import requests
 
resp = requests.get(
    "https://api.redu.cloud/v1/keypairs",
    headers={"x-api-key": "YOUR_API_KEY"},
)
 
resp.raise_for_status()
print(resp.json())

Go


package main
 
import (
	"fmt"
	"io"
	"net/http"
)
 
func main() {
	req, _ := http.NewRequest("GET", "https://api.redu.cloud/v1/keypairs", nil)
	req.Header.Set("x-api-key", "YOUR_API_KEY")
 
	client := &http.Client{}
	resp, err := client.Do(req)
	if err != nil {
		panic(err)
	}
	defer resp.Body.Close()
 
	body, _ := io.ReadAll(resp.Body)
	fmt.Println(string(body))
}

Successful response


{
  "items": [
    {
      "name": "redu-cli-key",
      "public_key": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIExamplePublicKeyHere user@machine",
      "fingerprint": "ae:91:8e:c0:76:a5:c2:23:74:4f:f5:e0:46:d8:41:f8"
    }
  ],
  "next_cursor": null
}

Fields

Field	Type	Description
name	string	Keypair name (used when creating instances)
public_key	string	Public SSH key stored in redu.cloud
fingerprint	string	Public key fingerprint

Security notes

SSH access is controlled by security groups
Restrict access to port 22 where possible
Prefer private networks + bastion hosts for production setups

See Security Groups

Errors

401 Unauthorized


{
  "error": {
    "code": "unauthorized",
    "message": "Invalid API key"
  }
}

403 Forbidden

The API key does not have access to the requested resource.