fixes 'ValueError: too many values to unpack' for bless_client args#30
Closed
mayn wants to merge 67 commits intolyft:lyft_basefrom
mayn:issue-blessclient
Closed
fixes 'ValueError: too many values to unpack' for bless_client args#30mayn wants to merge 67 commits intolyft:lyft_basefrom mayn:issue-blessclient
mayn wants to merge 67 commits intolyft:lyft_basefrom
mayn:issue-blessclient
Conversation
To prevent users from issuing certs for another user, authenticate the requested username. Using kmsauth (https://github.com/lyft/python-kmsauth) the user can be in a separate AWS account, as long as the Lambda is allowed to decrypt using the configured KMS key.
* Allow bless_client.py to use ~/.aws/credentials. * Use LogType=None because the logs generally live in another account. * Support specification of multiple bastion ips and include the bastion ips in the source-address Critical Options
To prevent users from issuing certs for another user, authenticate the requested username. Using kmsauth (https://github.com/lyft/python-kmsauth) the user can be in a separate AWS account, as long as the Lambda is allowed to decrypt using the configured KMS key.
* Allow bless_client.py to use ~/.aws/credentials. * Use LogType=None because the logs generally live in another account. * Support specification of multiple bastion ips and include the bastion ips in the source-address Critical Options
…ervice [SEC-619] use single name for kmsauth service
Bump kmsauth version to 0.1.7, update all included libs
[SEC-634] Added a doc for deploying lambda
Kmsauth refactor, add us-west-2 keys
fixed typos in lyft readme
Updated kmsauth key
Added option to add test user to bless lambda
Added info line to print request immediately after lambda invocation
Updated setup.py
Removed aws lambda libs and configs from public repo
[SEC-869] Catch anticipated kmsauth errors
updated log line
Fixed failing test
Catch service unavailable exception
Catch validation error
Stype
pushed a commit
that referenced
this pull request
Mar 15, 2017
fixes #30 : add coveralls for test coverage reporting
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
when passing in a kmsauth token as part of the arguments, bless client will generate an error.