Skip to content

Comments

fixes 'ValueError: too many values to unpack' for bless_client args#30

Closed
mayn wants to merge 67 commits intolyft:lyft_basefrom
mayn:issue-blessclient
Closed

fixes 'ValueError: too many values to unpack' for bless_client args#30
mayn wants to merge 67 commits intolyft:lyft_basefrom
mayn:issue-blessclient

Conversation

@mayn
Copy link

@mayn mayn commented Jan 9, 2017

when passing in a kmsauth token as part of the arguments, bless client will generate an error.

Traceback (most recent call last):
  File "./bless_client.py", line 91, in <module>
    main(sys.argv[1:])
  File "./bless_client.py", line 50, in main
    bastion_command, public_key_filename, certificate_filename = argv
ValueError: too many values to unpack

Chris Steipp and others added 30 commits August 1, 2016 15:27
To prevent users from issuing certs for another user, authenticate the
requested username. Using kmsauth (https://github.com/lyft/python-kmsauth)
the user can be in a separate AWS account, as long as the Lambda is allowed
to decrypt using the configured KMS key.
* Allow bless_client.py to use ~/.aws/credentials.
* Use LogType=None because the logs generally live in another account.
* Support  specification of multiple bastion ips and include the bastion
ips in the source-address Critical Options
To prevent users from issuing certs for another user, authenticate the
requested username. Using kmsauth (https://github.com/lyft/python-kmsauth)
the user can be in a separate AWS account, as long as the Lambda is allowed
to decrypt using the configured KMS key.
* Allow bless_client.py to use ~/.aws/credentials.
* Use LogType=None because the logs generally live in another account.
* Support  specification of multiple bastion ips and include the bastion
ips in the source-address Critical Options
…ervice

[SEC-619] use single name for kmsauth service
Bump kmsauth version to 0.1.7, update all included libs
[SEC-634] Added a doc for deploying lambda
Kmsauth refactor, add us-west-2 keys
vivianho and others added 27 commits September 30, 2016 16:24
Added option to add test user to bless lambda
Added info line to print request immediately after lambda invocation
Removed aws lambda libs and configs from public repo
[SEC-869] Catch anticipated kmsauth errors
@Stype Stype closed this in 7271307 Mar 15, 2017
Stype pushed a commit that referenced this pull request Mar 15, 2017
fixes #30 : add coveralls for test coverage reporting
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants