bless

README

versent bless client

This project is a port of the netflix/bless/bless_client.

usage

usage: versent-bless [<flags>] <command> [<args> ...]

A command line client for netflix bless.

Flags:
  --help   Show context-sensitive help (also try --help-long and --help-man).
  --debug  Enable debug mode.

Commands:
  help [<command>...]
    Show help.

  login <region> <lambda_function_name> <bastion_user> <bastion_user_ip> <remote_usernames> <bastion_ips> <bastion_command> <public_key_to_sign> <certificate_filename> [<kmsauth_token>]
    Login and retrieve a key.

license

This code is released under MIT License.

Documentation

Index

• func ConfigureAws(config *aws.Config)
• func Debug(message string, args ...interface{})
• func LoadPublicKey(publicKey string) ([]byte, error)
• func SetDebug(enable bool)
• func ValidatePublicKey(publicKeyData []byte) (string, error)
• func WriteCertificate(certificateFilename string, certificateContent string) error
• type Payload
• type Result
  • func InvokeBlessLambda(region, lambdaFunctionName *string, payloadJSON []byte) (*Result, error)

Functions

func ConfigureAws

func ConfigureAws(config *aws.Config)

ConfigureAws enable override of the default aws sdk configuration

func Debug

func Debug(message string, args ...interface{})

Debug write debug messages if it is enabled

func LoadPublicKey

func LoadPublicKey(publicKey string) ([]byte, error)

LoadPublicKey load the public key from the supplied path

func SetDebug

func SetDebug(enable bool)

SetDebug enable or disable debugging

func ValidatePublicKey

func ValidatePublicKey(publicKeyData []byte) (string, error)

ValidatePublicKey validate the public key

func WriteCertificate

func WriteCertificate(certificateFilename string, certificateContent string) error

WriteCertificate write the generated certificate out to a file

Types

type Payload

type Payload struct {
	BastionUser     string `json:"bastion_user"`
	BastionUserIP   string `json:"bastion_user_ip"`
	RemoteUsernames string `json:"remote_usernames"`
	BastionIps      string `json:"bastion_ips"`
	BastionCommand  string `json:"command"`
	PublicKeyToSign string `json:"public_key_to_sign"`
	KmsAuthToken    string `json:"kms_auth_token,omitempty"`
}

Payload used to encode request payload for bless lambda

type Result

type Result struct {
	Certificate string `json:"certificate,omitempty"`
}

Result used to decode response from bless lambda

func InvokeBlessLambda

func InvokeBlessLambda(region, lambdaFunctionName *string, payloadJSON []byte) (*Result, error)

InvokeBlessLambda invoke the bless lambda function