Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add 'granted request close' subcommand #740

Merged
merged 6 commits into from
Sep 2, 2024

Conversation

ckluy31
Copy link
Contributor

@ckluy31 ckluy31 commented Aug 29, 2024

What changed?

This PR adds the subcommand to granted request which allows a user to close a currently active access request.

Why?

Currently, granted doesn't include functionality do close active access requests. Rather than let them expire naturally, it's been to keep the access requests as short as possible to maintain best security practices.

How did you test it?

AWS profile flag

Scenario 1: I have an active request, and I want to close it.

dgranted request close --aws-profile Sandbox-1/ViewOnlyAccess                                     [15:37:15]
[✔] access to target AWS::Account::"redactNumber" and role ViewOnlyAccess is now closed

Scenario 2: I do not have an active request, but I try to close it.

dgranted request close --aws-profile Sandbox-1/ViewOnlyAccess                                     [15:32:10]
[✘] no active Access Request found for target AWS::Account::"redactNumber" and role ViewOnlyAccess

Request ID flag

Scenario 1: I have an active request, and I want to close it.

dgranted request close --request-id req_2lMJ3HdmVcjzDljf3n0vXAeNYrR
[✔] access request req_2lMJ3HdmVcjzDljf3n0vXAeNYrR is now closed

Scenario 2: I do not have an active request, but I try to close it.

dgranted request close --request-id req_2lMIoNWOIMXm3dMaKCZGM90gYQS
[✘] access request req_2lMIoNWOIMXm3dMaKCZGM90gYQS has no grants that need to be closed

Potential risks

Is patch release candidate?

Link to relevant docs PRs

pkg/granted/request/close.go Outdated Show resolved Hide resolved
pkg/granted/request/close.go Outdated Show resolved Hide resolved
pkg/granted/request/close.go Outdated Show resolved Hide resolved
@ckluy31 ckluy31 force-pushed the calvin/cf-3550-add-granted-request-close-subcommand branch from 2b8cbdf to 07b5b25 Compare August 30, 2024 03:19
@chrnorm chrnorm merged commit 7da13e4 into main Sep 2, 2024
3 checks passed
@chrnorm chrnorm deleted the calvin/cf-3550-add-granted-request-close-subcommand branch September 2, 2024 17:10
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Sep 23, 2024
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [common-fate/granted](https://github.com/common-fate/granted) | minor | `v0.32.0` -> `v0.33.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>common-fate/granted (common-fate/granted)</summary>

### [`v0.33.0`](https://github.com/common-fate/granted/releases/tag/v0.33.0)

[Compare Source](common-fate/granted@v0.32.0...v0.33.0)

This release adds [support for XDG directories](common-fate/granted#726) (thankyou [@&#8203;chris3ware](https://github.com/chris3ware)!), and adds a new `granted request close` command for closing Just-In-Time Access Requests in Common Fate.

#### What's Changed

-   if we run into the issue with activation, print the diagnostics by [@&#8203;meyerjrr](https://github.com/meyerjrr) in common-fate/granted#734
-   Open the common fate console by [@&#8203;JoshuaWilkes](https://github.com/JoshuaWilkes) in common-fate/granted#732
-   Add support for custom browser launch templates by [@&#8203;chrnorm](https://github.com/chrnorm) in common-fate/granted#731
-   Add messaging when the proxy command cannot connect to the target in SSM by [@&#8203;JoshuaWilkes](https://github.com/JoshuaWilkes) in common-fate/granted#735
-   Add support for XDG directories by [@&#8203;chris3ware](https://github.com/chris3ware) in common-fate/granted#726
-   Add 'granted request close' subcommand by [@&#8203;ckluy31](https://github.com/ckluy31) in common-fate/granted#740
-   Fix success message when access request is closed by [@&#8203;ckluy31](https://github.com/ckluy31) in common-fate/granted#743
-   Fix nil pointer error in registry sync when merging fails with an unknown error by [@&#8203;JoshuaWilkes](https://github.com/JoshuaWilkes) in common-fate/granted#744
-   Granted login deprecation message should be clearer by [@&#8203;ckluy31](https://github.com/ckluy31) in common-fate/granted#745

#### New Contributors

-   [@&#8203;chris3ware](https://github.com/chris3ware) made their first contribution in common-fate/granted#726

**Full Changelog**: common-fate/granted@v0.32.0...v0.33.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants