Code

Refresh from upstream #40

Code

Open

surbhishah wants to merge 91 commits intolyft_baselyft/bless:lyft_basefrom refreshhhlyft/bless:refreshhhCopy head branch name to clipboard

Commits

Commits on Dec 22, 2016

• fixes #30 : add coveralls for test coverage reporting

  

  Matthew Aynalem

  committed
  7271307

  Copy full SHA for 7271307

Commits on Feb 15, 2017

• Make the 'extensions' included in the cert configurable

  nielslaukens

  committed
  ba6dc07

  Copy full SHA for ba6dc07

Commits on Feb 24, 2017

• Moving pinned packages out of setup.py and into requirements.txt.

  russell-lewis

  committed
  17e5336

  Copy full SHA for 17e5336

• Adding a few changes after syncing with lyft's BLESS fork.

  Show description for bc6b3bf
  russell-lewis

  committed
  bc6b3bf

  Copy full SHA for bc6b3bf

• Bumping version number to reflect the change in the BLESS request of bastion_ip to bastion_ips.

  Show description for 9962238
  russell-lewis

  committed
  9962238

  Copy full SHA for 9962238

• Merge branch 'lyft_base' of github.com:lyft/bless into lyft-sync

  russell-lewis

  committed
  a960865

  Copy full SHA for a960865

• Updating the "test_user" certificate test case.

  russell-lewis

  committed
  5f264d5

  Copy full SHA for 5f264d5

Commits on Mar 1, 2017

• Merge remote-tracking branch 'vrtdev/configurable-extensions' into lyft-sync

  russell-lewis

  committed
  d8befc1

  Copy full SHA for d8befc1

• Updates after pulling in PR#33. Renamed extensions to certificate_extensions and explicitly set the defaults instead of needing ssh_certificate_builder.py to set them.

  russell-lewis

  committed
  79c3463

  Copy full SHA for 79c3463

• Merge pull request #31 from mayn/ISSUE-30

  Show description for 0f68e42
  russell-lewis

  authored
  0f68e42

  Copy full SHA for 0f68e42

• Merge branch 'master' of github.com:Netflix/bless into lyft-sync

  russell-lewis

  committed
  19cf02f

  Copy full SHA for 19cf02f

• Adding the coverage report to the travis bulid output.

  russell-lewis

  committed
  9f75ccf

  Copy full SHA for 9f75ccf

Commits on Mar 7, 2017

• Additional commit for BLESS v.0.2.0 which changes the format of BLESS Requests and the lambda responses.

  Show description for 909d955
  russell-lewis

  committed
  909d955

  Copy full SHA for 909d955

• Merge pull request #38 from russell-lewis/addressing-open-issues

  Show description for bf9a364
  russell-lewis

  authored
  bf9a364

  Copy full SHA for bf9a364

Commits on Mar 9, 2017

• Add support to compile dependencies in container

  

  diasjorge

  authored and

  Jorge Dias

  committed
  4d2e674

  Copy full SHA for 4d2e674

• Copy lib64 packages

  

  Jorge Dias

  committed
  c387868

  Copy full SHA for c387868

• Update README.md

  diasjorge

  authored
  07c9866

  Copy full SHA for 07c9866

Commits on Mar 10, 2017

• Merge pull request #41 from diasjorge/patch-1

  Show description for fcde42a
  russell-lewis

  authored
  fcde42a

  Copy full SHA for fcde42a

• Merge pull request #40 from diasjorge/compilation

  Show description for b4eadab
  russell-lewis

  authored
  b4eadab

  Copy full SHA for b4eadab

Commits on Mar 15, 2017

• [HOTFIX] Fixes while merge testing

  

  Chris Steipp

  committed
  d8e879d

  Copy full SHA for d8e879d

• Merge pull request #44 from lyft/hotfix-fixes-for-merge

  Show description for 8df7f6d
  russell-lewis

  authored
  8df7f6d

  Copy full SHA for 8df7f6d

Commits on Mar 17, 2017

• Remove unused option 'kms_key_id'

  Show description for 24f4aba
  benbridts

  committed
  24f4aba

  Copy full SHA for 24f4aba

Commits on Mar 21, 2017

• Merge pull request #46 from ikben/unused-option

  Show description for 63cbac9
  russell-lewis

  authored
  63cbac9

  Copy full SHA for 63cbac9

• Decouple configuration from deployment artifact (#45)

  Show description for 62fe7fc
  

  benbridts

  authored and

  russell-lewis

  committed
  62fe7fc

  Copy full SHA for 62fe7fc

• Removing an unneeded reference to kms_key_id. (#47)

  russell-lewis

  authored
  485663c

  Copy full SHA for 485663c

• Add support for debian username validations

  diasjorge

  committed
  21a417b

  Copy full SHA for 21a417b

• Add support for relaxed username validations

  diasjorge

  committed
  b87bbab

  Copy full SHA for b87bbab

• Load username_validation configuration value

  diasjorge

  committed
  329e8dc

  Copy full SHA for 329e8dc

• Refactor username_validation configuration

  Show description for c050a48
  diasjorge

  committed
  c050a48

  Copy full SHA for c050a48

• Set username_validation when calling lambda

  diasjorge

  committed
  9f3c7c1

  Copy full SHA for 9f3c7c1

• Add support to disable username validation

  diasjorge

  committed
  c58b328

  Copy full SHA for c58b328

• Use schema context for username validation

  diasjorge

  committed
  6f91bb6

  Copy full SHA for 6f91bb6

• Add test for username_validation environment value

  diasjorge

  committed
  8e80230

  Copy full SHA for 8e80230

Commits on Mar 22, 2017

• Enhancing PR#43 to include support for configurable remote_usernames validation in addition to bastion_user.

  Show description for 4340737
  russell-lewis

  committed
  4340737

  Copy full SHA for 4340737

• Fixing Netflix#48 and moving the expected ca private key path back to the top level of the published .zip.

  russell-lewis

  committed
  32e4f4b

  Copy full SHA for 32e4f4b

• Replace non word characters in environment key

  diasjorge

  committed
  95693c4

  Copy full SHA for 95693c4

• Merge pull request #51 from diasjorge/fix-invalid-environment-variable

  Show description for e8af1ca
  russell-lewis

  authored
  e8af1ca

  Copy full SHA for e8af1ca

Commits on Mar 23, 2017

• Revising the certifiace key_id to keep consistency in the key[value] format.

  Show description for 1393a84
  russell-lewis

  committed
  1393a84

  Copy full SHA for 1393a84

• Merge pull request #52 from russell-lewis/update-keyid-and-logs

  Show description for 7c025fb
  russell-lewis

  authored
  7c025fb

  Copy full SHA for 7c025fb

Commits on Mar 29, 2017

• Thanks to @Stype:

  Show description for c543416
  russell-lewis

  committed
  c543416

  Copy full SHA for c543416

• Merge pull request #54 from russell-lewis/fix-issue-53

  Show description for 4aef80c
  russell-lewis

  authored
  4aef80c

  Copy full SHA for 4aef80c

Commits on Apr 5, 2017

• Fixing typos in readme.

  russell-lewis

  committed
  d8f6d1e

  Copy full SHA for d8f6d1e

• Merge pull request #56 from russell-lewis/fix-typo

  Show description for a2cf52d
  russell-lewis

  authored
  a2cf52d

  Copy full SHA for a2cf52d

Commits on Apr 6, 2017

• Merge pull request #1 from russell-lewis/PR43_enhancements

  Show description for 6c122ba
  diasjorge

  authored
  6c122ba

  Copy full SHA for 6c122ba

Commits on Apr 19, 2017

• Merge pull request #43 from diasjorge/username_validation_disabled

  Show description for dc02dc7
  russell-lewis

  authored
  dc02dc7

  Copy full SHA for dc02dc7

• Fixing test key paths after merging Netflix#43 .

  russell-lewis

  committed
  d5a1c1f

  Copy full SHA for d5a1c1f

Commits on Jun 8, 2017

• base kmsauth token on bastion_user instead of remote_usernames

  

  djcrabhat

  authored and

  russell-lewis

  committed
  7cd1515

  Copy full SHA for 7cd1515

• enforce that bastion_user == remote_usernames by default. add config to allow different remote_usernames

  

  djcrabhat

  authored and

  russell-lewis

  committed
  9ad57e0

  Copy full SHA for 9ad57e0

• add tests for allowing remote_usernames to differ

  

  djcrabhat

  authored and

  russell-lewis

  committed
  3b268a6

  Copy full SHA for 3b268a6

• eek out some test coverage

  

  djcrabhat

  authored and

  russell-lewis

  committed
  5b452d1

  Copy full SHA for 5b452d1

• make sure all requested remote_usernames are allowed to be used

  Show description for cadd803
  

  djcrabhat

  authored and

  russell-lewis

  committed
  cadd803

  Copy full SHA for cadd803

• Updating the SSH Certificate comment when no public key comment is set, so that it better matches the format used when logging.

  russell-lewis

  committed
  f32b9a1

  Copy full SHA for f32b9a1

• Updating dependencies prior to release.

  russell-lewis

  committed
  d2bee45

  Copy full SHA for d2bee45

Commits on Jun 23, 2017

• Allows username validation against IAM groups

  Show description for fd1d802
  

  hughtopping

  authored and

  Hugh Topping

  committed
  fd1d802

  Copy full SHA for fd1d802

Commits on Nov 29, 2017

• Compressed CA private key support

  avoidik

  committed
  3f37e17

  Copy full SHA for 3f37e17

Commits on Jul 13, 2018

• Fixing Netflix#72 thanks @Immortalin and @tuxinaut .

  russell-lewis

  committed
  ed54668

  Copy full SHA for ed54668

• Add support for loading ED25519 public keys

  

  jnewbigin

  authored and

  russell-lewis

  committed
  cdde67a

  Copy full SHA for cdde67a

• Add certificate builder and test ED25519 signed by RSA

  

  jnewbigin

  authored and

  russell-lewis

  committed
  f1e2a30

  Copy full SHA for f1e2a30

Commits on Jul 14, 2018

• Allowing BLESS lambda to accept ed25519 keys, completing https://gith… (Netflix#74)

  Show description for ba55021
  russell-lewis

  authored
  ba55021

  Copy full SHA for ba55021

Commits on Jul 25, 2018

• Moving BLESS to python 3.6. (Netflix#75)

  Show description for cf26b72
  russell-lewis

  authored
  cf26b72

  Copy full SHA for cf26b72

• Merge branch 'master' into master

  russell-lewis

  authored
  013dd15

  Copy full SHA for 013dd15

• Merge pull request #62 from hughtopping/master

  Show description for cff5544
  russell-lewis

  authored
  cff5544

  Copy full SHA for cff5544

• bless_client.py: fix argv unpacking when using a kmsauth token (#63)

  

  Preston4tw

  authored and

  russell-lewis

  committed
  1e01e1d

  Copy full SHA for 1e01e1d

• Add the FileSync flag to the zip command (Netflix#76)

  

  kubrickfr

  authored and

  russell-lewis

  committed
  467eaa8

  Copy full SHA for 467eaa8

• Make lambda_configs dir optional for publish make target (#69)

  

  acmcelwee

  authored and

  russell-lewis

  committed
  5830630

  Copy full SHA for 5830630

• Adding a blacklisted remote_usernames option. This would prevent particular SSH Authorized Principals from being included in a BLESS certificate.

  russell-lewis

  committed
  87f9de4

  Copy full SHA for 87f9de4

• Refactored BLESS to cache KMS decrypt results for the ca private key password.

  russell-lewis

  committed
  a9ad291

  Copy full SHA for a9ad291

Commits on Jul 26, 2018

• Merge remote-tracking branch 'avoidik/feature-compressed-key'

  Show description for b685728
  russell-lewis

  committed
  b685728

  Copy full SHA for b685728

• Merge pull request #67 from avoidik/feature-compressed-key

  Show description for dfbec61
  russell-lewis

  authored
  dfbec61

  Copy full SHA for dfbec61

Commits on Jul 31, 2018

• Move development to pipenv

  pecigonzalo

  committed
  0b97ba2

  Copy full SHA for 0b97ba2

• Bumping to Release v.0.3.0

  Show description for f82e2a9
  russell-lewis

  committed
  f82e2a9

  Copy full SHA for f82e2a9

Commits on Sep 20, 2018

• Add host cert issue hanlder

  pecigonzalo

  committed
  242a586

  Copy full SHA for 242a586

• Add validations for hostnames and tests

  pecigonzalo

  committed
  ed85a7f

  Copy full SHA for ed85a7f

Commits on Apr 23, 2019

• Add link to Amazon Linux repository

  Show description for 910f8f9
  pkoch

  authored
  910f8f9

  Copy full SHA for 910f8f9

• Merge pull request Netflix#88 from pkoch/patch-1

  Show description for 679fe9c
  hosssha

  authored
  679fe9c

  Copy full SHA for 679fe9c

Commits on May 20, 2019

• Remove the -it flag from lambda-deps docker build

  Show description for f04f83a
  

  asiragusa

  authored and

  russell-lewis

  committed
  f04f83a

  Copy full SHA for f04f83a

• Fix boolean value check on KMSAUTH_SECTION options

  

  paolodedios

  authored and

  russell-lewis

  committed
  a7b454a

  Copy full SHA for a7b454a

• Updating code and dependencies to run as a Python 3.7 lambda with the latest Amazon Linux.

  russell-lewis

  committed
  5d92a03

  Copy full SHA for 5d92a03

• Resolving Netflix#80 .

  russell-lewis

  committed
  7ca78b4

  Copy full SHA for 7ca78b4

• Typo on #133

  Show description for cad1dbf
  

  kant

  authored and

  russell-lewis

  committed
  cad1dbf

  Copy full SHA for cad1dbf

• Removing the Travis sudo tag.

  Show description for 68a45d1
  russell-lewis

  committed
  68a45d1

  Copy full SHA for 68a45d1

• Additional fixes after Netflix#85 . Travis is building again.

  russell-lewis

  committed
  9a310ca

  Copy full SHA for 9a310ca

Commits on May 21, 2019

• Updating readme to indicate that only PEM private keys are supported.

  Show description for 36fc01b
  russell-lewis

  committed
  36fc01b

  Copy full SHA for 36fc01b

• Merge remote-tracking branch 'pecigonzalo/feature/split_host_provider' into lambda-host-split.

  russell-lewis

  committed
  d77ed00

  Copy full SHA for d77ed00

• Refactored Netflix#79 and split out user and host lambda handlers and request schemas.

  Show description for 3d8b0c9
  russell-lewis

  committed
  3d8b0c9

  Copy full SHA for 3d8b0c9

Commits on May 22, 2019

• Merge pull request Netflix#94 from russell-lewis/lambda-host-split

  Show description for c03b8d1
  russell-lewis

  authored
  c03b8d1

  Copy full SHA for c03b8d1

• Adding a sample client that can validte the BLESS host cert lambda.

  russell-lewis

  committed
  03666f8

  Copy full SHA for 03666f8

• Bumping to Release v.0.4.0

  Show description for a207d1b
  russell-lewis

  committed
  a207d1b

  Copy full SHA for a207d1b

• Merge pull request Netflix#95 from russell-lewis/release-prep

  Show description for 80f3c1b
  russell-lewis

  authored
  80f3c1b

  Copy full SHA for 80f3c1b

Commits on Dec 10, 2019

• Merge pull request #39 from lyft/refresh-netflix-code

  Show description for 8527924
  

  Ryan Lane

  authored
  8527924

  Copy full SHA for 8527924

Commits on Jan 20, 2020

• Merge branch 'master' of github.com:lyft/bless into lyft_base

  surbhishah

  committed
  5aedde7

  Copy full SHA for 5aedde7