Netflix / bless / 105

pending completion

Build # 105

Build Type

Pull #62

travis-ci

Committed by

web-flow

Commit Message

Allows username validation against IAM groups

This change gives the option to validate the remote username against
the IAM groups containing the user invoking the lambda function. This
is an optional feature which is used in conjunction with kmsauth.

For example, if there were two groups of users, you could put your
admins in the ssh-admin IAM group to allow them to generate certificates
with a remote_username of 'admin'. Users with fewer permissions could be
in the ssh-user group to allow them to generate certificates for the 'user'
account.

The group name is configurable, however they must all be in a consistent
format, and must all contain the relevant remote_username once.

Pull Request Pull Request #62: Allows username validation against IAM groups

Run Details

13 of 13 new or added lines in 2 files covered. (100.0%)

532 of 563 relevant lines covered (94.49%)

0.94 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

77.98

/bless/aws_lambda/bless_lambda.py

Build SHA Not Found

The commit SHA "4f2edf6a59e62dd2bdf21462b603d0d0496c63e6" was not found in your repository, so the file cannot be loaded. This may be because you posted from a local development environment, or your CI created an ephemeral commit.

Netflix / bless / 105

Source File Press 'n' to go to next uncovered line, 'b' for previous

Build SHA Not Found

Source File
Press 'n' to go to next uncovered line, 'b' for previous