Releases: Snowflake-Labs/sansshell
Releases · Snowflake-Labs/sansshell
v1.0.7
Add a cert field to HostAuthInput so we can use a cert from the host …
v1.0.6
Remove ansible from default policy as unsafe to open w/o params. (#84)
v1.0.5: Make sure and import modules in the main.go (#78)
Srop doing this in the common module. Which modules a server/cli use should be decided by the end builder, not common code.
v1.0.4: Implement a logging module. (#77)
* Implement a logging module. This can safely set the logging verbosity level on a server using stdr package. Implement basic unit tests and client/integration tests. All client side support in sanssh to do this on the proxy itself. Wire into proxy as an RPC it'll serve in addition to /Proxy.Proxy This means we need to add interceptors for unary RPCs here now too. * Rename from logging to sansshell as the service breakdown so it's obvious this is internal state. * Fix client command to be sansshell instead of logging
v1.0.3: Add a justification optional requirement. (#75)
* Add a justification optional requirement. Servers can require a justification string to be passed in from client side metadata. They can also provide a user defined function to validate this as well. Plumb into servers, sanssh and integration tests. * Update usage information and important flags * Refactor into authz hook style. Telemetry just extracts anything which is sansshell-* from metadata and logs it. If it gets an error from the handler (which is where authz hooks) it'll bail at that point. So we get logging in one place and authz handled correctly in it's place. * Remove debugging * Convert server startup to take lists of authz hooks.