Skip to content

Releases: Snowflake-Labs/sansshell

v1.0.7

04 Mar 16:52
c3a150c
Compare
Choose a tag to compare
Add a cert field to HostAuthInput so we can use a cert from the host …

v1.0.6

03 Mar 22:47
4ddb054
Compare
Choose a tag to compare
Remove ansible from default policy as unsafe to open w/o params. (#84)

v1.0.5: Make sure and import modules in the main.go (#78)

01 Mar 00:36
99c18f5
Compare
Choose a tag to compare
Srop doing this in the common module.

Which modules a server/cli use should be decided by the end builder, not common code.

v1.0.4: Implement a logging module. (#77)

22 Feb 21:31
74cbefe
Compare
Choose a tag to compare
* Implement a logging module.

This can safely set the logging verbosity level on a server using stdr package.

Implement basic unit tests and client/integration tests.

All client side support in sanssh to do this on the proxy itself.

Wire into proxy as an RPC it'll serve in addition to /Proxy.Proxy
This means we need to add interceptors for unary RPCs here now too.

* Rename from logging to sansshell as the service breakdown so it's obvious this is internal state.

* Fix client command to be sansshell instead of logging

v1.0.3: Add a justification optional requirement. (#75)

18 Feb 23:39
fa85312
Compare
Choose a tag to compare
* Add a justification optional requirement.

Servers can require a justification string to be passed in from client side metadata.

They can also provide a user defined function to validate this as well.

Plumb into servers, sanssh and integration tests.

* Update usage information and important flags

* Refactor into authz hook style.

Telemetry just extracts anything which is sansshell-* from metadata and logs it.

If it gets an error from the handler (which is where authz hooks) it'll bail at that point.

So we get logging in one place and authz handled correctly in it's place.

* Remove debugging

* Convert server startup to take lists of authz hooks.