Skip to content
This repository has been archived by the owner on Dec 7, 2023. It is now read-only.

There is a new release of the Conjur CLI #298

Closed
izgeri opened this issue Oct 22, 2020 · 1 comment
Closed

There is a new release of the Conjur CLI #298

izgeri opened this issue Oct 22, 2020 · 1 comment

Comments

@izgeri
Copy link
Contributor

izgeri commented Oct 22, 2020

Following #297, we need to bump the version and publish a new release of the Conjur CLI so that self-API key rotation can work with Conjur v1.9.0+ and DAP v11.7+.

@sgnn7
Copy link
Contributor

sgnn7 commented Oct 26, 2020

Per investigation of #1900 by @sashaCher and myself, this issue is no longer valid so it's being closed.

Details:

  • CLI uses both Conjur::API.rotate_api_key(username, password) and api.resource(...).rotate_api_key
  • The first one works and the second does not for rotating your own key due to the change
  • When rotating your own (implicit) API key, the CLI uses the first one
  • When rotating someone else’s api key (using the --user or --host flag), the CLI uses the second approach
  • The CLI does not allow you to use your own identity when using the --host or --user flag

Relevant snippets:

@sgnn7 sgnn7 closed this as completed Oct 26, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Development

No branches or pull requests

2 participants