Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support other CLIs using credential injection #110

Open
infamousjoeg opened this issue Apr 8, 2021 · 0 comments
Open

Support other CLIs using credential injection #110

infamousjoeg opened this issue Apr 8, 2021 · 0 comments
Assignees
Labels
enhancement New feature or request

Comments

@infamousjoeg
Copy link
Owner

Is your feature request related to a problem? Please describe.
The problem with other CLIs is that they write secrets to the local filesystem in plain-text. Alternatively, the end-user has to manually manage the environment variables on the host to include the plain-text secrets.

Describe the solution you'd like
cybr aws <command>
cybr gcloud <command>
etc...

The cybr-cli would execute the other CLI process (https://gobyexample.com/execing-processes) and inject environment variables of a credential set by the end-user. The end-user would provide an Account ID to set for the specific CLI. The Account ID would be written to ~/.cybr/authn and only contain the Account ID. The Account ID could then be used for every cybr aws <command> to retrieve the credentials via API and inject as environment variables. This will prevent the AWS CLI or other CLIs from writing the credentials in plain-text to the file system and gives cybr-cli control over how long the credentials persist as an environment variable.

Describe alternatives you've considered
Summon was considered but requires too many dependencies. Summon + Summon Provider + secrets.yml -OR- cybr cli aws-configure -i AccountID. 🤔

@infamousjoeg infamousjoeg added the enhancement New feature or request label Apr 8, 2021
@infamousjoeg infamousjoeg self-assigned this Apr 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant