Releases: cezmunsta/ssh_ms
Releases · cezmunsta/ssh_ms
v1.5.0
- Add option to view usable placeholders for User (#68)
Adding an option for the user to list the available ones makes the use
of templated users easier$ ssh_ms inspect placeholders
- Hash ControlPath socket names by default (#66)
Currently, the dynamicControlPathis done in such a way as to make it easy to determine its purpose. However, should long HostName fields exist then this could potentially exceed the maximum path length for a UNIX socket (UNIX_PATH_MAX). By switching to using a hash, similar to %C in ssh, we can restrict the length of the path - Moved
go get golintto separate task
v1.4.0
- Upgrade Vault and Logrus (#64) Vault has been upgraded to v1.8.2 and Logrus to v1.7.0
- Add support for ForwardAgent (#62)
Whilst ForwardAgent is normally disabled for security reasons, there are certain circumstances where it is required. An example of required usage is where a third-party requires 2FA and a
certificate and key are injected into the user’s ssh-agent upon successful authentication. - Adding PR workflow (#63)
- Updated Vault to v1.8.1 (#61)
- Added push workflow for Go source code (#60)
- Remove warning during write (#59)
An unnecessary warning appeared when writing a new connection, which will no longer be shownlevel=warning msg="Unable to find connection for: xxx"
v1.3.0
- Extra information for versionCmd (#56)
The Go and Vault versions are now shown when usingversion --verbose - Update Vault dependencies (#55)
Upgraded Vault to v1.8.0 - Add option to check for the latest release (#52)
The user is now able to check for the latest release withversion --check - Enable cmd.TestCache (#50)
Caching is now tested duringcmdtests - Ignore misses for lock requests (#49)
Due to the locking mechanism sharing code with standard requests, warning messages
were always emitted during a request when the lock is absent (ideal state). These
are now hidden based upon the lock prefix
v1.2.2
v1.2.1
v1.2.0
- Added missing entries from the changelog (#43)
- Fix override variables that aren't strings (#42)
Some of the overrides were no longer working due to being defined in a way other than as an
explicit string, which caused issues when building with overrides. - Added support for message of the day (#37)
A "message of the day" can now be added to the stored configuration, allowing messages to
be displayed during the connection phase, including whatever relevant information is necessary.
This also allows the message to be managed without accessing an instance, which is where the motd
would normally be set; on-host motd messaging is not affected by this feature - Updated Go-based tasks in Makefile (#36)
- Added extra tests to Makefile (#35)
- Added Vault tests (#34)
Vault TestCluster has now been integrated into the test suits, allowing tests
to run without access to a running Vault instance - Update log level for messages (#33)
Changed levels for some getConnections messages
v1.1.0
- Updated README (#32)
- Added dynamic ControlPath definition (#31):
In order to solve the problem of unnecessaryLocalForwarddefinitions
when creating multiple connections to the same host, a scenario that
occurs when a control path is used, specifying theControlPathdynamically
allows detection of an active connection. When the first connection is created
theControlPathis generated by SSH and we save the ports in the cache
directory. For the next connection, if theControlpathis still in existence
then we can specify identicalLocalForwardentries without an issue. - Added locking mechanism for write operations (#30):
In multi-user environments it is possible that more than one user attempts to perform
operations against the same key in Vault storage. The user's operation must now
acquire a lock to be able to perform a write operation against the storage layer - Add connection search (#29):
The user can nowsearchthe existing list of connection using partial patterns,
or even regular expressions; partial expressions must still compile as a regex - Added argument checker for better UX (#28):
Some basic argument checking is performed to help avoid common issues and
aborting early on in the execution process. - Enhance caching (#27):
Caching operations and updates now take part when performing write operations
instead of only when requesting a connection for use. The normal cache expiry
operations take part during this process. - Added support for representing the config in JSON format (#26):
For use internally, the config can now be converted to JSON by calling the
Settings.ToJSONfunction. - Added dev-vault to Makefile (#25):
A test Vault container can be created and unlocked usingmake dev-vault - Partial updates (#24):
The user can now apply an update to an existing connection by usingupdate
instead ofwrite. An error will now occur when trying to usewritewith
an existing entry, or trying to useupdatewith a non-existent one. - Major refactor of code (#22):
Extensive code rewrite to solve some problems that arose when adding new
features and fixing some bugs.