You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Siyao Meng (Jira)" <ji...@apache.org> on 2022/05/09 18:33:00 UTC

[jira] [Commented] (HDDS-6608) [MultiTenancy] Create uniform output for AWS secrets across APIs

    [ https://issues.apache.org/jira/browse/HDDS-6608?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17533953#comment-17533953 ] 

Siyao Meng commented on HDDS-6608:
----------------------------------

In the second case, at the moment, the {{-e}} argument would need to be added to get the export format, as the {{getsecret}} subcommand here is inherited from {{ozone s3 getsecret}}.

Yes it is a good idea to make it consistent.

> [MultiTenancy] Create uniform output for AWS secrets across APIs
> ----------------------------------------------------------------
>
>                 Key: HDDS-6608
>                 URL: https://issues.apache.org/jira/browse/HDDS-6608
>             Project: Apache Ozone
>          Issue Type: Bug
>          Components: Ozone CLI
>    Affects Versions: 1.3.0
>            Reporter: Soumitra Sulav
>            Priority: Minor
>              Labels: ozone-multitenancy
>
> While assigning user to tenant, it logs the access/secret key on the console in shell export variables.
> {code:java}
> bash-4.2$ ozone tenant user assign '**' -t tenantone
> Assigned '**' to 'tenantone' with accessId 'tenantone$**'.
> export AWS_ACCESS_KEY_ID='tenantone$**'
> export AWS_SECRET_ACCESS_KEY='35d5075f8a4d5dce4a6491a06c2f6f7cf4c2ba443f7f483841551d923527ebcf'{code}
> But while fetching the keys via getsecret API the output is in different format.
> {code:java}
> bash-4.2$ ozone tenant user getsecret 'tenantone$**'
> awsAccessKey=tenantone$**
> awsSecret=35d5075f8a4d5dce4a6491a06c2f6f7cf4c2ba443f7f483841551d923527ebcf {code}
> Better to have similar format. 



--
This message was sent by Atlassian Jira
(v8.20.7#820007)

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org