kubernetes
/
kops
mirror of https://github.com/kubernetes/kops.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Prevent "unbound variable" errors in `kops-mfa` 

When none of the `KOPS_MFA_ROLE_ARN` or `KOPS_MFA_ARN` variables are set, we get the following errors…

    kops-mfa: line 11: KOPS_MFA_ROLE_ARN: unbound variable
or,
    kops-mfa: line 16: KOPS_MFA_ARN: unbound variable

… instead of the expected error message:

    Set the KOPS_MFA_ROLE_ARN environment variable
or,
    Set the KOPS_MFA_ARN environment variable
This commit is contained in:
Hugo Ferreira 2017-05-26 20:10:58 +01:00 committed by GitHub
parent 1fffa08673
commit 48c2e91cb4
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/mfa.md
View File

@ -4,7 +4,7 @@ You can secure `kops` with MFA by creating an AWS role & policy that requires MF
## The Workaround
The work around uses `aws sts-assume role` in combination with an MFA prompt to retrieve temporary AWS access keys. This provides `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, and `AWS_SESSION_TOKEN` environment variables which are automatically picked up by Go AWS SDK. You provide the MFA & Role ARNs, then invoke `kops`.
The work around uses `aws sts assume-role` in combination with an MFA prompt to retrieve temporary AWS access keys. This provides `AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`, and `AWS_SESSION_TOKEN` environment variables which are automatically picked up by Go AWS SDK. You provide the MFA & Role ARNs, then invoke `kops`.
Here's an example wrapper script:
@ -18,12 +18,12 @@ main() {
local serial_number="${KOPS_MFA_ARN:-}"
local token_code
if [ -z "${KOPS_MFA_ROLE_ARN}" ]; then
if [ -z "${role_arn}" ]; then
echo "Set the KOPS_MFA_ROLE_ARN environment variable" 1>&2
return 1
fi
if [ -z "${KOPS_MFA_ARN}" ]; then
if [ -z "${serial_number}" ]; then
echo "Set the KOPS_MFA_ARN environment variable" 1>&2
return 1
fi