-
-
Notifications
You must be signed in to change notification settings - Fork 2.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
algo should be able to run unattended, with more options and authentication read from variables or files #14382
Comments
This may be mostly a matter of improving the documentation in Deployment from Ansible. For many providers Algo can be run without having to respond to a prompt. Some of the credential variables that are accepted (shown with dummy values) are:
Here's an excerpt from a script I use for deployments:
|
I see that's already documented with an example, and that page is linked from README.md (but thanks for mentioning it here!) It seems like the main variable that isn't checked is AWS_PROFILE. If the profile is set, some other programs get the authentication info from ~/.aws/credentials. |
It's documented. PRs to add AWS_PROFILE are welcome! |
…TIALS_FILE (trailofbits#14382) Other programs can read from ~/.aws/credentials, and now Algo can as well.
Other programs can read the AWS key and secret from ~/.aws/credentials (or other configuration file), and with this change Algo can as well. Optional environment variables: AWS_PROFILE, AWS_SHARED_CREDENTIALS_FILE The file is not read if the credentials are already set as an Ansible variable or an environment variable.
Other programs can read the AWS key and secret from ~/.aws/credentials (or other configuration file), and with this change Algo can as well. Optional environment variables: AWS_PROFILE, AWS_SHARED_CREDENTIALS_FILE The file is not read if the credentials are already set as an Ansible variable or an environment variable.
Other programs can read the AWS key and secret from ~/.aws/credentials (or other configuration file), and with this change Algo can as well. Optional environment variables: AWS_PROFILE, AWS_SHARED_CREDENTIALS_FILE The file is not read if the credentials are already set as an Ansible variable or an environment variable.
Is your feature request related to a problem? Please describe.
I had to retry running algo several times to get a working VPN. The failures mostly weren't algo's fault, for example some were caused by network timeouts or other errors within AWS. But it was very frustrating to need to input the same options and authentication each time, especially needing to wait for the program to execute logic in between each prompt.
Describe the solution you'd like
Describe alternatives you've considered
An alternative solution would be to prompt for all data at the start of program execution, but I assume that would be harder, due to algo needing to do some processing before it knows the right questions to ask.
Additional context
Of course it still makes sense to prompt if additional info is needed. Unattended operation doesn't need to be completely unattended.
The text was updated successfully, but these errors were encountered: