[GH-ISSUE #370] List all account egress keys? #101

New issue

Closed

opened 2026-05-07 00:18:55 +02:00 by BreizhHardware · 1 comment

BreizhHardware commented

2026-05-07 00:18:55 +02:00

Owner

Originally created by @ldelelis on GitHub (Mar 8, 2023).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/370

Part of one of our sync processes would need to pull the egress keys of all users, in order to detect differences that might occur on target hosts. So far the only way I found of doing this is looping through the output of accountList, and requesting each account's egress keys individually.

This process of course takes some time. If there's a simpler way would someone please let me know?

Originally created by @ldelelis on GitHub (Mar 8, 2023). Original GitHub issue: https://github.com/ovh/the-bastion/issues/370 Part of one of our sync processes would need to pull the egress keys of all users, in order to detect differences that might occur on target hosts. So far the only way I found of doing this is looping through the output of `accountList`, and requesting each account's egress keys individually. This process of course takes some time. If there's a simpler way would someone please let me know?

BreizhHardware closed this issue

2026-05-07 00:18:55 +02:00

BreizhHardware commented

2026-05-07 00:18:56 +02:00

Author

Owner

@speed47 commented on GitHub (Mar 14, 2023):

Hey,

We have similar auditing/reconciling processes that go through all accounts and/or groups, and the #371 PR currently under review does exactly what you need but for groups: getting all the groups data nicely dumped into a JSON through --json by simply specifying --all to groupInfo. This command is only accessible to accounts granted with the bastion auditor role.

I can do this too for the accounts, I actually started a branch for this but didn't push it yet, I'll do it now that I know you have the need :)

@speed47 commented on GitHub (Mar 14, 2023): Hey, We have similar auditing/reconciling processes that go through all accounts and/or groups, and the #371 PR currently under review does exactly what you need but for groups: getting all the groups data nicely dumped into a JSON through `--json` by simply specifying `--all` to `groupInfo`. This command is only accessible to accounts granted with the `bastion auditor` role. I can do this too for the accounts, I actually started a branch for this but didn't push it yet, I'll do it now that I know you have the need :)