[PR #466] [MERGED] feat: implement ingress secure keys (FIDO2) #504

New issue

Closed

opened 2026-05-07 00:21:14 +02:00 by BreizhHardware · 0 comments

BreizhHardware commented

2026-05-07 00:21:14 +02:00

Owner

📋 Pull Request Information

Original PR: https://github.com/ovh/the-bastion/pull/466
Author: @speed47
Created: 4/9/2024
Status: ✅ Merged
Merged: 4/10/2024
Merged by: @speed47

Base: master ← Head: issue-456

📝 Commits (8)

0ed6ef8 Implement Ingress Secure Keys
db5113c Escape dots in regex patterns for ssh algorithms
6bad6da Factor out in a generic function the helper listing allowed ssh key algorithm
065e14d Drop an unused variable in print_accepted_key_algorithms
ee2869b chore: perltidy
7659ab2 enh: use print_accepted_key_algorithms everywhere
5de66f3 Adding tests for secure keys feature
b568623 fix: tests: don't test FIDO2 on unsupported distros

📊 Changes

26 files changed (+252 additions, -308 deletions)

View changed files

📝 bin/plugin/group-owner/groupGenerateEgressKey (+3 -3)
📝 bin/plugin/open/selfAddIngressKey (+3 -16)
📝 bin/plugin/open/selfGenerateEgressKey (+3 -4)
📝 bin/plugin/restricted/accountCreate (+3 -15)
📝 bin/plugin/restricted/groupCreate (+10 -29)
📝 bin/plugin/restricted/realmCreate (+10 -17)
➖ doc/sphinx-plugins-override/groupCreate.override.rst (+0 -55)
➖ doc/sphinx-plugins-override/selfGenerateEgressKey.override.rst (+0 -43)
📝 doc/sphinx/administration/configuration/bastion_conf.rst (+2 -2)
📝 doc/sphinx/development/setup.rst (+1 -0)
📝 doc/sphinx/plugins/group-owner/groupGenerateEgressKey.rst (+6 -12)
📝 doc/sphinx/plugins/open/selfGenerateEgressKey.rst (+19 -21)
📝 doc/sphinx/plugins/restricted/groupCreate.rst (+30 -30)
📝 docker/Dockerfile.debian11 (+1 -1)
📝 docker/Dockerfile.debian12 (+1 -1)
📝 docker/Dockerfile.opensuse15 (+2 -2)
📝 docker/Dockerfile.rockylinux9 (+1 -1)
📝 docker/Dockerfile.ubuntu2004 (+1 -1)
📝 docker/Dockerfile.ubuntu2204 (+1 -1)
📝 etc/bastion/bastion.conf.dist (+3 -3)

...and 6 more files

📄 Description

No description provided

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/ovh/the-bastion/pull/466 **Author:** [@speed47](https://github.com/speed47) **Created:** 4/9/2024 **Status:** ✅ Merged **Merged:** 4/10/2024 **Merged by:** [@speed47](https://github.com/speed47) **Base:** `master` ← **Head:** `issue-456` --- ### 📝 Commits (8) - [`0ed6ef8`](https://github.com/ovh/the-bastion/commit/0ed6ef837c1a94caf39875205384caede653d6e5) Implement Ingress Secure Keys - [`db5113c`](https://github.com/ovh/the-bastion/commit/db5113c8186b562edf7802fb873a7df4f2eb8fdd) Escape dots in regex patterns for ssh algorithms - [`6bad6da`](https://github.com/ovh/the-bastion/commit/6bad6dae434642905e4e33498eeef107b0ff73a3) Factor out in a generic function the helper listing allowed ssh key algorithm - [`065e14d`](https://github.com/ovh/the-bastion/commit/065e14dedba6bfe2641cd1a1bb390fcc1d88ae1f) Drop an unused variable in print_accepted_key_algorithms - [`ee2869b`](https://github.com/ovh/the-bastion/commit/ee2869b642abd0fe93cc27eb82df1810e5e9e755) chore: perltidy - [`7659ab2`](https://github.com/ovh/the-bastion/commit/7659ab2f38aa05959c7fac5d0f0dd4790452ae0c) enh: use print_accepted_key_algorithms everywhere - [`5de66f3`](https://github.com/ovh/the-bastion/commit/5de66f3817966f18c59fcc571c3a9f4673eadd0c) Adding tests for secure keys feature - [`b568623`](https://github.com/ovh/the-bastion/commit/b5686231b374bfa5e626e75477bab6b16dd7b1e8) fix: tests: don't test FIDO2 on unsupported distros ### 📊 Changes **26 files changed** (+252 additions, -308 deletions) <details> <summary>View changed files</summary> 📝 `bin/plugin/group-owner/groupGenerateEgressKey` (+3 -3) 📝 `bin/plugin/open/selfAddIngressKey` (+3 -16) 📝 `bin/plugin/open/selfGenerateEgressKey` (+3 -4) 📝 `bin/plugin/restricted/accountCreate` (+3 -15) 📝 `bin/plugin/restricted/groupCreate` (+10 -29) 📝 `bin/plugin/restricted/realmCreate` (+10 -17) ➖ `doc/sphinx-plugins-override/groupCreate.override.rst` (+0 -55) ➖ `doc/sphinx-plugins-override/selfGenerateEgressKey.override.rst` (+0 -43) 📝 `doc/sphinx/administration/configuration/bastion_conf.rst` (+2 -2) 📝 `doc/sphinx/development/setup.rst` (+1 -0) 📝 `doc/sphinx/plugins/group-owner/groupGenerateEgressKey.rst` (+6 -12) 📝 `doc/sphinx/plugins/open/selfGenerateEgressKey.rst` (+19 -21) 📝 `doc/sphinx/plugins/restricted/groupCreate.rst` (+30 -30) 📝 `docker/Dockerfile.debian11` (+1 -1) 📝 `docker/Dockerfile.debian12` (+1 -1) 📝 `docker/Dockerfile.opensuse15` (+2 -2) 📝 `docker/Dockerfile.rockylinux9` (+1 -1) 📝 `docker/Dockerfile.ubuntu2004` (+1 -1) 📝 `docker/Dockerfile.ubuntu2204` (+1 -1) 📝 `etc/bastion/bastion.conf.dist` (+3 -3) _...and 6 more files_ </details> ### 📄 Description _No description provided_ --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>