[GH-ISSUE #359] Bulk operations on restricted "account*" plugins? #94

New issue

Open

opened 2026-05-07 00:18:46 +02:00 by BreizhHardware · 1 comment

BreizhHardware commented

2026-05-07 00:18:46 +02:00

Owner

Originally created by @ldelelis on GitHub (Feb 10, 2023).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/359

A frequent use case on our bastion implementation is to operate on multiple users to update a particular ACL. The way we do it is via looping from a regular shell, accessing a bastion admin user, and updating this ACL with the respective bastion plugin.

I'd like to know if it would be possible to implement a way to bulk these operations into a single accountAddPersonalAccess command. Something like passing --account multiple times, or having a new --accounts option that takes a comma separated list of account names

I understand this is normally an use case for Bastion groups. However, our topology requires that we use individual users for this, so groups are not an option.

Originally created by @ldelelis on GitHub (Feb 10, 2023). Original GitHub issue: https://github.com/ovh/the-bastion/issues/359 A frequent use case on our bastion implementation is to operate on multiple users to update a particular ACL. The way we do it is via looping from a regular shell, accessing a bastion admin user, and updating this ACL with the respective bastion plugin. I'd like to know if it would be possible to implement a way to bulk these operations into a single `accountAddPersonalAccess` command. Something like passing `--account` multiple times, or having a new `--accounts` option that takes a comma separated list of account names I understand this is normally an use case for Bastion groups. However, our topology requires that we use individual users for this, so groups are not an option.

BreizhHardware added the

enhancement

label

2026-05-07 00:18:46 +02:00

BreizhHardware commented

2026-05-07 00:18:47 +02:00

Author

Owner

@speed47 commented on GitHub (Feb 15, 2023):

Hello,

This is also a use case we have from time to time, and the --account A,B,C option is definitely doable.
I'll keep this ticket as a reminder, knowing that it would be useful for others will help me prioritize :)

@speed47 commented on GitHub (Feb 15, 2023): Hello, This is also a use case we have from time to time, and the `--account A,B,C` option is definitely doable. I'll keep this ticket as a reminder, knowing that it would be useful for others will help me prioritize :)

BreizhHardware referenced this issue

2026-05-07 00:19:55 +02:00

[PR #94] [MERGED] Opensuseleap150 #232