cyberark-conjur-cli-docker-based
cyberark-conjur-cli-docker-based copied to clipboard
User flag is optional for rotating a user's API key
Currently, this attempt to rotate a user's API key produces an error:
conjur user rotate_api_key myuser
However, all the information we need is there. It's a user, we want to rotate its API key, 🔐
What the CLI wants is a --user
flag like so:
conjur user rotate_api_key --user myuser
We don't need to break the --user
flag, but is there anything standing in the way of us making the simplified flagless syntax working as well?
conjur user rotate_api_key myuser
produces an error but conjur user rotate_api_key other_user
does not. However it doesn't rotate other_user
's key it rotates the logged in user's key, which is unexpected.
I think there are three situations:
-
conjur user rotate_api_key
: rotate logged in users password - works as expected -
conjur user rotate_api_key other_user
: currently rotates logged in user's key, this should either be an error, or changed to rotateother_user
's key -
conjur user rotate_api_key --user other_user
: rotates other user's key, works as expected.