pulumi-command icon indicating copy to clipboard operation
pulumi-command copied to clipboard

Permit using ssh option 'ForwardAgent'

Open svdo opened this issue 2 years ago • 0 comments

Hello!

  • Vote on this issue by adding a 👍 reaction
  • If you want to implement this feature, comment to let us know (we'll work with you on design, scheduling, etc.)

Issue details

I'm trying to use Pulumi-command to configure servers. I tend to setup accounts for administrators that may access the server. For auditing reasons I don't want them to use root. In order to easily and securely have passwordless sudo, I use libpam-ssh-agent-auth. This way ssh agent forwarding can be used to authenticate sudo. This feature relies on the ssh client enabling the forwardAgent option, either trough ~/.ssh/config or using ssh -A user@host.

I think it would be nice if there would be a connection option to enable agent forwarding in command.remote.Command.

Thanks for your consideration!

svdo avatar Jan 26 '23 20:01 svdo