Skip to content
This repository was archived by the owner on Nov 8, 2021. It is now read-only.
This repository was archived by the owner on Nov 8, 2021. It is now read-only.

Feature request: more flexible local group assignment #152

@mluypaert

Description

@mluypaert

Current local group management is limited to assigning local groups to all users through
the LOCAL_GROUPS config. This however does not allow select IAM groups to be assigned to certain local user groups. Also, once assigned a group, this group is currently maintain on config changes because of the fix for issue #56 implemented in commit 3150a27.

I implemented this feature in pull request #151:

  • Through the use of a JSON string that can be define directly in the config file, or through the use of a EC2-tag, (users in) select IAM-groups can be assigned to select local groups
  • Since this feature can also be used to fix import_iam_users stripping users of groups manually added from *NIX shell #56 (option 3 in the issue description is implemented here), assigned groups can now automatically be removed from users once a user is no longer defined as part of a local group, allowing for more flexible and cleaner group assignments.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions