search

couchbaselabs / cbdinocluster

10 stars 5 forks source link

Enable cbd to create Capella clusters when MFA enabled #59

Open Westwooo opened 3 months ago

Westwooo commented 3 months ago

When MFA is enabled on Capella accounts the fetching of the JWT becomes a multi-stage process described here:

https://couchbasecloud.atlassian.net/browse/AV-59415

This can be worked around by turning off MFA in the UI, but it'd be nice if cbd supported cluster creating while MFA is enabled

brett19 commented 3 months ago

Since dinocluster is a tool meant to be used primarily for automation, and even as a local tool is typically used non-interactively from the CLI, how do you see the flow to allow MFA to work? I think in the v4 this becomes easier since the MFA token is only needed to create the access token upfront, but in v2 it ends up needing many MFA tokens since it can need to authenticate with the API numerous times per action (due to some weird issues in how the JWT tokens work).