Skip to content

feat: support Yubikey Oath for Virtual Device MFA on AWS

Andrew Newdigate requested to merge yubikey into main

No need to use authenticator apps for MFA authentication with AWS 🎉

This also fixes the issue with API setup of MFA, which no longer works - #12 (closed)

cc @skarbek

  1. Follow the setup instructions in https://gitlab.com/gitlab-com/gl-infra/pmv/-/blob/yubikey/docs/setup.md to ensure you have ykman installed.
  2. Follow the (unfortunately slightly convoluted) instructions in https://gitlab.com/gitlab-com/gl-infra/pmv/-/blob/yubikey/docs/aws-mfa.md to setup your Yubikey based TOTP.
  3. Older authenticator based entries should continue to work as expected.
Edited by Andrew Newdigate

Merge request reports