Commit graph

6348 commits

Author SHA1 Message Date
Eugene Yakubovich 585c33232b Move from BCC to libbpf with CO-RE. 2021-05-28 15:25:23 -07:00
Gus Luxton d8e77878fe
docs: Update post-release checklist (#7056) 2021-05-28 09:50:18 -07:00
Ben Arent 492f4ec878
Teleport Server Access Intro Video (#7087) 2021-05-27 17:57:13 -07:00
Gus Luxton 5a4a126276
docs: Improve label documentation for db_service via teleport-kube-agent (#7077) 2021-05-27 14:24:19 -07:00
Joel b2494bea8e
Improve RFD 24 Dynamo migration efficiency and performance (#7012) 2021-05-27 22:19:56 +02:00
Brian Joerger 5fbffaab80
keypaths package (#6848) 2021-05-27 10:31:05 -07:00
inertial-frame a71c706c9b
[v7.0] Port of 6.2 Server Access Section (#6936)
* docs: port of server access section

* docs: correct query

* docs: remove teleconsole
2021-05-26 21:36:48 -05:00
Trent Clarke d710424ae7
Ports some integration tests to Testify/Subtests (#6884)
In an attempt to make it easier to
 1) navigate the integration test output,
 2) find the cause of test failures, and
 3) run individual tests, make it easier to run individual
    integration tests from the command line,

...this change ports some of the OSS integration tests away from
GoCheck and implements them in terms of the standard `testing`
package.

The main changes are:
 * Test suites are now constructed as a normal Test function
   with many subtests.
 * The GoCheck assertions have been replaced with equivalent
   assertions from `testify/require`, for example:
     `c.Assert(err, check.IsNil)`
   becomes
     `require.NoError(t, err)`

   ... and so on
2021-05-26 19:05:46 -07:00
Ben Arent 292ff0a20c
Add Demo video to dual-auth and per session mfa (#7063) 2021-05-26 15:12:46 -07:00
Lisa Kim 8bad074091
[auto] Update webassets in master (#6977)
81a5dc6 Update e-ref for changes in switchback banner (#324) https://github.com/gravitational/webapps/commit/81a5dc6

[source: -w master] [target: -t master]
2021-05-26 14:04:01 -07:00
Gus Luxton 9275c0579a
teleport-kube-agent: Add support for annotations.serviceAccount (#7060)
This functionality is present in the `teleport-cluster` chart and it seems logical toduplicate it in the `teleport-kube-agent` chart.

Also adds missing documentation for `annotations.serviceAccount` to the `teleport-cluster` reference.
2021-05-26 13:03:03 -07:00
corkrean dcce04e1b4
Updating teleport-quickstart.yml to latest release (#6970)
* Updating teleport-quickstart.yml to latest release

This teleport-quickstart.yml is used in our Docker quickstart guide (docker-compose section). https://goteleport.com/docs/quickstart-docker/#quickstart-using-docker-compose

I updated the quay repo from 5.0 to 6.1.5. (latest version at time of writing)

* Update docker/teleport-quickstart.yml

Co-authored-by: Gus Luxton <gus@gravitational.com>
2021-05-26 12:07:01 -07:00
Gus Luxton 1b14d477c9
Update AMI IDs for 6.2.0 (#7037) 2021-05-26 11:17:51 -07:00
Nic Klaassen 1b0747764e Make utmp support best-effort 2021-05-26 10:06:44 -07:00
Nic Klaassen f268ba173e
Stop registering a Kubernetes cluster named after the Teleport cluster (#6786) 2021-05-25 17:50:35 -07:00
Roman Tkachenko fc4c18f297
Allow users impersonating database service generate database certs (#7024) 2021-05-25 14:11:35 -07:00
Gus Luxton 593e0e6145
helm: Don't package/update old teleport chart (#6902)
Also updates the teleport-cluster chart README and chart repo index page with links to the new Helm guides.
2021-05-25 10:53:11 -07:00
a-palchikov b6f4d6fc71
Log traits to role mapping warnings on case-insensitive matches (#6209)
* Compute warnings when mapping traits to roles
* Log warnings for case-insensitive traits to role matches.
Updates https://github.com/gravitational/teleport/issues/6016.
Co-authored-by: Andrew Lytvynov <andrew@goteleport.com>
2021-05-25 08:39:22 -07:00
Gus Luxton 219ff83050
docker: Restore Firestore emulator (#6901) 2021-05-25 07:47:18 -07:00
Andrew Lytvynov 389531307a changelog: add a note about DynamoDB migration performance in 6.2.0 2021-05-24 23:57:32 +00:00
Lisa Kim c15a980e2f
Return unique kube cluster names when retrieving for ui display (#7002) 2021-05-21 14:34:10 -07:00
Joel 615c4639b8
Resolve test issues and event driver bugs (#6990) 2021-05-21 22:01:52 +02:00
Gus Luxton f155d35292
Variable exporting fix on AWS Terraform Guide (#6973)
There was an issue with the formatting when exporting the bastion and auth IP.

The name-value pairs must be enclosed in their own set of quotes, they should not be lumped together under a single set of quotes.
There must be a space between the two pairs of name/value pairs.

(I ensured I was running the latest version of AWS CLI 2 and the latest version of Terraform)

Signed-off-by: Gus Luxton <gus@goteleport.com>

Co-authored-by: corkrean <62527488+corkrean@users.noreply.github.com>
2021-05-21 14:39:11 -05:00
Andrew Lytvynov cd2036a1a6 docs: delay 6.2 release on upcoming releases page 2021-05-21 16:44:43 +00:00
Russell Jones 66f3aab036 Fixed IBM Cloud AppID SSO integration.
IBM Cloud AppID SSO returns strings as well as integers in JWT headers.
Updated version of our go-oidc fork which handles string and integer
values in JWT headers.
2021-05-20 18:45:26 -07:00
Brian Joerger 5d5b03eeb1
Fix tclt --auth-servers flag panic. (#6980) 2021-05-20 17:38:50 -07:00
Brian Joerger 896d0054b3
Update tctl docs to include new global flags and remote functionality. (#6771) 2021-05-20 17:20:25 -07:00
Russell Jones 9c60d1c21a Updated CHANGELOG.md. 2021-05-20 16:57:33 -07:00
Andrew Lytvynov 355755670a mfa: user server instead of log context.Context for audit events
In `GRPCServer` handlers, `g.Context` resolves to the context included
in `logrus.Entry` due to embedding.
This context is typically `nil`, so if anyone tries using it (such as
the `aws-sdk-go` when using a dynamodb audit backend), things break.

Use the `closeCtx` from the parent `auth.Server` instead.
2021-05-20 23:52:33 +00:00
inertial-frame 969791613c
docs: improve best practices (#6809) 2021-05-20 17:41:51 -05:00
Andrej Tokarčík d1a3e338cb
RFD 28: Cluster configuration related resources (#6472) 2021-05-20 13:44:43 -07:00
Joel bd96cdd946
Add event handler for access request review event (#6966) 2021-05-20 21:38:15 +02:00
Gus Luxton 9d5e3e6a8e
helm: Fix antiAffinity in teleport-cluster (#6944)
The syntax for `requiredDuringSchedulingIgnoredDuringExecution` is different to that for `preferredDuringSchedulingIgnoredDuringExecution`.
2021-05-20 11:34:12 -07:00
inertial-frame 776c68b8b6
[v7.0] docs: update certbot section (#6697)
* docs: update section

* docs: update ACME text
2021-05-20 12:08:06 -05:00
inertial-frame 977b3b75be
[v7.0] docs: update version in install and getting started guides #6810 (#6853)
* docs: port changes

* Update docs/pages/aws-oss-guide.mdx

Co-authored-by: Ben Arent <ben@goteleport.com>

Co-authored-by: Ben Arent <ben@goteleport.com>
2021-05-20 11:46:02 -05:00
inertial-frame 4a487fde22
docs: port make language consistent for versions (#6854) 2021-05-20 11:28:51 -05:00
Gus Luxton 1743ea7210
docker: Override GOMODCACHE to always use a writable location (#6899) 2021-05-19 22:14:12 -07:00
Lisa Kim b8f60b921d
Update test plan (#6934)
Fixes, and rearrange kube/db/app screen test to be 
under existing test groups
2021-05-19 18:29:22 -07:00
Trent Clarke b6129c0e21 Applying suggestion 2021-05-19 18:21:11 -07:00
Trent Clarke a0683a6624 Re-enables --k8s-users & --k8s-groups in tctl users add
See-Also: Issue #6342
2021-05-19 18:21:11 -07:00
Andrew Lytvynov 1a01158e09
Buddy: Exit non-zero on tsh status for scripting. (#6957)
* Exit non-zero on `tsh status` for scripting.

To support scripting of login status, exit non-zero on `tsh status` when no valid active profile exists: not logged in, no active profile, active profile expired.

See #5558.

* Expand expiration condition, suggested in PR.

Co-authored-by: Andrew Lytvynov <andrew@awly.dev>

* Overwrite error when not logged in.

* Normalize `tsh status` error messages.

* Do not special-case not-found.

* Move "Not logged in." message.

Signed-off-by: Andrew Lytvynov <andrew@goteleport.com>

Co-authored-by: Rom DuPlain <rom.duplain@gmail.com>
2021-05-19 16:10:31 -07:00
Roman Tkachenko af9a69f5ce
Update test plan (#6947) 2021-05-19 15:02:43 -07:00
Gus Luxton 307e617fcb
docs: Update docker tags to use latest 7.x version tag (#6911)
We don't create 7.0, 7.1 etc tags for Docker any more, we just have the `7` tag which is rebuilt nightly to point to the latest published 7.x version.
2021-05-19 14:34:44 -07:00
Andrew Lytvynov 4f20fc3e14
mfa: strip trailing newline when reading TOTP codes (#6948)
The newline should not be interpreted as part of the code (or any
`prompt.Input` result).
2021-05-19 13:58:03 -07:00
Joel 3d72d92950
Handle UserUpdatedEvent in event deserialization code (#6949)
* handle UserUpdatedEvent

* add comment
2021-05-19 21:50:08 +02:00
Andrej Tokarčík 555695dfdd
Introduce SessionRecordingConfig extracting fields from ClusterConfig (#6708) 2021-05-19 12:01:37 -07:00
Lisa Kim ab02b4dad8
[auto] Update webassets in master (#6921)
dcee5ac 📝 Update e-ref for webapps.e database https://github.com/gravitational/webapps/commit/dcee5ac

[source: -w master] [target: -t master]

Includes language fix and db/kube screens.
2021-05-19 11:38:12 -07:00
Andrew Lytvynov 11c62e8897
etcd: use a separate connection to check peer versions (#6905)
There is a data race in etcd that breaks the internal state in etcd client
implementation for some server setups (user/pass authentication with
JWTs).
2021-05-19 10:07:08 -07:00
Andrej Tokarčík 66ff76c94f
Add tctl rm cap for resetting cluster auth preference to defaults (#6801) 2021-05-19 18:29:38 +02:00
NajiObeid 86a6abcfcb
lazy init of prometheus collectors (#6561)
* lazy init of prometheus collectors

* incorporate metrics intorduced in #6271

* linting

* tests

* pr changes

* tests

* pr changes
2021-05-19 11:53:36 -04:00