Commit graph

12589 commits

Author SHA1 Message Date
Hugo Shaka 7ee8b90d13
helm: fix teleport-kube-agent telemetry (#24471)
* helm: fix `teleport-kube-agent` telemetry

* Update examples/chart/teleport-kube-agent/templates/deployment.yaml
2023-04-13 17:03:39 +00:00
Steven Martin cff9fce2a4
docs: correct tctl tokens reference (#24501) 2023-04-13 17:00:30 +00:00
Michael Wilson 3906b36c0e
Allow the Okta role to read the cluster name. (#24538)
The Okta role is now able to read the cluster name.
2023-04-13 15:59:51 +00:00
Hugo Shaka aff81fece2
docs: kubernetes joining guide + reference (#20298)
* docs: kubernetes joining guide + reference

* fixup! docs: kubernetes joining guide + reference

* Address most feedback

* Apply suggestions from code review

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* Update docs/pages/management/guides/joining-services-kubernetes-serviceaccount.mdx

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* Explain what the join method does

---------

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
2023-04-13 15:42:54 +00:00
Nic Klaassen ab8d928794
add Login Rules and HSM to test plan (#24505) 2023-04-13 15:32:28 +00:00
Steven Martin a911c20c13
spelling fixes and ignore adds (#24536) 2023-04-13 15:12:11 +00:00
Anton Miniailo 6fadfa93d8
Update e reference (#24535) 2023-04-13 15:08:59 +00:00
Tiago Silva d9fe3e688b
Remove Role v6->v5 downgrade logic (#24510)
Teleport 13 supports clients running `>=12.0.0 && <=13.x.x` and all of
them already support Role `v6`, thus the downgrade logic can be removed
without impact.
2023-04-13 14:33:07 +00:00
Paul Gottschling 45f4d14ee7
Edit the SSH Key Extensions guide prereqs (#24335)
Closes #22594

- Remove the requirement for GitHub SSO
- Use the standard prerequisites partial
2023-04-13 14:16:33 +00:00
Gavin Frazar f3591f8e6c
add golang.org/x/time/rate dep (#24498) 2023-04-13 14:09:28 +00:00
Anton Miniailo de52c3a790
Fix IP pinning for SSO login (#24343)
We didn't get login IP when generating certificates for
SSO logins, so we couldn't pin certificates.
2023-04-13 13:41:46 +00:00
Noah Stride 95db60f4cb
Machine ID: Add ability to request RouteToCluster in generated certs (#23838)
* Add ability to request RouteToCluster in generated certs

* Start to account for identity impersonation when using client

* Expose routed and unrouted impersonated identities

* Fix tests

* Add Close method to mock auth

* Add support for other tests to use AuthenticatedUserClientFromIdentity

* Neater wrapping of args
2023-04-13 13:25:06 +00:00
Justinas Stankevičius 067ccba2b8
Plugin UX improvement prerequisites (#24436)
* Add new assets for integration enroll flow

* Adapt integration status after switch to enum

* Prettier

* Fix some lints

* Rename enum numbers according to conventions
2023-04-13 13:13:36 +00:00
Tobiasz Heller 7ce53f2a42
athena - prevent int overflow on 32arch (#24522) 2023-04-13 13:04:18 +00:00
Marek Smoliński b0e887a957
Add ability to overwrite default Teleport MySQL Engine Version (#24464)
* Add ability to overwrite default Teleport MySQL Engine Version

* Rename MySQLEngineVerson -> MySQLServerVersion
2023-04-13 10:09:10 +00:00
Cam Hutchison 1277c79661
dronegen: Fix spelling of GHA workflow in kube pipeline (#24514)
Fix the spelling of "updater" (from "udpater") so that the pipeline for
releasing the kube agent actually gets called and not emit the error:

    2023/04/12 09:01:40 Failed to fetch initial task list:
      Failed to fetch runs
      GET https://api.github.com/repos/gravitational/teleport.e/actions/workflows/release-teleport-kube-agent-udpater-oci.yml/runs?branch=v13.0.0-camh.mac.9&created=%3E2023-04-12T08%3A59%3A40Z&per_page=100:
      404 Not Found []
2023-04-13 09:36:24 +00:00
Tiago Silva f62d170226
Pull kube proxy address from proxy ping endpoint (#23821)
This PR picks the kubernetes proxy address from `webapi/ping` endpoint
when tls routing is disabled and the user didn't provided the `--proxy`
flag when calling `tctl auth sign --format=kubernetes`

If tls routing is enabled, it takes precendence over `kube_public_addr`.

Fixes #10396
2023-04-13 09:07:19 +00:00
Tobiasz Heller 88fb60c164
athena audit logs - publisher (#23987)
* athena audit logs - publisher

* pass also version id

* Update lib/events/athena/publisher.go

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* rename snsCli and parse large_events_payload url before

* use aws sdk retry

* Wrapping errors

* update description

* go mod tidy

* Drop unused endpoints

* move log and awsCOnfig to top level config

* update aws-sdk-go-v2 deps

* address last PR comments

* update e_import and run go mod tidy

* go mod tidy

* make ci linter happy

---------

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
2023-04-13 08:58:52 +00:00
Justinas Stankevičius bbb357170e
Update relcli to fix publishing of release notes (#24438)
* Update relcli to fix publishing of release notes

* Adjust for changed entrypoint of the relcli image
2023-04-13 08:26:00 +00:00
Edoardo Spadolini 2248520776
Update FAQ for on-prem data collection (#24403) 2023-04-13 08:24:28 +00:00
Krzysztof Skrzętnicki 2af9d76ec0
AWS-hosted OpenSearch support (#23305)
* AWS-hosted OpenSearch support.

* Review: comments, case, cleanup.

* Review: comments, region discovery, typos, shared func, fix error type, fix empty CA case.

* Review: address comments.

- add docs
- refactor opensearch engine code
- make `opensearchsql` default client
- drop utils.CloneRequest function, it is not suitable for general use
- drop "extra args" functionality, it should be a separate PR and more generic
- minor refactorings

* Fix: linting, refactoring issues.

* Review: update the comment for accuracy.

* Correct merge issue.

* Review: reuse transport, use different context, rename tests

* Review: unexport internal error types, explicitly test the error serialization.
2023-04-13 06:14:39 +00:00
Ben Arent 5dbb958f1d
Update CHANGELOG.md (#24472) 2023-04-12 22:10:26 +00:00
Steven Martin 0d1fe9eea0
docs: simplify tokens generation examples (#24075) 2023-04-12 21:34:34 +00:00
Zac Bergquist 53f38b66fa
Document alert acknowledgement (#24402)
Closes #24372
2023-04-12 21:28:01 +00:00
Paul Gottschling 1bb80f9c24
Make the OpenSSH guide more prominent (#24340)
Closes #13365

- Clarify the nature of the guide in the server-access.mdx index page
- Add a more prominent link in the docs landing page.
2023-04-12 21:27:36 +00:00
Michael d9023fad9a
[web] Add isModeratedSession flag to web ssh session (#24238)
* Add isModeratedSession flag to web ssh session

* Fix lint

* Change to snakecase

* Change to moderated
2023-04-12 21:26:57 +00:00
Paul Gottschling 8d86b607d7
Add info to the Directory Sharing guide (#24344)
Closes #14950

Indicate the effects of using long directory names. Edit a `Notice`
component with warnings about prohibited directories in order to make
room for this.
2023-04-12 21:15:46 +00:00
Brian Joerger aaac6769cd
Add check for nil auth.local in ping response. (#24467) 2023-04-12 21:07:16 +00:00
Steven Martin a47a058635
docs: include Amazon Linux in BPF-supported distributions (#24427)
* docs: include amazon linux in bpf types

* convert to markdown table

---------

Co-authored-by: alexfornuto <alex.fornuto@goteleport.com>
2023-04-12 20:41:46 +00:00
Evan Freed 9fd1f99a3c
docs: bump cloud to 12.2.1 (#24420)
Signed-off-by: Evan Freed <evan.freed@goteleport.com>
2023-04-12 20:04:48 +00:00
Hugo Shaka eb209f0698
kube-agent-updater fixes (#24468)
* helm: set TELEPORT_EXT_UPGRADER when updater is enabled

* integrations/updater: exit when agent name or namespace is missing
2023-04-12 19:53:20 +00:00
Gavin Frazar 8be84115f5
update aws configurator (#24362)
* fix iam statements for AWS assumed-role identity
  * configurator tries to convert assumed-role to role
* revert IAM semaphore to use identity name
* hide the unused --attach flag, fix typo
* godoc reminder for databases with IAM db users
* add AWS Keyspaces and DynamoDB to AWS configurator
* relax constraint on external id in fileconfig
  * add fileconf test for externalid w/o assume role
* check for actions before prompting to confirm
* fix teleport discovery bootstrap --confirm
2023-04-12 19:47:35 +00:00
Brian Joerger 4a59049e91
Make tsh check SSH_ user, proxy, and cluster env variables if not already set. (#24292) 2023-04-12 19:27:24 +00:00
Alex Fornuto 632ac6741f
Docs: adjust Active Directory (manual) guide (#24071)
* update formatting

This commit aligns line breaks to ~80 chars, nests code blocks under numbered steps where appropriate, and other minor formatting edits.

* use standard prereq partials

* respond to reviews

* linter fixes
2023-04-12 17:07:05 +00:00
Nic Klaassen f10ccab8cc
RFD 116: Label expressions (#24366)
* label expressions rfd (draft)

* typo fix

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* typo fixes

---------

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
2023-04-12 16:52:46 +00:00
Grzegorz Zdunek 8cfff5b5ae
Connect: Limit results after sorting (#24270)
* Limit results after sorting

* Rename `sortAndLimitResults` -> `rankResults`

* Add `useResourceSearch` test, check if the items are sorted correctly

* Use `renderHook` from the testing library, fix test name
2023-04-12 16:20:36 +00:00
Andrew LeFevre 9ea710dc38
don't duplicate 'tsh scp' error messages (#18657) 2023-04-12 16:20:01 +00:00
Marco André Dinis e0d6c1de49
Integrations: web API and tctl (#24145)
* Integrations: web api and tclt

This PR adds end user interface to manage integrations:

`tctl`
```
$ tctl get integrations --config teleport.yaml --format text
Name        Type     Spec
----------- -------- ----------------------------------------------
myawsint    aws-oidc RoleARN=arn:aws:iam::123456789012:role/DevTeam
mynewawsint aws-oidc RoleARN=arn:aws:iam::123456789012:role/OpsTeam
```

HTTP API
```
$ curl 'https://127.0.0.1.nip.io:3080/v1/webapi/sites/lenix/integrations'

{
  "items": [
    {
      "name": "myawsint",
      "subKind": "aws-oidc",
      "awsOIDC": {
        "roleARN": "arn:aws:iam::123456789012:role/DevTeam"
      }
    },
    {
      "name": "mynewawsint",
      "subKind": "aws-oidc",
      "awsOIDC": {
        "roleARN": "arn:aws:iam::123456789012:role/OpsTeam"
      }
    }
  ],
  "nextKey": ""
}
```

* Add explicit type

* add awsoidc role arn setter

* change serializer

* ignore bodyclose linter false positive

* check for error before reading

* simplify webPack.DoRequest call

* fix godoc of WebClientPack.DoRequest

* return body and status code only
2023-04-12 16:06:30 +00:00
Rafał Cieślak f45309853e
Deprecate custom implementation of renderHook (#24442) 2023-04-12 15:57:19 +00:00
Andrew LeFevre fedb62f573
fix SFTP regression where non-existent source paths would have no error reported (#24444) 2023-04-12 15:57:10 +00:00
Alex Fornuto 45c225203e
Docs: Standardize prerequisite partial use. (#23394)
* update tctl partial format

* standardize cloud warning in cluster guides

* standardize prereqs in machine id guides

Also uncomments a video block that was never made available once the video was created

* cleanup partial

* standardize prereq partial use throughout

* add partials to more guides

* linter fixes
2023-04-12 15:35:32 +00:00
Paul Gottschling eef7063c89
Clarify that "local" is not an auth connector (#24339)
Closes #10761

There are a few lingering places in the docs implying that "local" is a
kind of authentication connector, instead of the absence of one.
2023-04-12 14:43:23 +00:00
Paul Gottschling dd0fab05f2
Create a partial for Event Handler role/user (#24279)
Fixes #22243

This way, we can include consistent instructions across the Event
Handler guides, and users won't see `role not found` errors.
2023-04-12 14:35:32 +00:00
Paul Gottschling 76ac319dfe
Add top-level redirects to intro pages (#24338)
Fixes #9156

In case someone manually browses to a top-level docs section, ensure
that each top-level URL path redirects to the intro page (or only page)
for that section.
2023-04-12 14:31:10 +00:00
Andrew LeFevre 268c3c8db2
refactor web UI file transfers to use sftp package (#24260)
The sftp package is where modern file transfer logic lives and is
being maintained. Make the web UI use this package to unify
how we transfer files.
2023-04-12 13:48:15 +00:00
Grzegorz Zdunek b8bd16d86b
Connect: Migrate keymap.openCommandBar to keymap.openSearchBar (#24051)
* Migrate `keymap.openCommandBar` to `keymap.openSearchBar`

* Add license header

* Review fixes

* Improve comments
2023-04-12 13:41:36 +00:00
Marco André Dinis c0e5e1a1ef
Integration: add service to server and client (#24133)
* Integration: add service to server and client

* Add cache for Integration to Proxy

* Add RO for Integration resource for Proxy role
2023-04-12 11:34:21 +00:00
Marco André Dinis 9bc8e0d820
Restore MajorVersion template var for Installers (#24388)
* Restore MajorVersion template var for Installers

* Set Version for Installers template
2023-04-12 10:45:23 +00:00
Marco André Dinis aee1cdc131
Flaky Test detector: skip slow tests (#24429)
* Flaky Test detector: skip slow tests

* revert dummy change
2023-04-12 10:34:24 +00:00
Edoardo Spadolini 37919f1912
Remove unused function call forward (#24401) 2023-04-12 09:54:21 +00:00