Commit graph

13152 commits

Author SHA1 Message Date
Grzegorz Zdunek 9d05287cc9
Update kingpin & allow autocompletion (#26238)
* Update kingpin version

* Convert `defaultUsageTemplate` to "text/template"

* Add // replaced

* Sort deps

* Change kingpin v2.3.1 to v2.3.2

* Add missing indirect dep

* Update go.sum

* Delete kingpin_deleteme.go
2023-05-19 07:10:53 +00:00
Roman Tkachenko 79b54d859d
Add support for automatic database users for Postgres (#25614) 2023-05-18 23:22:14 +00:00
Steven Martin 4741666e74
docs: remove starting from messages older then 10.0 (#26550)
* docs: remove starting from messages older then 10.0

* lint fix
2023-05-18 21:20:58 +00:00
Steven Martin daf410c0a4
changes openssh addr validation to allow hosts (#25958)
* changes openssh addr validation to allow hosts

* add dns address check for OpenSSh

* lint fix

* fix missing closing bracket

* lint fix
2023-05-18 20:38:48 +00:00
Michelle Bergquist 1cc33963dc
bump-e-ref (#26540) 2023-05-18 20:36:52 +00:00
Isaiah Becker-Mayer 64deb39769
Adds an admonition about Teleport not currently supporting Azure AD (#26210)
* adds an admonition about azure ad

* fixes admonition explanation

* adds suggestion to use non-ad access

* Update docs/pages/desktop-access/active-directory-manual.mdx

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* Update docs/pages/desktop-access/active-directory.mdx

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

---------

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
2023-05-18 20:02:12 +00:00
Paul Gottschling 354ef2bfc4
Edit the docs UI reference (#26259)
* Edit the docs UI reference

- Alphabetize entries so they're easier to navigate
- Document MermaidJS support
- Add a warning about using ScopedBlocks, since it's easy for readers to
  miss them

* Update docs/pages/contributing/documentation/reference.mdx

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>

* Add measured discussion of when to use Mermaid

Note that MermaidJS diagrams do not support images in our
implementation.

---------

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
Co-authored-by: Steven Martin <steven@goteleport.com>
2023-05-18 19:47:51 +00:00
Paul Gottschling 645a796041
Minor updates to Server Access Getting Started (#25804)
Closes #21719

- Replace "Node" with more appropriate terms now that this is no longer
  a Teleport product name.
- Indicate that we expect readers to run `tctl tokens add` on their local
  workstations

Co-authored-by: Steven Martin <steven@goteleport.com>
2023-05-18 19:46:09 +00:00
Paul Gottschling 67b77a8472
Refresh Kubernetes Access Getting Started diagram (#25887)
* Refresh Kubernetes Access Getting Started diagram

Closes #14485

- Use a Mermaid diagram instead of an image (see #25883)
- Update terms used in the diagram
- Ensure that the name of the Teleport cluster is consistent between the
  diagram and the body text

* Docs: Apply Styling to Graph (#26154)

* apply styling to graph

* remove unused image

---------

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
Co-authored-by: Steven Martin <steven@goteleport.com>
2023-05-18 19:45:15 +00:00
Paul Gottschling a6b60741b6
Describe tsh ls support for multiple labels (#25802)
Closes #12575

Edit the CLI reference to indicate that `tsh ls` can support multiple
label argument values, resolving a longstanding TODO.

Co-authored-by: Steven Martin <steven@goteleport.com>
2023-05-18 19:43:38 +00:00
Alex Fornuto 4975e1a9dd
Docs: mark Okta application access as preview (#26515)
* mark Okta application access as preview

* expand warnings, update titles

* rm errant newline

* assign code syntax to blocks...

without wich the Var components will not render
2023-05-18 18:32:06 +00:00
Alex Fornuto 048fb47403
suggest machine id in plugins partial (#26513) 2023-05-18 18:00:26 +00:00
Gavin Frazar 401ce30a46
skip rdpclient build in integration tests (#26492)
* add RDPCLIENT_SKIP_BUILD opt to makefile

* skip rdpclient build in go integration tests
2023-05-18 18:00:06 +00:00
Alan Parra e927379b68
Do not run the uploader with the MDM role (#26491)
* Do not run the uploader with the MDM role

* Update comment

* Use ClientIdentity instead of ServerIdentity

* Add a no-uploader warning
2023-05-18 17:36:16 +00:00
Alex Fornuto 131d976751
remove confusing variable delineation (#26097) 2023-05-18 17:06:05 +00:00
Michael da6b31936d
Add the RFD for implementing file transfers in the Web UI during a moderated session (#23546) 2023-05-18 16:53:27 +00:00
Steven Martin affe590597
docs: Add Msft SQL Server client examples and link in sql server guide (#23263)
* Add Msft SQL Server client examples and link in sql server guide

* Apply suggestions from code review

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* put sql server connection details in table

* Update docs/pages/connect-your-client/gui-clients.mdx

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* update desription of db client tools

* correct capitalization

* remove extra space

* rename jpg file to fix spelling check

* optimize images

* verbiage updates

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>

* include note in pk sql server

* column length fixes

* change to using same include for sql server connect note

---------

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
Co-authored-by: alexfornuto <alex.fornuto@goteleport.com>
2023-05-18 15:47:52 +00:00
Tiago Silva bc666aeb3a
Fix json tag typo (#26507)
The json tag `omitempty` was misspelled.
2023-05-18 15:44:08 +00:00
Marco André Dinis 88e85fb7de
Install Script: add Darwin ARM64 support (#26498) 2023-05-18 13:14:44 +00:00
STeve (Xin) Huang 9619c6ae50
[docs] Amazon Athena guide for Application Access (#25329)
* [docs] Amazon Athena guide for Application Access

* review comments

* update cspell.json

* Alex's comment and fix lint
2023-05-18 13:02:25 +00:00
Nic Klaassen 20aaee7c88
opentelemetry dependency updates (#25497)
* Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.40.0 to 0.41.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.40.0...zpages/v0.41.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc

Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* merge outstanding otel updates

* serialize TestTraceProvider subtests

This test modifies the global trace provider and a race can reliably
detected with the latest version of the oteltrace library.

This doesn't have much impact on the test runtime, which is dominated by
a single subtest.
```
--- PASS: TestTraceProvider (1.07s)
    --- PASS: TestTraceProvider/not_sampling_prevents_exporting (0.00s)
    --- PASS: TestTraceProvider/spans_exported_with_gRPC+TLS (0.00s)
    --- PASS: TestTraceProvider/spans_exported_with_gRPC (0.00s)
    --- PASS: TestTraceProvider/spans_exported_with_HTTP (0.00s)
    --- PASS: TestTraceProvider/spans_exported_with_HTTPS (1.06s)
```

* fix races in tsh tests

* Add TestForwardingTraces to flaky test detector skip list

* fix race in TestExportingTraces

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Ross <tim.ross@goteleport.com>
2023-05-18 12:51:17 +00:00
Tiago Silva da8e894cdb
Add proxy peering to test plan (#26440)
Test plan misses testing access when using proxy peering. Nothing should
differ from normal reverse tunnel access but it makes some assumptions
that differ from the reverse tunnel.
2023-05-18 10:56:42 +00:00
Grzegorz Zdunek a568361a26
Show dev-related tools only in dev mode (#26324) 2023-05-18 10:13:02 +00:00
Grzegorz Zdunek 8f73ba0c89
Add updated kingpin dependency (#26346)
* Add updated kingpin dependency

* Add a bogus kingpin/v2 import to satisfy linter

* Fix order in go.sum

* Add license
2023-05-18 07:47:26 +00:00
Marco André Dinis 7a4d1f47ff
change rfd 0119 status to implemented (#26438) 2023-05-18 06:38:18 +00:00
teleport-post-release-automation[bot] 50343d3417
[auto] Update AMI IDs for 13.0.2 (#26483)
Co-authored-by: GitHub <noreply@github.com>
2023-05-17 21:46:16 +00:00
Michelle Bergquist 545cdba2c6
bump eref (#26463) 2023-05-17 21:40:27 +00:00
Forrest b4bc465ad4
add rbac for cluster alerts (#26423) 2023-05-17 21:36:37 +00:00
Gavin Frazar 9ed945b67c
update db and app service role permissions (#25247)
* app service KindApp read/write to read-only
* db service KindDatabase read/write to read-only
* fix DeleteAllSnowflakeSessions
* update snowflake session authz checks
* rework snowflake watcher logic
2023-05-17 21:15:38 +00:00
Steven Martin 740262573d
bypass os-compatibility-test-bypass for md and mdx files (#26450)
* bypass os-compatibility-test-bypass for md and mdx files

* include ignore md and mdx files
2023-05-17 21:14:04 +00:00
Forrest 1c8706d132
add upgrader to inventory hello (#26454) 2023-05-17 19:50:14 +00:00
Alex Fornuto 9b68b5794c
Docs: Adjust curl examples (#26470)
* replace -o with -O in curl examples where appropriate

* point to teleport CDN for downloads
2023-05-17 19:02:34 +00:00
Nic Klaassen 15d8544a82
add list of applied login rules to user login event (#26460) 2023-05-17 18:43:50 +00:00
Evan Freed d93a0f34cf
bump docs for cloud to 12.4.2 (#26419)
Signed-off-by: Evan Freed <evan.freed@goteleport.com>
2023-05-17 18:03:14 +00:00
Alan Parra a4d168fae6
Add and map the MDM system role (#26395)
* Add and map the MDM system role

* Add specialized output for "mdm" tokens

* Use teleport.yaml instead of mdm_service.yaml

* Ignore RoleMDM on TestLocalServiceRolesHavePermissionsForUploaderService
2023-05-17 17:46:04 +00:00
Gavin Frazar 74569fcfbe
add AWS cross-account db access guide (#25687) 2023-05-17 17:36:31 +00:00
Lisa Kim c1853cf012
WebDiscover: Revert deleting the app wizard (#26282)
* Reverting app wizard (copy pasta deleted code)

* Render modal for application resource

* Update snapshot
2023-05-17 17:05:18 +00:00
Steven Martin d3edded4b9
changelog spell fixes (#26430) 2023-05-17 16:24:20 +00:00
Michelle Bergquist e4d1614741
bump eref (#26404) 2023-05-17 16:07:33 +00:00
Paul Gottschling 97538884f9
Update AMI usage instructions (#25807)
Closes #18600

Our usage instructions for newly built Teleport AWS AMIs point to a
location of the docs that no longer exists. Update this to point to
current locations within the docs.
2023-05-17 15:30:00 +00:00
Steven Martin 6d0e0f7239
skip md and mdx files for go linting (#26434) 2023-05-17 15:07:56 +00:00
Mike Jensen bb2bfaa28c
Update gravitational/protobuf fork tag (#26373)
* Update `gravitational/protobuf` fork tag

Previously we were not referencing a tag, instead we were referenced to a commit on this branch: https://github.com/gravitational/protobuf/tree/dmitri/merge-values

Previously versioned `1.3.2` it was thought that this branch contained the fix for `Skippy Peanut Butter` CVE: https://nvd.nist.gov/vuln/detail/CVE-2021-3121

However that was not the case, so the following was performed:
* A `teleport` branch was created on `protobuf` from the upstream v1.3.2 tag
* Our custom commits were cherry-picked in (the Clone Merger functionality added, codeql config, and dependency-review config)
* It was pushed as tag `v1.3.2-1` to our fork (as seen in this change)

* Update protobuf tag to v1.3.2-teleport.1
2023-05-17 14:59:14 +00:00
Alan Parra 72c9c5f2bd
Add the JamfSpecV1 proto (#26391)
* Add JamfSpecV1 proto

* Correction: filter_rsql is not required

* Update generated protos
2023-05-17 14:46:53 +00:00
Marek Smoliński 85809882dd
RFD 112 - Teleport Oracle Access Integration (#16435) 2023-05-17 12:52:20 +00:00
Michael Wilson 04891e5402
Add in Okta plugin type. (#26349)
* Add in Okta plugin type.

The Okta plugin type has been added to support the hosted Okta plugin in
enterprise.

* Tweak error messages, comments.
2023-05-17 02:12:42 +00:00
Zac Bergquist 84a60baa3c
Desktop access improvements (#26356)
* Change the filters used to query a Windows user's SID

The sAMAccount type is always indexed, so this is a more efficient
query than using the object class attribute.

* Don't attempt DNS resolution for an empty hostname

If we discover LDAP entries with a mising hostname, just skip
over them. This generates less noise in the logs.

* Improve desktop error messaging

Prefer a user-friendly message over "RDP Connection Failed"
where possible.
2023-05-16 22:47:08 +00:00
Zac Bergquist 5ea3f7d403
docs: fix curl usage (#26237)
* docs: remove un-archive step for Windows package

We now ship the .exe file directly, so the extract step is
no longer necessary.

Closes #26211

* docs: fix curl usage

Use -o instead of -O.

Closes #26212
2023-05-16 22:29:21 +00:00
Ryan Clark 8926feb1d1
Update assist warning wording, add link to ToS (#26396) 2023-05-16 20:54:09 +00:00
Ryan Clark 79b2993375
Update e ref (#26392) 2023-05-16 20:11:13 +00:00
Anton Miniailo 6009cca5ee
Disable always pinned MFA certs (#25947) 2023-05-16 19:50:27 +00:00