Commit graph

3409 commits

Author SHA1 Message Date
Russell Jones 9da48d8530 Disable events and session recordings from Teleport nodes when sessions
are recorded at the proxy.
2018-01-12 21:17:09 +00:00
Russell Jones 94ae4d2a3f
Merge pull request #1581 from gravitational/rjones/random-id
In-memory forwarding servers now have a random server_id.
2018-01-12 13:13:21 -08:00
Russell Jones 1c65651658 In-memory forwarding servers now have a random server_id. 2018-01-12 19:33:23 +00:00
Alexander Klizhentas 49126a4b36
Merge pull request #1583 from gravitational/sasha/fixmerge
add missing commits due to failed merge
2018-01-11 18:37:30 -08:00
Sasha Klizhentas 78c157a4e2 add missing commits due to failed merge 2018-01-11 18:28:04 -08:00
Alexander Klizhentas f81c712d6a
Merge pull request #1578 from gravitational/sasha/tcux
Enforce trusted cluster resource name, fixes #1543
2018-01-11 18:22:49 -08:00
Sasha Klizhentas ef20e45208 Enforce trusted cluster resource name, fixes #1543
This commit makes sure that trusted cluster resource
name is the same name as the cluster name it conects to.

If user supplies name of the trusted cluster resource
that is different from the cluster name, the warning
will be issued and trusted cluster will be renamed.

Upgrade procedure renames existing trusted clusters
in place.

If user supplies trusted cluster without role
mappings, or with role mappings referring to
non-existent roles that do not exist, the
error will be returned.
2018-01-11 14:13:30 -08:00
Ev Kontsevoy c4b57bc7f5
Merge pull request #1569 from MattiasGees/bug/tsh-port
Move nodeport from int16 to int32
2018-01-11 12:53:12 -08:00
Ev Kontsevoy 078907b068
Merge branch 'master' into bug/tsh-port 2018-01-11 12:33:56 -08:00
Ev Kontsevoy 5a72f5ade7
Merge pull request #1574 from maznu/master
update docs to reflect that v2.4 has removed tsh agent (fixes #1572)
2018-01-11 12:32:52 -08:00
Marek Isalski ae08163ca6 update docs to reflect that v2.4 has removed tsh agent 2018-01-11 08:52:24 +00:00
Mattias Gees 296185194e
Merge branch 'master' into bug/tsh-port 2018-01-11 09:52:13 +01:00
Ev Kontsevoy b6cd24033f
Merge pull request #1570 from gravitational/ev/docs-2.4
Remove reference to cluster name in FAQ as it's not sent in events
2018-01-10 09:41:52 -08:00
Ev Kontsevoy 4a06a344e1
Merge branch 'master' into ev/docs-2.4 2018-01-10 09:36:18 -08:00
Mattias Gees 9c4d1afba6 Move nodeport from int16 to int32
The highest port number can be 65535 but int16 only goes to 32767. That is why we need int32 to reach higher port numbers than 32767. In certain cases this can be handy when you want to run the node client on a random port.
2018-01-10 16:17:58 +01:00
Roman Tkachenko 4a5fba0767
Merge pull request #1568 from gravitational/roman/dockerpro
Allow to pick pro or enterprise mode in docker flow
2018-01-09 18:44:42 -08:00
Roman Tkachenko 85efd6f6ed Update e reference 2018-01-09 18:40:43 -08:00
Roman Tkachenko 69866262ea Allow to pick pro or enterprise mode in docker flow 2018-01-09 17:56:08 -08:00
Alexander Klizhentas 2bb2f87061
Merge pull request #1561 from gravitational/ev/github-auth
Minor documentation changes
2018-01-09 16:48:02 -08:00
Alexander Klizhentas 884378baaf
Merge pull request #1567 from gravitational/rjones/term-init-size
Initial Terminal Size
2018-01-09 16:47:47 -08:00
Russell Jones 7c263f2bd9 Fixed handling of initial terminal size. For Teleport nodes, don't
reduce the width of the terminal by one. For the recording proxy, width
and height were transposed.
2018-01-09 16:30:33 -08:00
Roman Tkachenko e37d7aa1ee Remove reference to cluster name in FAQ as it's not sent in events 2018-01-09 16:05:44 -08:00
Russell Jones 97aabeb7d5
Merge pull request #1559 from gravitational/rjones/role-compat
Added role option "cert_format" to control certificate generation
2018-01-09 15:09:40 -08:00
Russell Jones b3d4d36fde Added cert_format to role as well as tsh to control how a certificate is
generated.
2018-01-09 14:57:35 -08:00
Roman Tkachenko 16386ebc10
Merge pull request #1565 from gravitational/roman/anon
Add anonymizer
2018-01-09 14:13:14 -08:00
Roman Tkachenko 7b5fbec0bb Update e reference 2018-01-09 14:08:54 -08:00
Roman Tkachenko dd515b4580 Merge branch 'roman/anon' of github.com:gravitational/teleport into roman/anon 2018-01-09 12:27:02 -08:00
Roman Tkachenko 5e05b751ee Fix comment 2018-01-09 12:26:48 -08:00
Roman Tkachenko 613c46fe21
Merge branch 'master' into roman/anon 2018-01-09 12:25:34 -08:00
Alexander Klizhentas eb07aa26ba
Merge pull request #1562 from gravitational/sasha/public
Add support for extra principals, fixes #1174
2018-01-09 12:09:21 -08:00
Roman Tkachenko f1e0c5db46 Update e 2018-01-09 11:54:30 -08:00
Roman Tkachenko 8e65199224 Add anonymizer 2018-01-09 10:30:19 -08:00
Sasha Klizhentas c1153734b0 Add support for extra principals, fixes #1174
Add support for extra principals for proxy.
Proxy section already supports public_addr
property that is used during tctl users add
output.

Use the value from this property to update
host SSH certificate for proxy service.

proxy_service:
  public_addr: example.com:3024

With the configuration above, proxy host
certificate will contain example.com principal
in the SSH principals list.
2018-01-08 20:36:34 -08:00
Ev Kontsevoy b0eed6c3b4 Minor documentation changes 2018-01-08 19:00:53 -08:00
Ev Kontsevoy bbc843c42a
Merge pull request #1557 from gravitational/kate
Kate's changed diagram images
2018-01-08 13:15:28 -08:00
Kate Von Houck 3e976bd296 Kate's changed files 2018-01-08 13:01:35 -08:00
Ev Kontsevoy 4707badf22
Merge pull request #1556 from gravitational/ev/docs-2.4
Documentation for 2.4
2018-01-08 12:43:29 -08:00
Ev Kontsevoy 763a4a6541 2.4 documentation 2018-01-08 12:16:26 -08:00
Ev Kontsevoy 1f9862be9a 2.4 version template 2018-01-07 16:32:43 -08:00
Alexander Klizhentas a23c1e73e0
Create ISSUE_TEMPLATE.md 2018-01-06 15:32:52 -08:00
Alexander Klizhentas ce3e3a0c8a
Merge pull request #1555 from gravitational/sasha/pmux
Join address for web, reverse tunnel, fixes #1544
2018-01-05 18:09:23 -08:00
Sasha Klizhentas ef473d809e Join address for web, reverse tunnel, fixes #1544
Support configuration for web and reverse tunnel
proxies to listen on the same port.

* Default config are not changed for backwards compatibility.
* If administrator configures web and reverse tunnel
addresses to be on the same port, multiplexing is turned on
* In trusted clusters configuration reverse_tunnel_addr
defaults to web_addr.
2018-01-05 16:20:56 -08:00
Alexander Klizhentas 19a6e5ed4b
Merge pull request #1549 from gravitational/sasha/nfs2
Add support for NFS-friendly log protocol.
2018-01-05 10:39:12 -08:00
Sasha Klizhentas 71c15e5835 Add support for NFS-friendly log protocol.
* Session events are delivered in continuous
batches in a guaranteed order with every event
and print event ordered from session start.

* Each auth server writes to a separate folder
on disk to make sure that no two processes write
to the same file at a time.

* When retrieving sessions, auth servers fetch
and merge results recorded by each auth server.

* Migrations and compatibility modes are in place
for older clients not aware of the new format,
but compatibility mode is not NFS friendly.

* On disk migrations are launched automatically
during auth server upgrades.
2018-01-04 18:54:37 -08:00
Russell Jones f5beb2f0f3
Merge pull request #1550 from gravitational/rjones/sec-fix
Don't allow second factor by-pass.
2018-01-04 13:57:04 -08:00
Russell Jones 1670fffcb3 Don't allow second factor by-pass. 2018-01-04 13:43:39 -08:00
Russell Jones 6ded752ff4
Merge pull request #1534 from gravitational/rjones/test-plan
Added manual test plan for Teleport.
2018-01-04 13:36:12 -08:00
Russell Jones 199419bb2e Added manual test plan for Teleport. 2018-01-04 13:12:06 -08:00
Sasha Klizhentas dc44b76b1d Release 2.5.0-alpha.2 2018-01-03 10:48:57 -08:00
Alexander Klizhentas 7569233d7f
Merge pull request #1539 from gravitational/sasha/signup
fix incorrect cluster name on the web handler
2018-01-03 10:46:57 -08:00