Commit graph

343 commits

Author SHA1 Message Date
alexlyulkov f9600e4c32 Merge pull request #65 from gravitational/alex/client
Added tsh ssh client
2015-12-30 17:24:47 +03:00
Alex Lyulkov 4c02338225 Tsh client. Everything works. 2015-12-25 02:24:47 +03:00
Ev Kontsevoy 23095e0ad9 Jenkins build target 2015-12-23 10:41:51 -08:00
Alex Lyulkov 18c8ff180a Refactored: renamed fqdn to domainName, renaimed CAservice names 2015-11-20 13:15:48 -08:00
alexlyulkov d7dba26b1a Merge pull request #53 from gravitational/alex/api-roles
Removed auth TCP API listener, added auth API permissions
2015-11-16 12:37:13 -08:00
Alex Lyulkov 8c7f849805 Added tests for permissions, everythink works 2015-11-13 19:47:59 -08:00
klizhentas d29254adba update syntax 2015-11-11 20:25:34 -08:00
klizhentas 557176df8e migrate from orbit to gravity for package management 2015-11-11 09:51:00 -08:00
Alex Lyulkov 32c1c11a9e Fixed scp, added single node config 2015-11-06 20:55:12 -08:00
klizhentas 325a4bf62b some changes to readme 2015-10-28 18:10:09 -07:00
klizhentas 45a5c3c6ae final cleanups 2015-10-26 14:36:52 -07:00
klizhentas 8cb3f63f39 fix orbit integration, tests and configuration samples 2015-10-25 14:48:03 -07:00
klizhentas dbbd15b192 first batch of code changes of moving telescope into teleport 2015-10-24 16:04:13 -07:00
Alex Lyulkov e89e658c20 Modified telescope makefile command for the new congig 2015-10-23 11:52:07 -07:00
klizhentas c58654d55f orbit-compatible packaging and configuration for teleport and telescope 2015-10-14 20:01:25 -07:00
Alex Lyulkov a3db86b236 More folders arrangments 2015-10-05 20:36:55 +03:00
Alex Lyulkov 9afc9a38a1 Fixed imports 2015-10-05 17:33:25 +03:00
Alex Lyulkov c8a415278a Cleanup 2015-09-30 19:48:04 +03:00
Alex Lyulkov a80a105c24 Finished replicated backend, everything works 2015-09-30 19:35:17 +03:00
Alex Lyulkov fac2d4bfdb Returned original auth initialization without sleeps, fixed bugs, everything works now 2015-09-29 13:03:46 +03:00
Alex Lyulkov 97021dcf17 Finished replicated backend 2015-09-15 01:40:34 +03:00
Alex Lyulkov e186ef04af Now telescope verifies teleport certificate using its HostCA or RemoteCAs 2015-09-07 19:50:20 +03:00
Alex Lyulkov c14f43de25 Updated mailgun/lemma/secret and gravitational/session 2015-09-06 17:54:34 +03:00
Alex Lyulkov 4733028760 Finished new cmd args parsing. Fixed Makefile 2015-09-03 14:21:50 +03:00
Alex Lyulkov f3fbc90c38 Getting env vars using kingpin. Changed makefile for the new flag names 2015-09-03 00:51:52 +03:00
Alex Lyulkov 5e137e3daa Fixed makefile tests by adding -test.parallel=0 flag. Fixed AccessPoint interface. 2015-08-26 18:31:34 +03:00
klizhentas 294a49eee8 replace the logging to the package that we control 2015-08-05 12:16:39 -07:00
klizhentas 3ce5afc00b Cleanup and make sure teleport CP is reusable 2015-07-14 17:52:12 -07:00
klizhentas c9eaacb267 Playbacks work 2015-07-10 17:24:44 -07:00
klizhentas cdbeb15b25 messages and chats work 2015-07-09 14:38:50 -07:00
klizhentas 76f28e20a9 Refactored events 2015-07-08 20:57:34 -07:00
klizhentas 0fadb4a44f not too embarrasing 2015-07-02 17:16:44 -07:00
klizhentas bbbc2a8002 add proof of concept terminal sharing 2015-06-28 19:44:07 -07:00
klizhentas f59223256c teleport connect and remote authorities
* teleport connect provides tunnel between local cluster and remote lens
* teleport can optionally trust remote authorities and allow signed keys in
2015-06-28 17:48:10 -07:00
klizhentas 1055446f06 Add support for bolt db 2015-06-17 13:20:53 -07:00
klizhentas 5ac08843ed simplify installation 2015-05-21 12:33:04 -07:00
klizhentas 51ab3a27b9 better workflow and fixes for auth tokens
* fixes the bug in token validation accepting all tokens
* provides generation of provisioning tokens to file and reading tokens from the file
* better setup of default listening ports
2015-05-20 16:35:19 -07:00
klizhentas 94279fb0c4 User manual and API reference
Update teleport documentation with the user manual and high level overview.
Generate API documentation from godoc.
2015-05-13 21:37:25 -07:00
klizhentas 12fdc19ff3 Provisioning and clear role separation
Distinct roles separation:

* Stateful auth server, it is stateful and exposes SSH
  authentication endpoint to the cluster
* Stateless ssh node, it connects to the auth server
  to authenticate access requests
* Stateless cp node, it provides web portal to access
  the cluster and update users keys

Provisioning:

* Auth server automatically sets itself up on the first start,
  no need to explicitly set encryption keys and authority certs

* SSH node connects to the Auth server to provision host private keys
  and sertificates using special SSH provisioning key issued by
  the auth server
2015-05-10 14:52:51 -07:00
klizhentas b0e03bc7e0 update install target in teleport 2015-05-05 16:00:37 -07:00
klizhentas 7e82761e33 Fix installation script 2015-05-04 08:28:32 -07:00
Alexander Klizhentas 7d17f15271 Implement web proxying, and web SSH console proof of concept 2015-04-01 21:21:07 -07:00
Alexander Klizhentas 0c425d32d5 Initial working prototype 2015-03-14 14:35:43 -07:00