Commit graph

5766 commits

Author SHA1 Message Date
Brian Joerger a555844116
Refactor API Dependencies - clockwork (#5253)
Deprecate SetTTL method in favor of SetExpiry and remove other dependencies on clockwork.
2021-01-20 15:55:32 -08:00
Gus Luxton 8d40ce9b6a
Address post-release checklist items for 5.1 (#5223) 2021-01-20 17:13:42 -04:00
Forrest Marshall d91410771e fix extraneous logins in tctl output 2021-01-20 11:33:26 -08:00
Rob Coward 20e6466525
Adding annotations to the serviceAccount definition (#5271)
* Adding annotations to the serviceAccount definition to allow IRSA to be used on AWS EKS deployments

* Adding separate settings for the auth service when deploying highAvailability and passing through loadBalancerSourceRanges when service type is LoadBalancer
2021-01-20 10:31:09 -04:00
Andrew Lytvynov 61bcc22a26
kube: always enable proxy protocol support (#5299)
Proxy protocol is sometimes used by load balancers to communicate the
real client IP address. Re-use the detection/parsing code from
lib/multiplexer on all k8s listeners (proxy and kubernetes_service)
2021-01-19 23:48:30 +00:00
Brian Joerger 7f0c20d9a2
API Dependency Reduction - lib/jwt (#5295)
Refactor CertAuthority methods and GenerateAppToken to remove lib/jwt dependency.
2021-01-19 14:16:25 -08:00
Brian Joerger 76b6b6d84d
Refactor lib/utils/parse dependency in api package. (#5261) 2021-01-19 11:32:07 -08:00
colinedwardwood 5f5c5a672b
Correct the user name in the tctl auth sign step (#5314)
make it match the user name created above.

Co-authored-by: Gus Luxton <gus@gravitational.com>
2021-01-19 12:02:47 -04:00
Alexey Ivanov fb8d95f191
Fix admoniton new lines (#5339) 2021-01-18 17:33:17 -04:00
Sasha Klizhentas 579ee120bc Adds simpler standalone k8s chart.
A new chart teleport-cluster helps users to get started
with Teleport on Kubernetes. It uses single node deployment with
persitent volumens and supports ACME.

A new quickstart guide will use this chart.
2021-01-18 09:43:41 -08:00
Alexey Ivanov 7b21cbaa56 Update html tag attributes to use in React 2021-01-16 19:37:45 -08:00
Forrest Marshall ba5e94f146 update username on login 2021-01-16 10:57:28 -08:00
Russell Jones b8c0b96415 Fixed panic when NewServerContext returns error.
If "NewServerContext" returns an error, then the error is logged using
the returned context which is nil causing a panic.

This change always uses the logger attached to the server instead.
2021-01-15 17:11:01 -08:00
Gus Luxton 4ad0244ff2
Add teleport:5 nightly Docker image (#5310) 2021-01-15 17:28:37 -04:00
Gus Luxton 8f04136f8f
Add Drone builds on push to branch (#5292) 2021-01-15 17:08:07 -04:00
Gus Luxton b36d4c4dd7
Replace hardcoded instances of teleport with DRONE_REPO_NAME (#5283) 2021-01-15 16:33:54 -04:00
Roman Tkachenko 7277e23df9
Release 6.0.0-alpha.1 (#5312) 2021-01-15 11:55:55 -08:00
Sasha Klizhentas 186e3d2bcf Adds guidelines for writing docs 2021-01-15 10:37:46 -08:00
Roman Tkachenko 8e1865464b
Database access (#5005) 2021-01-14 18:21:38 -08:00
Ben Arent 7b054c97df
Teleport Application Access Docs issues (#5280)
* Fixes https://github.com/gravitational/teleport/issues/5278
* Apply suggestions from code review

Co-authored-by: Gus Luxton <gus@gravitational.com>
2021-01-14 17:50:06 -08:00
Brian Joerger 64f80f1d1a
Move proto files and other select files from lib/events package to api/types/events package. (#5251) 2021-01-14 16:13:17 -08:00
Brian Joerger eb97e172f1
Refactor TrustedCluster.CheckAndSetDefaults logic. (#5287) 2021-01-14 15:58:50 -08:00
Sasha Klizhentas f88cbaf575 Makes SAML error messages friendly to users. 2021-01-14 15:12:04 -08:00
Brian Joerger ab3d1a11da
Move /lib/wrappers to /api/types/wrappers. (#5286) 2021-01-14 14:58:44 -08:00
a-palchikov 0ddde38df2
Suppress linter warning about unnecessary type conversion on darwin. (#5302) 2021-01-14 19:23:48 +01:00
a-palchikov 524c9483b3
Explicitly cast time values to int64 to enable 32-bit builds. (#5291)
Updates https://github.com/gravitational/teleport/pull/4764.
2021-01-14 11:10:47 +01:00
William Reed 40b68708af
checksum must be on pod, not deployment (#5289)
checksum must be on pod, not deployment
2021-01-13 11:20:14 -08:00
Steven Martin 9a246abb3b
Update required go version to 15+ for client in docs (#5284) 2021-01-13 11:51:58 -05:00
Steven Martin 4c7eb69b79
Added notes and corrected cat useradd command for pam docs (#5273)
* Added notes and corrected cat command for pam

* Update docs/5.0/features/ssh-pam.md

Co-authored-by: Ben Arent <ben@gravitational.com>

Co-authored-by: Ben Arent <ben@gravitational.com>
2021-01-13 11:47:29 -05:00
Brian Joerger 165c78846f
Refactor AuditStream endpoints to remove lib/session dependency. (#5252) 2021-01-12 12:45:14 -08:00
Steven Martin 1964da0f6b
Add username in Okta SSO Docs config (#5193)
* Include username in example

* Add username to example

* make docs-fix-whitespace

Co-authored-by: Gus Luxton <gus@goteleport.com>
Co-authored-by: Gus Luxton <gus@gravitational.com>
2021-01-12 14:07:51 -05:00
Brian Joerger 39eff6e625
Refactor OpType and constants from lib/backend into the types package. (#5241) 2021-01-12 10:47:30 -08:00
a-palchikov 6684c37103
Use fake clock consistently in units tests. (#5263)
Use fake clock consistently in units tests.
2021-01-12 12:10:00 +01:00
Ev Kontsevoy a9829381e8
Updated URLs inside the product (#5260) 2021-01-11 19:34:53 -04:00
Marco Monaco b58c603c7d
Fix health check protocol (#5268)
proxy will not respond to plain HTTP requests, and the health check will fail otherwise
2021-01-11 19:10:25 -04:00
Gus Luxton 4672b8be00
Update e ref (#5258) 2021-01-11 14:46:06 -04:00
Brian Joerger 3c3ce160d9
Move API types and functionality from lib/services to api/types. (#5143) 2021-01-11 10:02:34 -08:00
Andrew Lytvynov 9c01c4b84a
RFD 0: RFDs (#5228)
Belated doc describing the RFD format and process.
As always, everything is up for discussion.

Also, updated prior RFDs to conform to the style.
2021-01-09 10:59:42 -08:00
Gus Luxton 28ca950ce8
Update versions built by docker-cron for 5.1 (#5221) 2021-01-08 16:08:45 -04:00
Andrej Tokarčík 7b723d3313
Determine node registration method based on server port (#5182)
The logic of `auth.Register` is adapted so that it attempts the proxy mode connection first in case the first of the auth servers to register with has port `defaults.HTTPListenPort` (= 3080).
2021-01-08 18:30:37 +01:00
Paul Schisa 88e77bda51
Change links in README.md from gravitational.com to goteleport.com (#5250)
Part of ticket #5245 during the L&L Github lab.  Change all the links from gravitational.com to goteleport.com

Co-authored-by: Paul Schisa <paulschisa@pauls-mbp.home>
Co-authored-by: Gus Luxton <gus@gravitational.com>
2021-01-08 12:01:04 -04:00
Jeff Anderson ac92f5ebdc
[docs] Document lower case only in app name (#5181)
The IsDNS1035Label function that is called in lib/service/cfg.go expects this validation to be lower case only (see https://github.com/kubernetes/kubernetes/issues/71140 for the k8s position on this code behavior)

Our docs say upper case characters are allowed, but they currently are not. Updating this doc to reflect behavior.

Co-authored-by: Ben Arent <ben@gravitational.com>
2021-01-07 14:01:25 -08:00
Gus Luxton 6e1726bc4c
Add teleport-kube-agent chart and remove unwanted charts (#5233) 2021-01-07 16:53:25 -04:00
Andrej Tokarčík f2e118c43c
Extend tsh clusters output with "Cluster Type" and "Selected" columns (#5051) 2021-01-07 15:03:58 +01:00
Andrej Tokarčík a178a278ef
Support viewing cluster auth preferences with tctl get cap (#5159) 2021-01-07 14:42:45 +01:00
Alexey Ivanov 44e22eed9c Fix wrongly formatted headers 2021-01-07 00:57:55 -08:00
Gus Luxton dd79d2a28c
[auto] Update AMI IDs for 5.1.0 (#5231) 2021-01-06 16:43:20 -04:00
Gus Luxton 86ae90f6ff
Fix submodule cloning on Drone exec runners (#5215) 2021-01-06 14:40:46 -04:00
Forrest Marshall 0aaf421d58 always register access requests against root cluster 2021-01-06 10:07:10 -08:00
Gus Luxton bdbe10ed1d
Update Makefile version on master branch (#5220) 2021-01-06 10:46:06 -04:00