Commit graph

36 commits

Author SHA1 Message Date
Sasha Klizhentas fba07c4f17 add support for passing env variables, fixes #451 2016-06-10 09:38:19 -07:00
Ev Kontsevoy 92b30c3c77 Configuration changes
1. data_dir is now a global setting in teleport.yaml (instead of being
   inside of "storage" sub-section)

2. changing data_dir in one place causes all of teleport to use it,
   not just bolt backends.

3. moving auth server to listen on non-default ports properly adjusts
   the global auth_servers setting

4. `tctl` now accepts -c flag just like Teleport, so you can pass
   `teleprot.yaml` to it.

Fixes #432
Fixes #431
Fixes #430
2016-05-31 14:58:55 -07:00
Ev Kontsevoy dc87ef5aec Clean error reporting for SSH exec
- stdout and stderr are separated
- exit status is inherited by tsh
2016-05-24 18:00:26 -07:00
Ev Kontsevoy 64393d8d27 Fixed tests 2016-05-20 20:09:13 -07:00
Ev Kontsevoy ab278f0a06 TunClient changes
TunClient always tries to dial the statically configured auth server
first, before trying "discovered" ones.

The rationale is that --auth flag must override whatever dynamic auth
servers have been discovered (because sometimes their IPs are wrong, if
advertise-ip was misconfigured)

Closes #416
Fixes #416
2016-05-20 19:38:20 -07:00
Ev Kontsevoy 49256d1c23 Merge remote-tracking branch 'origin/master' into ev/multi-role
Conflicts:
	lib/auth/tun.go
2016-05-17 10:53:36 -07:00
Ev Kontsevoy 23b3565f3a Started work on self-reconnecting reverse tunnels 2016-05-11 13:17:13 -07:00
Ev Kontsevoy 0b26b7fc47 Teleport Host Certificates support multiple roles now
Teleport CA-signed host certificates used to support only one
server role per cert.

This commit adds the ability to store multiple roles in a
certificate, paving the road for multi-role node support in
a near future.
2016-05-10 20:27:18 -07:00
Ev Kontsevoy bd9ad5782c Merge remote-tracking branch 'origin/master' into ev/log 2016-05-08 11:53:57 -07:00
Ev Kontsevoy b175d92052 PR comments - implemented! 2016-05-07 21:51:35 -07:00
Ev Kontsevoy e10612028e Preparations for a PR
Fixes #394
2016-05-06 20:48:02 -07:00
Ev Kontsevoy f27e207afc Replaced weg sockets with HTTP POST/GET chunks 2016-05-05 23:51:56 -07:00
Ev Kontsevoy d1f6e5e479 Bufix in CLI session player
- it now correctly sets its window size on "play"
2016-05-04 22:17:24 -07:00
Ev Kontsevoy fc317d781f Integration test for audit log 2016-05-04 16:49:59 -07:00
Ev Kontsevoy d334f6e3be Brought back all uncommented tests 2016-05-01 01:36:21 -07:00
Ev Kontsevoy 4bed72d50b Intermediate commit:
- Finished (roughly) audit logs + events
- Started covering this with tests
2016-04-26 23:28:58 -07:00
Ev Kontsevoy e28f21922c Certificate TTL improvements
1. Server now always uses UTC timestamps for certificates it ussues
2. Client doesn't store cert validBefore time in separate files, it
   parses the cert itself.

Fixes #370
2016-04-19 16:09:22 -07:00
Ev Kontsevoy 9e5ea47732 PR code review suggestions 2016-04-19 10:37:46 -07:00
Ev Kontsevoy 9869c5cd01 Fixed integration tests 2016-04-19 02:08:07 -07:00
Ev Kontsevoy 8cb2716373 Refactoring of reverse tunnel agent
- reduced number of goroutines
- reduced number of 'sleep constants', settling on just one:
  `defaults.HeartbeatPeriod`
- increased the interval

Fixes #358
2016-04-17 15:45:24 -07:00
Ev Kontsevoy e4023519d0 Fixed integration builds under Jenkins
... had to give TTY to Docker container which executed the test
2016-04-14 15:03:47 -07:00
Ev Kontsevoy 42c4eaf269 Addded integration tests for:
- interactive SSH (with shell)
- joining sessions
2016-04-14 14:17:56 -07:00
Ev Kontsevoy 0dcdc4c278 Added ability to specify which console to use
...by teleport clients + servers, meaning:

1. Servers do not default to stdout when printing startup messages
2. Clients can use arbitrary input/output instead of stdin/stdout when
   doing SSH/join. This helps with integration testing.
2016-04-14 13:56:53 -07:00
Ev Kontsevoy 7252f223ca Intermediate commit 2016-04-14 13:56:53 -07:00
Ev Kontsevoy 3d42e3d636 Prepared previous commits for merging into master
- Fixed all tests
- Removed "magic constants" in random places
- Improved 'retry connecting to auth server' logic (it used to always
  fail on 1st attempt)
2016-04-11 16:32:38 -07:00
Ev Kontsevoy 31951cb1e4 Incorporated 'testauthority' into integration tests 2016-04-11 16:32:38 -07:00
Ev Kontsevoy c0ba0cffff Dynamic ports for integration testing 2016-04-11 16:32:38 -07:00
Ev Kontsevoy 6ac710f308 Nicer inetgration package 2016-04-11 16:32:37 -07:00
Ev Kontsevoy a9b193222a Added explicit tunnel access to integratin testing 2016-04-11 16:32:37 -07:00
Ev Kontsevoy 4cdaaa46a3 Teleport won't look for web assets
... when executing simple commands like 'status' or 'version'
2016-04-11 16:32:37 -07:00
Ev Kontsevoy 1cc9f9da8a Incorporated GetFreeTCPPorts() into integration testign 2016-04-08 10:38:19 -07:00
Ev Kontsevoy dde41aa123 Added JSON annotations to some structs 2016-04-08 00:42:09 -07:00
Ev Kontsevoy 95f9e2c94d Made integration framework more flexible 2016-04-07 23:57:32 -07:00
Ev Kontsevoy 4587b6e9e9 Added endurance integration test 2016-04-07 19:01:31 -07:00
Ev Kontsevoy 8bbb14d03b Sped up tests 2016-04-07 18:29:07 -07:00
Ev Kontsevoy b7be49bc49 Added new integration test (not turned on yet) 2016-04-07 18:20:38 -07:00