Commit graph

7116 commits

Author SHA1 Message Date
Marek Smoliński d24ae5b1ce
Add ability to run Postgres proxy on separate listener (#8323) 2021-12-10 11:05:19 +01:00
Edoardo Spadolini c3dee235a2
Ensure we don't miss the resolution of an access request (#9193)
This makes it so that tsh will watch for access request resolution on the
correct (root) cluster, and it will not create access requests before the event
watcher is ready.


Fixes #9003 and #9244.
2021-12-10 08:09:36 +00:00
Chongyang d19fe1cc99 Run tsh play requests with correct CLI context 2021-12-09 21:58:58 -08:00
Michael Ferranti 4ff0f3c45f Delete extra % sign
with the function, it renders like this, so deleted the % sign.

"Teleport Cloud commits to SLA of 99.5%% of monthly uptime percentage, a maximum of 3 hours 40 minutes of downtime per month."

Either need to merge this PR or fix in the function.
2021-12-09 21:58:58 -08:00
Isaiah Becker-Mayer 368f934739 [auto] Update webassets in master
6f80eee move jest rules to test overrides (#498) https://github.com/gravitational/webapps/commit/6f80eee

[source: -w master] [target: -t master]
2021-12-09 21:58:58 -08:00
Steven Martin f79ad49e5b Update example username desktop service to single quotes 2021-12-09 21:58:58 -08:00
quinqu 759f44c1f6 Correct Dismiss function spelling. 2021-12-09 21:58:58 -08:00
Zac Bergquist a165ad2fcb Tweak LDAPS troubleshooting docs
Make it clear that an LDAP connection reset can be due to attempting
to connect on port 389 (which is what our original instructions advised)
2021-12-09 21:58:58 -08:00
matheus e8f3b54684 Improve error message when TOPT is not valid 2021-12-09 21:58:58 -08:00
Forrest Marshall d2a55b62b8 fix racy test 2021-12-09 21:58:58 -08:00
Jeff Anderson 704b28fcaf bump nginx1.12 to nginx1
amazon_linux_extras has marked nginx1.12 topic as EOL and nginx1 is the
new stable topic to use.
2021-12-09 21:58:58 -08:00
Jeff Anderson 30acd1c5a7 Use in-memory cache for autoscale HA cluster
* Use in-memory cache for autoscale HA cluster
* bump max_connections and add BATS test
2021-12-09 21:58:58 -08:00
Travis Haas 27708b30e1 Add PDB to teleport-kube-agent chart
* Add PDB to teleport-kube-agent chart
* Support a root value of replicaCount
* Update lint values for kube-agent pdb
* Add changes to statefulset
2021-12-09 21:58:58 -08:00
David Heitman 5601c085c0 Optionally allow cluster_name to override public_address being used for cluster_name 2021-12-09 21:58:58 -08:00
Trent Clarke 6916e64ce6
Disable drone triggers (#9313)
Removes all Drone CI tasks from `dronegen` and `.drone.yml`
2021-12-10 15:46:27 +11:00
Jane Quintero 36e4570db6
Check If HEAD Branch Is A Fork (#9302) 2021-12-09 23:30:48 +00:00
Zac Bergquist 3a50912e77
Fix the CRL distribution point in Windows certs (#9299)
A bug introduced in #9152 resulted in us publishing a CRL distribution
point to LDAP which was different than the one encoded in the certs.

Refactor the logic for generating these DNs into shared methods
and add test coverage that verifies the certs meet Windows requirements.

Fixes #9292
2021-12-09 22:04:23 +00:00
Forrest Marshall 2e5ea8fb98 improve lock tests 2021-12-09 13:01:35 -08:00
Forrest Marshall 6f3ce8d3f5 improve Cache.ListNodes perf 2021-12-09 13:01:35 -08:00
Forrest Marshall dfd3732c6b improve concurrent watcher registration perf 2021-12-09 13:01:35 -08:00
Forrest Marshall d52241d969 bump backend limit 2021-12-09 13:01:35 -08:00
dmitri 47b8981de9 Remove uploadCtx/uploadDone as these are automatically reflected with uploadLoopDoneCh 2021-12-09 12:14:45 -08:00
dmitri 5e0c8c9b9a Do not use the server's context to complete the stream - it might have
been already cancelled.
Proto stream to make sure the streams have been completely written
before exiting from Close.

Bug reference: https://drone.teleport.dev/gravitational/teleport/7755/1/7
2021-12-09 12:14:45 -08:00
Jim Bishopp 0ba6809cc4
Fix CryptoRandomHex function (#9186)
Fixes https://github.com/gravitational/teleport-private/issues/80
LAT-APP21-5: Insecure random number generation

- updated rand call from rand.Reader.Read to rand.Read
- changed length parameter name from len to l.
- changed byte slice var name to b.
- updated godoc
2021-12-09 19:50:44 +00:00
rosstimothy 74f553c354
Fix panic running TestIntegration/RotateChangeSigningAlg (#9316) 2021-12-09 13:11:18 -05:00
STeve Huang 4e3f795e8f
Add --cluster flag to all tsh db subcommands, Add "--diag_addr" flag to teleport db/app start (#9220)
* add diag to teleport db/app start

* db --cluster flag supports

* add some ut and fix issue ~/.tsh get removed during test

* working mongodb

* fix logout

* fix ut

* code review comment

* fix mysql
2021-12-09 11:24:39 -05:00
Alex McGrath 8fbcafe798 tool/tctl: Log when requested ttl isnt granted for a cert 2021-12-09 14:05:33 +00:00
Zac Bergquist 031fae2c6e
Replace "loose" with "lose" (#9284) 2021-12-09 03:12:15 +00:00
Justinas Stankevičius d32c7e9d7f
Avoid "Entering/Leaving directory" output in Make (#9246) 2021-12-09 02:47:49 +00:00
Josh Wieder 70ebd1f0c0 Update docker-compose.yml
tutum/curl has been deprecated and turned private on dockerhub for years. curlimages/curl works.
2021-12-08 18:27:48 -08:00
Rosalind Lutsky f971c1f0ad Add thredUP case study to adopters page 2021-12-08 18:27:48 -08:00
Gus Luxton aada505207 Fix confusing port example in standalone docs
External listeners should always be on port 3026, not 3027. This `kube_public_addr` doesn't conform and is causing confusion.
2021-12-08 18:27:48 -08:00
Alexey Ivanov 93e299741d Add scopes description to the docs 2021-12-08 18:27:48 -08:00
Sagi Sarussi 0878271e48 Remove duplicate YouTube link 2021-12-08 18:27:48 -08:00
Cody Roseborough cad8fa4576 Add missing parenthesis in README 2021-12-08 18:27:48 -08:00
Alen a5e1fd2dd1 remove sudo from yum install
removed sudo from yum install b/c it's not required and causes issues with security hardened base AMIs
2021-12-08 18:27:48 -08:00
Russell Jones 598e2417ad Update check.yaml 2021-12-08 17:43:59 -08:00
Alexander Klizhentas b79655738c Improve docs for per-session MFA
Better note that removes confusion.
2021-12-08 17:06:26 -08:00
Jane Quintero 9b5fd64431
Check if PR is from a fork before dismissing runs. (#9300) 2021-12-08 16:12:50 -08:00
Alan Parra e854a82c1c
Add Security and UX sections to the canonical RFD (#9251)
* Add Security and UX sections to the canonical RFD

* Add guidance for Security and UX
2021-12-08 19:43:30 -03:00
Zac Bergquist 1a9416c19f
Fix CheckAndSetDefaults for UserTokenSecretsV3 (#9290)
Since CheckAndSetDefaults mutates the receiver, we need a pointer
receiver.
2021-12-08 12:00:03 -08:00
Jane Quintero 78b273f19e
Trigger Assign workflow on opened and ready_for_review events. (#9272) 2021-12-08 10:17:40 -08:00
Jakub Nyckowski ef66ba793e
Fix custom tsh home dir for some tsh commands. (#9240)
TELEPORT_HOME now should work for all tsh commands.
2021-12-08 11:58:20 -05:00
Isaiah Becker-Mayer 0bde5eec75
simplify desktop access getting started guide (#9100)
* adds necessary line to powershell script and touches up the docs

* touch-ups

* Updates README to the settings that I thought would do the trick. Just tested with these and RDP is timing out for me.

* CR

* CR

* adding warning about the firewall rules mysteriously dissapearing on us and an instruction to use gpupdate.exe

* Switch GPO creation to powershell

* using local file notation

* fixing comments

* fixing mdx errors

Co-authored-by: Zac Bergquist <zmb3@users.noreply.github.com>
2021-12-08 07:46:30 -08:00
rosstimothy 3fcbe17b42
Prevent infinite dialing to Auth (#9254)
NewHTTPClient was not calling CheckAndSetDefault on the provided client.Config which
allowed the DialTimeout to be 0. This allowed dialing auth to hang forever if
auth is unreachable.
Fixes #8866
2021-12-08 10:03:32 -05:00
Russell Jones 32423dd231 Added more log lines to dismiss workflow. 2021-12-07 20:11:10 -08:00
rosstimothy e51433fff6
Add Teleport loadtest infrastructure and grafana dashboard (#9023)
This adds loadtesting automation and k8s yamls to deploy teleport to a k8s cluster. The grafana
health dashboard is also included and can be consumed by end users to better monitor
their teleport clusters.
2021-12-07 17:17:02 -05:00
Yassine Bounekhla c8e8b7d438
Fix sessions endpoint and remove namespaces (#9217) 2021-12-07 15:17:41 -05:00
Zac Bergquist e2a0225c7c
Fix make grpc (#9252)
- Ensure that the protoc include directory is readable by all users
- Switch back to the root user by default

Either of these changes would have fixed the issue on their own,
but I decided to include both as GRPC should be readable by non-root
users, and I wanted to preserve the original behavior of running
as root unless the $(NOROOT) flags are specified.

Additionally: clarify comments on the make targets, which are
confusingly named, and stop installing goimports since it seems
it was never used.
2021-12-07 07:46:08 -08:00
Joel 768cb38b05
Add support for configurable KMS CMK keys for S3 SSE (#8354) 2021-12-06 14:46:28 -08:00