Commit graph

13137 commits

Author SHA1 Message Date
Michael da6b31936d
Add the RFD for implementing file transfers in the Web UI during a moderated session (#23546) 2023-05-18 16:53:27 +00:00
Steven Martin affe590597
docs: Add Msft SQL Server client examples and link in sql server guide (#23263)
* Add Msft SQL Server client examples and link in sql server guide

* Apply suggestions from code review

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* put sql server connection details in table

* Update docs/pages/connect-your-client/gui-clients.mdx

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* update desription of db client tools

* correct capitalization

* remove extra space

* rename jpg file to fix spelling check

* optimize images

* verbiage updates

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>

* include note in pk sql server

* column length fixes

* change to using same include for sql server connect note

---------

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
Co-authored-by: alexfornuto <alex.fornuto@goteleport.com>
2023-05-18 15:47:52 +00:00
Tiago Silva bc666aeb3a
Fix json tag typo (#26507)
The json tag `omitempty` was misspelled.
2023-05-18 15:44:08 +00:00
Marco André Dinis 88e85fb7de
Install Script: add Darwin ARM64 support (#26498) 2023-05-18 13:14:44 +00:00
STeve (Xin) Huang 9619c6ae50
[docs] Amazon Athena guide for Application Access (#25329)
* [docs] Amazon Athena guide for Application Access

* review comments

* update cspell.json

* Alex's comment and fix lint
2023-05-18 13:02:25 +00:00
Nic Klaassen 20aaee7c88
opentelemetry dependency updates (#25497)
* Bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Bumps [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.40.0 to 0.41.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.40.0...zpages/v0.41.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc

Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* merge outstanding otel updates

* serialize TestTraceProvider subtests

This test modifies the global trace provider and a race can reliably
detected with the latest version of the oteltrace library.

This doesn't have much impact on the test runtime, which is dominated by
a single subtest.
```
--- PASS: TestTraceProvider (1.07s)
    --- PASS: TestTraceProvider/not_sampling_prevents_exporting (0.00s)
    --- PASS: TestTraceProvider/spans_exported_with_gRPC+TLS (0.00s)
    --- PASS: TestTraceProvider/spans_exported_with_gRPC (0.00s)
    --- PASS: TestTraceProvider/spans_exported_with_HTTP (0.00s)
    --- PASS: TestTraceProvider/spans_exported_with_HTTPS (1.06s)
```

* fix races in tsh tests

* Add TestForwardingTraces to flaky test detector skip list

* fix race in TestExportingTraces

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Ross <tim.ross@goteleport.com>
2023-05-18 12:51:17 +00:00
Tiago Silva da8e894cdb
Add proxy peering to test plan (#26440)
Test plan misses testing access when using proxy peering. Nothing should
differ from normal reverse tunnel access but it makes some assumptions
that differ from the reverse tunnel.
2023-05-18 10:56:42 +00:00
Grzegorz Zdunek a568361a26
Show dev-related tools only in dev mode (#26324) 2023-05-18 10:13:02 +00:00
Grzegorz Zdunek 8f73ba0c89
Add updated kingpin dependency (#26346)
* Add updated kingpin dependency

* Add a bogus kingpin/v2 import to satisfy linter

* Fix order in go.sum

* Add license
2023-05-18 07:47:26 +00:00
Marco André Dinis 7a4d1f47ff
change rfd 0119 status to implemented (#26438) 2023-05-18 06:38:18 +00:00
teleport-post-release-automation[bot] 50343d3417
[auto] Update AMI IDs for 13.0.2 (#26483)
Co-authored-by: GitHub <noreply@github.com>
2023-05-17 21:46:16 +00:00
Michelle Bergquist 545cdba2c6
bump eref (#26463) 2023-05-17 21:40:27 +00:00
Forrest b4bc465ad4
add rbac for cluster alerts (#26423) 2023-05-17 21:36:37 +00:00
Gavin Frazar 9ed945b67c
update db and app service role permissions (#25247)
* app service KindApp read/write to read-only
* db service KindDatabase read/write to read-only
* fix DeleteAllSnowflakeSessions
* update snowflake session authz checks
* rework snowflake watcher logic
2023-05-17 21:15:38 +00:00
Steven Martin 740262573d
bypass os-compatibility-test-bypass for md and mdx files (#26450)
* bypass os-compatibility-test-bypass for md and mdx files

* include ignore md and mdx files
2023-05-17 21:14:04 +00:00
Forrest 1c8706d132
add upgrader to inventory hello (#26454) 2023-05-17 19:50:14 +00:00
Alex Fornuto 9b68b5794c
Docs: Adjust curl examples (#26470)
* replace -o with -O in curl examples where appropriate

* point to teleport CDN for downloads
2023-05-17 19:02:34 +00:00
Nic Klaassen 15d8544a82
add list of applied login rules to user login event (#26460) 2023-05-17 18:43:50 +00:00
Evan Freed d93a0f34cf
bump docs for cloud to 12.4.2 (#26419)
Signed-off-by: Evan Freed <evan.freed@goteleport.com>
2023-05-17 18:03:14 +00:00
Alan Parra a4d168fae6
Add and map the MDM system role (#26395)
* Add and map the MDM system role

* Add specialized output for "mdm" tokens

* Use teleport.yaml instead of mdm_service.yaml

* Ignore RoleMDM on TestLocalServiceRolesHavePermissionsForUploaderService
2023-05-17 17:46:04 +00:00
Gavin Frazar 74569fcfbe
add AWS cross-account db access guide (#25687) 2023-05-17 17:36:31 +00:00
Lisa Kim c1853cf012
WebDiscover: Revert deleting the app wizard (#26282)
* Reverting app wizard (copy pasta deleted code)

* Render modal for application resource

* Update snapshot
2023-05-17 17:05:18 +00:00
Steven Martin d3edded4b9
changelog spell fixes (#26430) 2023-05-17 16:24:20 +00:00
Michelle Bergquist e4d1614741
bump eref (#26404) 2023-05-17 16:07:33 +00:00
Paul Gottschling 97538884f9
Update AMI usage instructions (#25807)
Closes #18600

Our usage instructions for newly built Teleport AWS AMIs point to a
location of the docs that no longer exists. Update this to point to
current locations within the docs.
2023-05-17 15:30:00 +00:00
Steven Martin 6d0e0f7239
skip md and mdx files for go linting (#26434) 2023-05-17 15:07:56 +00:00
Mike Jensen bb2bfaa28c
Update gravitational/protobuf fork tag (#26373)
* Update `gravitational/protobuf` fork tag

Previously we were not referencing a tag, instead we were referenced to a commit on this branch: https://github.com/gravitational/protobuf/tree/dmitri/merge-values

Previously versioned `1.3.2` it was thought that this branch contained the fix for `Skippy Peanut Butter` CVE: https://nvd.nist.gov/vuln/detail/CVE-2021-3121

However that was not the case, so the following was performed:
* A `teleport` branch was created on `protobuf` from the upstream v1.3.2 tag
* Our custom commits were cherry-picked in (the Clone Merger functionality added, codeql config, and dependency-review config)
* It was pushed as tag `v1.3.2-1` to our fork (as seen in this change)

* Update protobuf tag to v1.3.2-teleport.1
2023-05-17 14:59:14 +00:00
Alan Parra 72c9c5f2bd
Add the JamfSpecV1 proto (#26391)
* Add JamfSpecV1 proto

* Correction: filter_rsql is not required

* Update generated protos
2023-05-17 14:46:53 +00:00
Marek Smoliński 85809882dd
RFD 112 - Teleport Oracle Access Integration (#16435) 2023-05-17 12:52:20 +00:00
Michael Wilson 04891e5402
Add in Okta plugin type. (#26349)
* Add in Okta plugin type.

The Okta plugin type has been added to support the hosted Okta plugin in
enterprise.

* Tweak error messages, comments.
2023-05-17 02:12:42 +00:00
Zac Bergquist 84a60baa3c
Desktop access improvements (#26356)
* Change the filters used to query a Windows user's SID

The sAMAccount type is always indexed, so this is a more efficient
query than using the object class attribute.

* Don't attempt DNS resolution for an empty hostname

If we discover LDAP entries with a mising hostname, just skip
over them. This generates less noise in the logs.

* Improve desktop error messaging

Prefer a user-friendly message over "RDP Connection Failed"
where possible.
2023-05-16 22:47:08 +00:00
Zac Bergquist 5ea3f7d403
docs: fix curl usage (#26237)
* docs: remove un-archive step for Windows package

We now ship the .exe file directly, so the extract step is
no longer necessary.

Closes #26211

* docs: fix curl usage

Use -o instead of -O.

Closes #26212
2023-05-16 22:29:21 +00:00
Ryan Clark 8926feb1d1
Update assist warning wording, add link to ToS (#26396) 2023-05-16 20:54:09 +00:00
Ryan Clark 79b2993375
Update e ref (#26392) 2023-05-16 20:11:13 +00:00
Anton Miniailo 6009cca5ee
Disable always pinned MFA certs (#25947) 2023-05-16 19:50:27 +00:00
Alan Parra d5e3d789d4
Change TestDeleteMFADeviceSync to do per-delete assertions (#26311)
* Change TestDeleteMFADeviceSync to do per-delete assertions

* nit: Change minDevices to `1` for readability
2023-05-16 19:20:02 +00:00
Lisa Kim 9bac74aeac
Web: Provide accurate actionable steps with duplicate db name error (#26116)
* Add aws rds fields to databases responses

* Type ApiError response field

* Add utility func for returning err msg from Error

* Implement checking for existing db servers when fetching rds dbs

* Disable selecting table row when db servers exists

* Provide a more accurate actionable steps in case of dup err

* Fix blank id on resuming discover flow

* Address code review

* Fix lint: missing license

* Remove increasing limit +5, corner case handling seems unnecessary
2023-05-16 19:10:14 +00:00
Michelle Bergquist 6d9300c203
bump e-ref (#26353) 2023-05-16 18:13:35 +00:00
Ryan Clark 0b442085be
Assist UI improvements (#26365) 2023-05-16 18:09:33 +00:00
Steven Martin 60f6f0a59c
docs: include DynamoDB streams as required in storage backend (#26171)
* docs: include DynamoDB streams as required in storage backend

* word correction
2023-05-16 17:29:35 +00:00
Gavin Frazar ac957a59cb
fix tsh db connect to active cassandra db (#26181) 2023-05-16 17:12:48 +00:00
Gavin Frazar 0edc5c819c
check for empty name part in role arn (#26315) 2023-05-16 17:04:34 +00:00
Steven Martin f08398c0d9
spelling fix for 0109-cloud-agent-upgrades.md (#26351) 2023-05-16 16:25:56 +00:00
Michael Wilson 36af31d124
Add in extra Okta audit event fields. (#26150)
* Add in extra Okta audit event fields.

Extra Okta audit event fields have been added so that, during synchronization,
the groups and apps are more explicitly listed in the audit event.

* Fix comments.
2023-05-16 16:14:51 +00:00
Travis Rodgers 5ae4c66092
update video banner (#26083) 2023-05-16 15:45:38 +00:00
Alex Fornuto f223ba76b5
remove opened var when set to false (#26245) 2023-05-16 15:44:43 +00:00
Paul Gottschling 74e1007645
Remove the Adopters page (#26231)
We already have a case studies page on the main Teleport site, so the
Adopters page adds clutter to the "Home" section of the sidebar. It also
tends to fall out of date, and ironically gives the impression that
Teleport has fewer adopters than it actually does.

Co-authored-by: Steven Martin <steven@goteleport.com>
2023-05-16 15:31:33 +00:00
Steven Martin f8e42594a7
docs: minor nits including spacing and Teleport case in k8s operator doc (#26155)
* docs: minor nits including spacing and Teleport case

* Update docs/pages/management/guides/teleport-operator.mdx

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

---------

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
2023-05-16 15:25:14 +00:00
Steven Martin c85191b7c9
docs: add mongo port in high availability (#25782) 2023-05-16 15:15:46 +00:00
Justinas Stankevičius 8c83b06f78
Fix Assist rate-limiting in Cloud (#26342)
When Proxy is separate from Auth,
Proxy 'modules' will not contain meaningful data.
Instead, one must use ClusterFeatures fetched from the Auth server
2023-05-16 15:14:10 +00:00