Commit graph

1725 commits

Author SHA1 Message Date
Ev Kontsevoy fb090a4e72 Intermediate commit 2016-10-14 00:10:38 -07:00
Ev Kontsevoy 8957c221e7 Added "quiet" way of connecting to sites
...sometimes it's ok not to report an error to the user, like when we're
syncing terminal window size and the auth server is down...
2016-10-10 22:49:03 -07:00
Ev Kontsevoy 1dc2d9c414 Intermediate commit where "standalone mode" kind of works
What works:

1. You have to start all 3: node, proxy and auth.
2. Login using 'tsh' (so it will create a cert)
3. Then you can shut 'auth' down.
4. Proxy and node will stay up and tsh will be able to login.

What doesn't work:

1. Auth updates are not visible to proxy/node (like new servers)
2. Not sure if "trusted clusters" will work.
2016-10-10 21:19:55 -07:00
Ev Kontsevoy 40ff1eea08 Merge branch 'master' into ev/standalone 2016-10-10 10:52:39 -07:00
Ev Kontsevoy 0a78b45b3c Added "examples" directory with some sample configs
- 3-node cluster example
- systemd unit file
2016-10-10 10:51:43 -07:00
Ev Kontsevoy e43032f6a6 Merge pull request #562 from gravitational/dmitri/auth-initial-servers
Preset auth servers in file storage if configuration has auth servers
2016-10-10 10:44:36 -07:00
dmitri 04b2122ede Merge branch 'dmitri/auth-initial-servers' of github.com:gravitational/teleport into dmitri/auth-initial-servers 2016-10-10 12:59:09 +02:00
dmitri ae17875e03 Relax the logging level on reading from non-existing authservers.json 2016-10-10 12:58:22 +02:00
Ev Kontsevoy 1d0ec48dfa Started implementing "cluster snapshot"
At this stage I have an in-memory snapshot of a "cluster state" which
can be kept by nodes in-memory not requiring the auth connection to be
up 100% of the time.

Node and proxy are now both using this snapshot instead of a live
connection to the auth server.

Next steps:

- Make node and proxy continue to work after the auth is killed.
- Make the snapshot persistent.
- Make node & proxy use persistence and be able to restart with the auth
  server down.

IMPORTANT:

Also found an interesting case where process identity is generated (on
first start). Right now there wasn't any kind of locking, and concurrent
identity initialization was possible. While it's not clear if this can
cause any real world issue, I have refactored it into a separate
lock-protected function.
2016-10-09 19:29:54 -07:00
Ev Kontsevoy c161080d4c Removed "backend resolver".
It wasn't used anywhere
2016-10-09 17:29:18 -07:00
Ev Kontsevoy baafe3a332 Renamed GetLocalDomain() to GetDomainName() 2016-10-09 17:27:56 -07:00
Ev Kontsevoy 263ec1ca1e Added "samples" directory with sample configurations
Also some minor changes around error reporting...
2016-10-09 16:33:18 -07:00
Ev Kontsevoy 5e956b88c7 Merge branch 'master' into dmitri/auth-initial-servers 2016-10-09 14:30:35 -07:00
Alexander Klizhentas 0bb87f5ed3 Merge pull request #561 from gravitational/ev/osx_test
Tests fail on OSX without brew binutils
2016-10-09 10:57:53 -07:00
Alexander Klizhentas 2dec70f757 Merge pull request #560 from gravitational/ev/553
Bugfix
2016-10-09 10:57:46 -07:00
Alexander Klizhentas ac10206ea5 Merge pull request #559 from gravitational/ev/542
Sensible default environment variables
2016-10-09 10:57:38 -07:00
dmitri b08cb20283 Preset auth servers in file storage if configuration has auth servers 2016-10-09 16:10:17 +02:00
Ev Kontsevoy d7386b7a33 Tests fail on OSX without brew binutils
Replaced 'expr' with simple bash math
2016-10-07 19:06:06 -07:00
Ev Kontsevoy 49e9dbd306 Bugfix
Fixes #553

Teleport fails to connect to proxy, yet runs "window resize" goroutine.
2016-10-07 18:53:36 -07:00
Ev Kontsevoy 900a944927 Sensible default environment variables
Fixes #542
2016-10-07 18:43:31 -07:00
Ev Kontsevoy 927fa477ea Update admin-guide.md
Updated "building from source" section.
2016-10-07 17:32:12 -07:00
Ev Kontsevoy 603102dee1 Update admin-guide.md 2016-10-07 16:34:06 -07:00
Ev Kontsevoy 14b58da50a Update admin-guide.md 2016-10-07 16:30:45 -07:00
Alexander Klizhentas 87e469a5f8 Merge pull request #555 from bn0ir/master
Sort labels by their key alphabetically in ./tctl nodes ls
2016-10-06 10:59:35 -07:00
bn0ir 6cddb989cb Fix import format 2016-10-05 13:15:49 +05:00
bn0ir bd0ba96a43 Sort labels by their key alphabetically in ./tctl nodes ls 2016-10-04 17:22:51 +05:00
Ev Kontsevoy 4c60f9a594 Update README.md 2016-10-03 17:59:17 -07:00
Ev Kontsevoy 5c84cf5649 Update README.md 2016-10-03 17:57:56 -07:00
Ev Kontsevoy d6b93e24ca Merge pull request #551 from guanana/master
Files needed for automatic RPM and SRPM
2016-10-02 16:15:25 -07:00
guanana2 f46556579b Files needed for automatic RPM and SRPM creation after source tar generation 2016-10-01 21:36:17 +01:00
Alexander Klizhentas b9bccf0d13 Merge pull request #549 from wjdavis5/master
Modified build instructions
2016-10-01 10:54:17 -07:00
William Davis 04b4edae7e Modified build instructions 2016-09-30 09:09:45 -04:00
Ev Kontsevoy 0591316e20 Merge pull request #544 from 0xmohit/pr/go15vendorexp
remove the GO15VENDOREXPERIMENT environment variable
2016-09-29 13:26:04 -07:00
Alexander Klizhentas 69a3442b84 Merge pull request #545 from e12e/patch-1
Typo BoldDB->BoltDB
2016-09-29 09:18:41 -07:00
e12e d1dcb15cec Typo BoldDB->BoltDB 2016-09-29 09:48:43 +02:00
Mohit Agarwal 266fce2c65
remove the GO15VENDOREXPERIMENT environment variable
Go 1.7 removed support for the variable: https://golang.org/doc/go1.7
Since teleport requires 1.7 or higher, the variable is redundant.
2016-09-29 10:21:57 +05:30
Ev Kontsevoy 3130f18382 Update README.md 2016-09-28 13:31:11 -07:00
Ev Kontsevoy 93d607f713 Fixed image paths for the docs 2016-09-25 23:37:51 -07:00
Ev Kontsevoy cca1d388d1 Fixed styles for teleport docs 2016-09-25 23:21:21 -07:00
Ev Kontsevoy e137f4a798 New footer 2016-09-25 01:39:25 -07:00
Ev Kontsevoy b277805874 Merge branch 'master' of github.com:gravitational/teleport 2016-09-25 00:47:54 -07:00
Ev Kontsevoy f1007c2ec9 Docs tweaks 2016-09-25 00:47:43 -07:00
Alexander Klizhentas 20e029767a Merge pull request #539 from gravitational/dmitri/tctl-read-hostuuid
tctl: do not create datadir/host_uuid if none has been found
2016-09-22 08:51:33 -07:00
dmitri 9decde57cc tctl: do not create datadir/host_uuid if none has been found - if the
client runs with elevated permissions and the command fails (for
instance, when the auth server state has not yet been generated), it
will leave the file behind possibly making further attempts to properly
generate content in data directory by a lower-privilege process impossible.
2016-09-22 13:43:58 +02:00
Ev Kontsevoy b95f21b2f6 Merge pull request #538 from johnp/patch-1
Fixes possible `TestGetShell` failure
2016-09-19 14:15:07 -07:00
Johannes Pfrang 58b6781fa5 Fixes possible TestGetShell failure
Some distros (e.g. arch) use `/usr/bin/nologin` instead of `/usr/sbin/nologin` for the daemon account
2016-09-19 23:06:55 +02:00
Jeff Zellner 6b85b01b46 Merge pull request #535 from radarhere/master
Fixed typos
2016-09-17 21:08:17 -06:00
Andrew Murray 0b90ef9201 Fixed typos 2016-09-18 13:01:07 +10:00
Ev Kontsevoy 72910a80db Update README.md 2016-09-17 00:29:17 -07:00
Ev Kontsevoy 9a9b53caa0 Update README.md 2016-09-16 18:38:41 -07:00