mirror of
https://github.com/gravitational/teleport
synced 2024-10-21 09:44:51 +00:00
bad1b0498d
Updates #1755 Design ------ This commit adds support for pluggable events and sessions recordings and adds several plugins. In case if external sessions recording storage is used, nodes or proxies depending on configuration store the session recordings locally and then upload the recordings in the background. Non-print session events are always sent to the remote auth server as usual. In case if remote events storage is used, auth servers download recordings from it during playbacks. DynamoDB event backend ---------------------- Transient DynamoDB backend is added for events storage. Events are stored with default TTL of 1 year. External lambda functions should be used to forward events from DynamoDB. Parameter audit_table_name in storage section turns on dynamodb backend. The table will be auto created. S3 sessions backend ------------------- If audit_sessions_uri is specified to s3://bucket-name node or proxy depending on recording mode will start uploading the recorded sessions to the bucket. If the bucket does not exist, teleport will attempt to create a bucket with versioning and encryption turned on by default. Teleport will turn on bucket-side encryption for the tarballs using aws:kms key. File sessions backend --------------------- If audit_sessions_uri is specified to file:///folder teleport will start writing tarballs to this folder instead of sending records to the file server. This is helpful for plugin writers who can use fuse or NFS mounted storage to handle the data. Working dynamic configuration. |
||
|---|---|---|
| .. | ||
| dynamoevents | ||
| filesessions | ||
| s3sessions | ||
| test | ||
| api.go | ||
| api_test.go | ||
| archive.go | ||
| auditlog.go | ||
| auditlog_test.go | ||
| compatsessionlog.go | ||
| discard.go | ||
| doc.go | ||
| forward.go | ||
| mock.go | ||
| sessionlog.go | ||
| slice.pb.go | ||
| slice.proto | ||
| uploader.go | ||