* Mentioned in the documentation that we ignore "kube-system" and "kube-public" namespaces for kube app discovery.
* Use admonition
Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
* Rerender kube agent docs
---------
Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
Updates the resource parser with two new functions: `contains` and
`split`. When used together they provide the ability to
search for resources that have labels with multiple values in a
delimited list. For example, if a resource has label `foo=bar,baz,bang`
then `split(labels[foo], ",")` would transform the
comma label value from a string into a list: ["bar", "baz", "bang"]
The list could then be fed to `contains` to determine if bar exists
in the list: `contains(split(labels[foo], ","), bar)`.
Closes#38824
In the Networking reference, the discussion of environment variables
didn't make it sufficiently clear that `/etc/default/teleport` is the
environment file specified in the Teleport unit file.
This change includes the unit file to make it more explicit how the file
uses `/etc/default/teleport`.
* Modify `tbot` docs to show `--proxy-server`/`proxy_server` in preference to `--auth-server`
* Apply suggestions from code review
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Update docs/pages/machine-id/deployment/kubernetes.mdx
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
---------
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
- Remove the `team` scope from config.json.
- Edit the Edition comparison table to remove the "Team" column.
- Change the Teleport Team getting started guide to a Teleport
Enterprise Cloud getting started guide.
- Remove other Teleport Team mentions from the docs.
* Add a Discovery Service section
Closes#38741
Add a dedicated sidebar section for the Teleport Discovery Service.
Since the Discovery Service is a separate agent service from the SSH
Service, Kubernetes Service, etc., it makes sense to add a dedicated
section for this service. In the future, we can include configuration
guides, architecture guides, etc. in this section.
To create the new section, this change moves existing auto-discovery
guides from other sections of the docs.
* Respond to hugoShaka feedback
- Move the Kubernetes application discovery docs
- Edit the "Kubernetes Access" intro to include a link to Kubernetes
auto-discovery
* Update TAG version to 1.11.0
* Add a guide for deploying TAG using Helm
* Fix prose lint
* Add auto-generated reference for TAG Helm chart
* Apply suggestions from code review
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Update TAG example role to v7
* Fix link to TAG Helm guide
* Pin TAG Helm chart version
Pins to the same version as TAG itself,
Helm chart and TAG are versioned in lockstep
* Call out the teleport Helm chart more explicitly
* Bump TAG version to 1.13.0
Expecting it to be released by the time these docs go live.
* Replace teleport-cluster parameters with Vars
* Elaborate trust of the TAG CA in Teleport
* Fix the marker style
* Fix the link to teleport-cluster reference
---------
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
See #36816
The docs are inconsistent in using "automatic updates" vs. "automatic
upgrades". Prefer the former to be consistent with the
`teleport-ent-updater` script.
- Replace "automatic upgrade" with "automatic update" in docs pages.
- Replace "automatic upgrade" uses in the `teleport-kube-agent` chart
and regenerate the docs.
- Catch uses of "automatic upgrade" in the `consistent-terms` Vale rule
Fix an incorrect sitemap link. The Teleport docs engine generates the
sitemap based on the contents of `docs/pages`. This directory tree
included a file called `docs/pages/server-access/guides/openssh.mdx`,
but the `config.json` for the docs content included a redirect from this
page to `docs/pages/server-access/guides/openssh/openssh.mdx`, meaning
that a page in the sitemap became inaccessible.
This change fixes the `/server-access` section of the docs to resolve
the sitemap issue. To do so, it creates the `server-access/openssh`
directory and moves OpenSSH guides into this directory. It updates
`config.json` and the Server Access menu page accordingly.
This change also adds a missing meta description to the self-hosted
Access Graph guide.
* Update backend reference with working proxy configuration
the local loopback does not work in this case. After discussing internally, recommendation is to use 0.0.0.0 for the diag addr but with a warning this should NOT be exposed to the public internet or used on other instances
* Update backends.mdx
* Update docs/pages/reference/backends.mdx
Co-authored-by: Steven Martin <steven@goteleport.com>
* Update docs/pages/reference/backends.mdx
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
* Update backends.mdx
* Update docs/pages/reference/backends.mdx
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
---------
Co-authored-by: Steven Martin <steven@goteleport.com>
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
* Recommend on-demand mode and continuous backups in DynamoDB docs
Removes mention to provisioned mode and manually setting capacity
in favor of using on-demand mode. Enabling continuous backups was
also elevated into the main configuration reference since they are
strongly encouraged.
Additionally all occurrences of `back-end` were replaced with
`backend` to be consistent with all other usages.
* remove autoscaling references from aws chart docs
* Add new `tctl bots update` command
This adds a new command to update roles and logins for existing bots,
with flags to both set and append as desired.
changelog: Add new `tctl bots update` command to update bot roles and logins
* Pluralize "add-" flags for consistency
* Add docs for `tctl bots update`
Also merges in some other misc docs changes for `tctl bots ...`
* Fix docs lint
* Fix incorrect example
* Apply suggestions from code review
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Use the bot service's `UpdateBot()` RPC instead of modifying directly
This switches to use the new `UpdateBot()` RPC instead of modifying
the bot user and role directly. Also, tweaks CLI messaging to be a
bit less chatty.
* Update tool/tctl/common/bots_command.go
Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
* Move set functions into their own reusable package
The set package adds a little extra functionality but is still
missing various important functions, like subset/superset,
difference, intersection, xor/symmetric difference, etc.
This changes the API slightly, so the tctl command is updated to use
the new package.
* Remove duplicate tests
* Reword flag help strings for clarity
* Remove set abstraction
Removes the Set package and unrolls all related function calls in
bots_command.
* Add unit tests for `updateBotLogins()` and `updateBotRoles()`
This also makes a minimal API wrapper interface for mocking.
* Use utils function to convert sets to a string slice
* Update docs/pages/reference/cli/tctl.mdx
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
---------
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
Closes#34888
The example instructions for assigning environment variables to
configure HTTP CONNECT tunneling existed before Teleport installations
based on package managers configured a default systemd unit for
Teleport.
This change edits the instructions for assigning environment variables
for HTTP CONNECT tunneling to use the environment file already
configured within the default systemd unit.
* Document resource version in proto files
This will be useful when generating documentation from proto for the TF
provider. With this change, we will display which version value should
be set.
This change is required so we can make version mandatory in TF.
* docs: always set version when using the TF provider
* docs: re-generate the TF reference, with the version updates
* Apply suggestions from code review
Co-authored-by: Marco André Dinis <marco.dinis@goteleport.com>
* re-generate grpc client
* fix typos
* re-generate CRDs
---------
Co-authored-by: Marco André Dinis <marco.dinis@goteleport.com>
* Increase `MinPasswordLength` from 6 to 12 characters
- PCI DSS v4.0 control 8.3.6 requires a minimum password length of 12 characters.
- NIST SP 800-63B section 5.1.1.1 requires a minimum password length of 8 characters.
* Increase `AccountLockInterval` from 20 to 30 minutes
- PCI DSS v4.0 control 8.3.4 requires a minimum lockout duration of 30 minutes.
This will contribute to better supporting customers to meet certain compliance requirements.
Ref #1936.
Ref #7687.
Closes#21164
The CLI reference is a section of the docs in which each CLI tool has
its own page, so this change sorts each page individually.
The change places H2 sections not related to individual commands (e.g.,
sections for global flags and environment variables) at the top of each
guide, and sorts the sections following these.
In `teleport.mdx`, all commands except for `start` are only documented
in a table at the beignning of the page, so this change sorts the table.
Steven Martin