opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-11-02 23:31:08 +08:00
Code Issues Packages Projects Releases Wiki Activity
22,049 Commits 9,614 Branches 7,118 Tags
660c5dad75efdef0c7775cd880db577fc093d396
Commit Graph
966 Commits
Author SHA1 Message Date
Cam Hutchison de3e8a34a7 [auto] Update AMI IDs for 17.4.0 (#53519) 2025-03-28 11:17:55 +00:00
Gavin Frazar 8d38eac6ce [docs] Fix role reference request_access docs (#53471) 
* Fix request_access godoc

* Update terraform docs

* Update operator CRD docs
 2025-03-26 22:43:56 +00:00
Noah Stride 7cbb46d2ed Support configuring StaticJWKS for the GitLab join method (#53386) 
* Update protobuf

* Implement and test ValidateTokenWithJWKS

* Update join logic to use new method for static jwks

* Update Terraform Provider

* Update operator docs/files

* Update goldenfile
 2025-03-25 18:03:09 +00:00
Hugo ShakaandJoao Ubaldo 8c8b3832c9 [buddy] helm: add support for secondFactors (#53274) 
* Helm: add support for multiple second factors

* Helm: better handle webauthn

* Helm: add tests

* Helm: update contributing reference link

* Helm: add doc

* Helm: update default value

* helm: deprecate secondFactor and user secondFactors by default

---------

Co-authored-by: Joao Ubaldo <me@joaoubaldo.com>
 2025-03-23 11:00:28 +00:00
Hugo Shaka 4fad952d20 helm: add topology spread constraints (#53276) 2025-03-21 14:50:43 +00:00
backport-bot-workflows[bot]andteleport-post-release-automation[bot] 253a36a96e [auto] Update AMI IDs for 17.3.4 (#53235) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-03-20 21:50:06 +00:00
teleport-post-release-automation[bot]andZac Bergquist f6793157ba [auto] Update AMI IDs for 17.3.3 (#52872) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
 2025-03-07 15:21:52 +00:00
Alan Parra c2335808cf chore: Bump golang.org/x/net to v0.37.0 (#52845) 2025-03-06 14:37:27 +00:00
Hugo Shaka 0fdfd4dd36 Remove script deprecated 5 years ago (#52814) 2025-03-05 18:57:45 +00:00
teleport-post-release-automation[bot] a18191cf9a [auto] Update AMI IDs for 17.3.2 (#52782) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-03-05 05:35:08 +00:00
Paul Gottschling 0fbbeff50c Replace Notices with Docusaurus syntax (#52634) 
Use Docusaurus syntax for admonitions so the docs engine does not need
to replace these. This is one step toward removing the
`remark-update-tags` plugin. See: gravitational/docs-website#94

Relevant commands are included below to make reproducing this work
easier.

1. Replace all `Notice` tags with `Admonition` tags.

2. Add `type="info"` if an Admonition is missing a type.

   To find instances:

   ```
   find docs/pages -name "*.mdx" -exec awk '
   BEGIN{a=0}
   a==0 && /<Admonition/{ a = 1 }
    a==1 && /type/{t = 1}
    a==1 && />/{ a = 0; if(t == 0) print FILENAME ":" FNR }' {} \;
   ```

3. Replace `type="notice"` with `type="note"`.

   To find instances:

   ```
   find docs/pages -name "*.mdx" -exec awk '
   BEGIN{a=0}
   a==0 && /<Admonition/{ a = 1 }
    a==1 && /type="notice"/{t = 1}
    a==1 && />/{ a = 0; if(t == 1) print FILENAME ":" FNR }' {} \;
   ```
 2025-03-04 15:51:27 +00:00
teleport-post-release-automation[bot] 8d0b22f75d [auto] Update AMI IDs for 17.3.1 (#52723) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-03-04 04:19:32 +00:00
Hugo Shaka 6cfeacb547 Fix RPM linking logic (#52703) 2025-03-03 17:40:27 +00:00
Hugo Shaka 61e58e9d82 helm: Support tuning readiness probe (#52535) 
* helm: support setting the readiness in teleport-cluster

* update snapshots

* fix typo
 2025-02-26 22:34:25 +00:00
teleport-post-release-automation[bot] cf2a74055b [auto] Update AMI IDs for 17.2.9 (#52491) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-02-25 22:21:47 +00:00
Alan Parra 97fa0704c3 chore: Bump /x/crypto and /x/oauth2 (#52436) 
* chore: Bump /x/crypto and /x/oauth2

* Remove toolchain directives
 2025-02-24 20:24:50 +00:00
teleport-post-release-automation[bot] 1abd94b707 [auto] Update AMI IDs for 17.2.8 (#52341) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-02-20 20:05:44 +00:00
teleport-post-release-automation[bot]GitHubCam Hutchison
 		667efde4e7 [auto] Update AMI IDs for 17.2.7 (#52169) 
Co-authored-by: GitHub <noreply@github.com>
Co-authored-by: Cam Hutchison <camh@goteleport.com>
 2025-02-14 21:56:45 +00:00
marie ecfce7ea23 docs: correcting links in examples directory (#52108) 2025-02-13 09:01:26 +00:00
Hugo ShakaandmaximumG d61d6bc46d feat(tbot): K8S Role creation is optional (#51919) 
Fixes #51181.

K8S `Role` & `RoleBinding` are created by default. Their creation does not depends on the `ServiceAccount` creation anymore.

Co-authored-by: maximumG <maxime.gerges@backmarket.com>
 2025-02-07 00:06:55 +00:00
Noah Stride 62c28bb692 tbot Helm Chart: Add ability to configure securityContext (#51817) 
* Add ability to configure securityContext of tbot pods

* Newline at end of file
 2025-02-05 09:09:57 +00:00
rosstimothy 1edb69677b Convert examples/teleport-usage to aws-sdk-go-v2 (#51677) 
* Convert examples/teleport-usage to aws-sdk-go-v2

* fix: apply fips to global config
 2025-01-31 11:34:17 +00:00
Andrew Burke a67d70b436 OCI join - add proto and client (#51444) 
This change adds protos, the client, and a bunch of boilerplate
for the Oracle join method.
 2025-01-29 20:11:16 +00:00
Zac Bergquist d71293f964 Replace usages of x/exp/maps with stdlib maps package (#51448) 2025-01-28 14:54:40 +00:00
Steven Martin f6907d2bc1 Fix spelling in helm charts (#51544) 2025-01-28 14:11:59 +00:00
teleport-post-release-automation[bot]andGitHub b4382d0dcb [auto] Update AMI IDs for 17.2.0 (#51334) 
Co-authored-by: GitHub <noreply@github.com>
 2025-01-22 04:57:15 +00:00
Hugo ShakaandTiago Silva 1b76f9743e kube-agent-update: Use the RFD-184 webapi proxy update protocol by default when possible (#50464) 
* kube-agent-update: Use the RFD-184 webapi proxy update protocol by default when possible

* Update integrations/kube-agent-updater/cmd/teleport-kube-agent-updater/main.go

Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>

* log update group

---------

Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>
 2025-01-17 22:35:10 +00:00
Marco Dinis 8bc4b5322f Docs: remove mention to Teleport 6 (#51168) 2025-01-17 16:22:34 +00:00
teleport-post-release-automation[bot]andGitHub 412bf4f087 [auto] Update AMI IDs for 17.1.6 (#51010) 
Co-authored-by: GitHub <noreply@github.com>
 2025-01-14 10:53:41 +00:00
Brian Joerger ce30037005 Add SSO MFA docs (#50533) 
* Add SSO MFA docs.

* Address comments from zmb3.

* Fix links; minor style fix.

* Address comments.

* Try removing leading / in example links.

* Address Nic's comments.
 2025-01-13 20:13:12 +00:00
Bernard Kim 646329da7d operator: Support trusted_cluster resources (#49920) 
* Add UpsertTrustedClusterV2 rpc

This supersedes UpsertTrustedCluster rpc. V2 performs resource name
validation.

* Replace confusing UpsertValidationTrustedCluster name

* Use UpsertTrustedClusterV2 in tests

* Address feedback

- Remove unnecessary ping
- Update error messages
- Use skipNameValidation consts
- Validate cluster name before establishing trust
- Do not reveal cluster name in error message
- Use BadParameter instead of CompareFailed

* Use webclient.Find

* Fix test/lint

* Allow label updates

* Fix test

* Update CRDs

1. Run `make manifests`.
2. Run `make -C crdgen update-protos`.
3. Run `make -C crdgen update-snapshot`.

* Implement trusted_cluster CRD

* Update docs

* Support secret lookup

* Update secret lookup docs

* Fix error handling

* Use V2

* Implement CreateTrustedClusterV2 and UpdateTrustedClusterV2

* Address feedback

* Minor fixes

* Use Create/Update instead of Upsert

* Update crdgen

* Update trusted_cluster tests

* Move V2 RPCs to the trust service

* crdgen

* Remove V2 suffix

* 2024 -> 2025

* Use slog
 2025-01-13 17:21:09 +00:00
Paul Gottschling 4a2d8916d0 Remove v13 mentions in the docs (#50831) 
* Remove v13 mentions in the docs

Our policy is to remove mentions of the version prior to the most recent
deprecated version.

This change includes mentions of v13 in Helm chart values file comments.

* Clarify distroless images in Helm values

Responds to hugoShaka feedback.
 2025-01-08 19:37:21 +00:00
rosstimothy 77eef6055a Convert examples/dynamoathenamigration to use slog (#50802) 2025-01-07 15:44:32 +00:00
teleport-post-release-automation[bot]andGitHub 8b21221e70 [auto] Update AMI IDs for 17.1.4 (#50811) 
Co-authored-by: GitHub <noreply@github.com>
 2025-01-07 09:27:04 +00:00
teleport-post-release-automation[bot]andGitHub 86e558b7ba [auto] Update AMI IDs for 17.1.3 (#50714) 
Co-authored-by: GitHub <noreply@github.com>
 2025-01-06 12:27:10 +00:00
Cam Hutchison 909cc20a5d Update master for v18 (#47988) 
The v17 release branch has been made, so update master so that it refers
to v18.
 2024-12-31 15:48:49 +00:00
teleport-post-release-automation[bot]andGitHub 8ae5de8015 [auto] Update AMI IDs for 17.1.2 (#50633) 
Co-authored-by: GitHub <noreply@github.com>
 2024-12-30 21:36:35 +00:00
Hugo Shaka a399f77517 fixes an config indentation bug in the tbot chart (#50518) 2024-12-20 20:56:05 +00:00
teleport-post-release-automation[bot]andGitHub cc757ce987 [auto] Update AMI IDs for 17.1.1 (#50508) 
Co-authored-by: GitHub <noreply@github.com>
 2024-12-20 18:52:00 +00:00
teleport-post-release-automation[bot]andGitHub e5bf2cea04 [auto] Update AMI IDs for 17.1.0 (#50467) 
Co-authored-by: GitHub <noreply@github.com>
 2024-12-20 03:37:28 +00:00
Alan Parra a1881e9cad chore: Bump golang.org/x/net to v0.33.0 (#50396) 2024-12-19 13:48:05 +00:00
Erik Tate e67a13e885 replacing documentation references to port_forwarding with ssh_port_forwarding and adding some additional context to the rbac reference (#50361) 2024-12-18 22:58:39 +00:00
rosstimothy ab5ab6864f Convert lib/benchmark to use slog (#50301) 2024-12-17 13:27:30 +00:00
Vadym Popov 278dfc84f7 [teleport-update] Move teleport binaries to new path {deb,rpm} (#49110) 
* Move teleport binaries to new path

* Use link/unlink command to manage links
Move teleport.service to new path

* Move teleport binaries under standard path for distroless
Cleanup

* Fix wrong move path

* Create missing directory

* Rename link/unlink commands

* Exclude teleport-update from docker image
Systemd reload now managed by teleport-update
Make safe unlink not to block package removal

* Add teleport-update to AMI image build

* Fix RPM build, fpm automatically manage scripts

* Fix AMI build, add missing teleport.service

* Move binaries to /opt/teleport/system
 2024-12-16 20:40:02 +00:00
Alan Parra 0870512dba chore: Bump golang.org/x/crypto on examples/ (#50160) 2024-12-12 17:42:12 +00:00
dependabot[bot] b7fa73d3de Bump golang.org/x/crypto from 0.22.0 to 0.31.0 in /examples/go-client (#50120) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.22.0 to 0.31.0.
- [Commits](https://github.com/golang/crypto/compare/v0.22.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-12-12 13:21:34 +00:00
Noah Stride 49c30832f7 Add workload_identity_labels to RoleCondition (#50071) 
* Add WorkloadIdentityLabels field to role

* Wire up access checker

* Add validation for new field

* Update CRDs

* Add to terraform provider

* Mispel some words to keep the republic happy

* Add WorkloadIdentityLabelsExpression

* Update Terraform provider

* Add to operator CRD

* PLS RUN CLA CHECK
 2024-12-12 11:46:19 +00:00
STeve (Xin) Huang 80a58fc82c GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849) 
* GitHub proxy part 5: OAuth flow to retrieve GitHub identity

* review comments round1

* review comments round 2 and update tsh git list

* make -C integrations/operator crd

* make -C integrations/terraform docs

* fix flaky test
 2024-12-10 17:31:32 +00:00
milos-teleport 640a6d625e fix: Corrected postStart examples (#50001) 2024-12-10 14:53:04 +00:00
teleport-post-release-automation[bot]andGitHub 7c1efaf389 [auto] Update AMI IDs for 17.0.4 (#49861) 
Co-authored-by: GitHub <noreply@github.com>
 2024-12-10 02:51:16 +00:00