* Generate CRDs
* Update snapshots
* Add apis impl for WorkloadIdentity
* Add WorkloadIdentityReconciler
* Add test for WorkloadIdentityReconciler
* Update RBAC
* Update to include version in kind
* Fix license header
* Fix handling of well-known Struct type
* Ignore revsiion
* Update fedramp.mdx with v17 migration instructions
based on multiple customer issues, adding instructions about a required CA rotation as of v17 with our new sig algo changes
* Update fedramp.mdx
spelling fix
* Update docs/pages/admin-guides/access-controls/compliance-frameworks/fedramp.mdx
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
* Update fedramp.mdx
update flow based on feedback
* Update fedramp.mdx
move link and add missing word
* Update docs/pages/admin-guides/access-controls/compliance-frameworks/fedramp.mdx
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
* Update fedramp.mdx
remove compliant from description
* Update docs/pages/admin-guides/access-controls/compliance-frameworks/fedramp.mdx
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
---------
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* docs: update warning on data dir on daemon guide
* docs: update wording on data dir default in daemon guide
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
---------
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Document the Systemd workload attestor
* Document the `binary_path` and `binary_hash` attribute
* Replace period with colon
Co-authored-by: Noah Stride <noah.stride@goteleport.com>
* Add "dbus" to the linter's known words
* Better grammar
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Remove extraneous newlines in list
---------
Co-authored-by: Noah Stride <noah.stride@goteleport.com>
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Refresh the Backup and Restore guide
Closes#31866Closes#14537Closes#51782
- Recommend IaC for dynamic resources instead of using `tctl`.
- Add a separate section on using `tctl get all` on the Auth Service
machine.
- Remove tabs in service state section to simplify the guide.
- Condense the state type table. Condense different rows re: dynamic
resources into a single row to make the table shorter. Also make this
a generic table, rather than an example table for DynamoDB and S3
users.
- Assume the guide is about the Auth Service. Adjust sections
accordingly.
- Add an item to the backend table re: Azure Postgres. This closes
#30843.
* Respond to feedback on Backup and Restore edits
- Add a session recording backend table to complement the cluster state
backend table.
- Edit the intro paragraph of the IaC section to talk about its
relationship to cluster state backend backups.
- Remove the "Using a state file" section. The instructions in this
section are difficult to implement for package manager installations
of Teleport, which use a `systemd` service.
- Add Cloud SQL to the cluster state backend table.
- Add a section about `teleport backend clone`.
* Respond to rosstimothy feedback
- Specify the audit event backend for audit events in the first table.
- Swap src and dst in the clone example.
- Mention the audit event backend separately from the cluster state
backend.
- Remove the mention of S3 compatibility when describing the recording
backend.
- Edit the `backend clone` docs. Use "items" instead of "dynamic
resources". Don't instruct the user to stop Auth Service instances.
* docs: explain awsic plugin install flag
* expand the use system credential sentence
* Update docs/pages/admin-guides/management/guides/aws-iam-identity-center/migrating-identity-center-from-okta-to-teleport.mdx
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
---------
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Add cdocumentation for `workload-identity-aws-ra` service
* Apply suggestions from code review
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Adjust name to be full roles anywhere
---------
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
* Edit DNS guidance for registered apps
Closes#30361
Add an explicit warning against creating DNS records that map
application subdomains to the hosts of registered applications. Use the
`dns-app-access` partial in `connecting-apps.mdx` to simplify reuse.
* Respond to zmb3 feedback
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
---------
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
See gravitational/docs-website#97
The docs engine removes these using a custom plugin during builds.
Remove string styles in the docs content so we can remove the plugin.
* Update protobuf
* Implement and test ValidateTokenWithJWKS
* Update join logic to use new method for static jwks
* Update Terraform Provider
* Update operator docs/files
* Update goldenfile
Include inlining the partial:
docs/pages/includes/machine-id/recover-circle-ci-claims.mdx
This is because it's only used by two pages and, as a partial, violates
the rule in which each Var with a given name must be used multiple
times on a single page. Since this Vale rule uses the `raw` scope, it is
not possible to ignore it with an MDX comment.
Sakshyam Shah