opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-11-04 02:21:02 +08:00
Code Issues Packages Projects Releases Wiki Activity
12,109 Commits 9,614 Branches 7,118 Tags
acb255cd883d3d94de949f54e322edacab736112
Commit Graph
12109 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Trent Clarke a992e6fded Distroless dockerfile and smoke tests for same (#21860) 
* Distroless dockerfile and smoke tests for same

This patch adds a Dockerfile to `build.assets/charts` that will construct
a docker image for teleport based on the Distroless Debian images
published by Google. The actual workflows used to construct and publish
these images are defined in `teleport.e` for security reasons.

The Smoke Testing framework exists to make some quick assertions about
the resulting images: will Teleport even start in this context, etc. See
the included README for more details.

* Update README.md

* Linter appeasement

* Revert spurious submodule update

* Rename release component var

* Smoke test docs

* Smoke test docs

* Revert spurious subrepo update
 2023-03-02 09:51:28 +00:00
Andrew Burke e28d969fdc Add Azure auto-joining (#21087) 
This change adds the ability for Azure virtual machines to automatically
join a Teleport cluster.
 2023-03-01 22:18:43 +00:00
Paul Gottschling e85148c736 Refresh the Access Controls menu (#21649) 
* Refresh the Access Controls menu

Closes #19933

- Changes the "Configure Access" menu item to "Manage Access"
- The Access Controls menu page was out of date, so I changed it to
  reflect the current sequence of subsections. This more narrative
  approach also puts each subsection in the context of a user's overall
  Teleport setup.

* Respond to PR feedback
 2023-03-01 21:56:15 +00:00
Jakub Nyckowski 4db9611fca Update e (#22504) 2023-03-01 21:23:52 +00:00
Mike Jensenanddependabot[bot] de6a991c66 Webapp yarn updates (#22489) 
* Bump nanoid from 3.1.30 to 3.3.4

Bumps [nanoid](https://github.com/ai/nanoid) from 3.1.30 to 3.3.4.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ai/nanoid/compare/3.1.30...3.3.4)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump follow-redirects from 1.14.5 to 1.15.2

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.5 to 1.15.2.
- [Release notes](https://github.com/follow-redirects/follow-redirects/releases)
- [Commits](https://github.com/follow-redirects/follow-redirects/compare/v1.14.5...v1.15.2)

---
updated-dependencies:
- dependency-name: follow-redirects
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump node-fetch from 2.6.6 to 2.6.9

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 2.6.6 to 2.6.9.
- [Release notes](https://github.com/node-fetch/node-fetch/releases)
- [Commits](https://github.com/node-fetch/node-fetch/compare/v2.6.6...v2.6.9)

---
updated-dependencies:
- dependency-name: node-fetch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump terser from 4.8.0 to 4.8.1

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1.
- [Release notes](https://github.com/terser/terser/releases)
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terser/terser/compare/v4.8.0...v4.8.1)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump protobufjs from 6.11.2 to 6.11.3

Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 6.11.2 to 6.11.3.
- [Release notes](https://github.com/protobufjs/protobuf.js/releases)
- [Changelog](https://github.com/protobufjs/protobuf.js/blob/v6.11.3/CHANGELOG.md)
- [Commits](https://github.com/protobufjs/protobuf.js/compare/v6.11.2...v6.11.3)

---
updated-dependencies:
- dependency-name: protobufjs
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump plist from 3.0.4 to 3.0.6

Bumps [plist](https://github.com/TooTallNate/node-plist) from 3.0.4 to 3.0.6.
- [Release notes](https://github.com/TooTallNate/node-plist/releases)
- [Changelog](https://github.com/TooTallNate/plist.js/blob/master/History.md)
- [Commits](https://github.com/TooTallNate/node-plist/commits)

---
updated-dependencies:
- dependency-name: plist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump minimist from 1.2.5 to 1.2.8

Bumps [minimist](https://github.com/minimistjs/minimist) from 1.2.5 to 1.2.8.
- [Release notes](https://github.com/minimistjs/minimist/releases)
- [Changelog](https://github.com/minimistjs/minimist/blob/main/CHANGELOG.md)
- [Commits](https://github.com/minimistjs/minimist/compare/v1.2.5...v1.2.8)

---
updated-dependencies:
- dependency-name: minimist
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Upgrade loader-utils to 1.4.2

Addresses dependabot issue: https://github.com/gravitational/teleport/security/dependabot/64

2.0.4 is needed for other CVE's, but starting with a lower risk change

* Upgrade xmldom to 0.8.4

This addresses the Dependabot alert: https://github.com/gravitational/teleport/security/dependabot/62

* Upgrade shell-quote to 1.7.3

Addresses dependabot alert: https://github.com/gravitational/teleport/security/dependabot/57

* Upgrade immer to 9.0.13

Addresses Dependabot alert: https://github.com/gravitational/teleport/security/dependabot/47

* Upgrade json5

Addresses dependabot alerts:
* https://github.com/gravitational/teleport/security/dependabot/73
* https://github.com/gravitational/teleport/security/dependabot/74

* Trim 0.0.3 upgrade

Upgrade trim to address Dependabot alert: https://github.com/gravitational/teleport/security/dependabot/44

* yarn.lock de-duplication

Yarn.lock de-duplication using this tool: https://www.npmjs.com/package/yarn-deduplicate

Duplicates are pretty high after prior upgrades. I feel this will make our current dependent versions more clear.

* Revert package.json changes and apply `make clean-ui`

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-03-01 21:19:39 +00:00
Ben Arent ec9e4ae313 Teleport 12 Videos (#22499) 2023-03-01 21:12:08 +00:00
Michael Wilson 9331ef85a9 Okta local service. (#22434) 
* Okta local service.

A new local service has been created for the Okta import rule and Okta
assignment objects.

* Test tweaks for easier readability and diagnosability.
 2023-03-01 20:35:25 +00:00
Michael Wilson 6973cd6527 SAML IdP audit events. (#22208) 
* SAML IdP audit events.

SAML IdP audit events have been added. These events have been added to the UI
for proper rendering. Additionally, service provider events will be emitted
when managing service providers.

* Align the naming more with the existing events.

* Zac's feedback.

* Add in delete all event.

* Fix typo.

* Update story snapshot.

* Linting and test fixes.

* Audit auth failures.

* Removing the nopermissions test, as it's covered in the regular create test.
 2023-03-01 20:01:40 +00:00
Tiago SilvaandBrian Joerger f8ab3aa037 Improve tsh kube credentials read operations (#22388) 
While loading a key from storage, Teleport client transverses the
storage directory to read the secrets and reads each file one by one.
This has huge impacts on `tsh kube credentials` because when calling
`kubectl` in parallel, the disk operations become overloaded and the
operation time increases exponentially.

This PR removes the transverse when reading credentials for Kubernetes
clusters and adds a quick read operation that reads the following files:
- `$TSH_HOME/current_profile`
- `$TSH_HOME/$profile.yaml`
- `$TSH_HOME/keys/$PROXY/$USER-kube/$TELEPORT_CLUSTER/$KUBE_CLUSTER-x509.pem`
- `$TSH_HOME/keys/$PROXY/$USER`

| - | P=1 | P=10 | P=40 | P=80 | P=120 |
| --- | --- | --- | --- | --- | --- |
| old direct | 9.90s user 3.14s system 64% cpu 20.284 total | 11.08s user 3.60s system 496% cpu 2.955 total | 12.46s user 4.36s system 820% cpu 2.050 total | 12.81s user 4.76s system 811% cpu 2.164 total | 13.02s user 5.07s system 861% cpu 2.100 total|
| old teleport | 18.45s user 7.80s system 51% cpu 51.085 total | 21.58s user 10.03s system 434% cpu 7.270 total | 22.33s user 10.52s system 178% cpu 18.402 total | 22.04s user 10.83s system 96% cpu 33.977 total | 22.57s user 11.45s system 55% cpu 1:01.34 total|
| new direct | 9.51s user 2.90s system 146% cpu 8.460 total | 13.75s user 4.95s system 718% cpu 2.603 total | 12.21s user 4.43s system 832% cpu 1.999 total | 11.72s user 4.50s system 839% cpu 1.933 total | 12.06s user 4.62s system 830% cpu 2.009 total |
| new teleport | 16.10s user 5.97s system 42% cpu 52.104 total | 21.62s user 9.01s system 381% cpu 8.023 total | 23.22s user 10.11s system 540% cpu 6.162 total | 21.64s user 9.81s system 603% cpu 5.208 total | 20.70s user 9.13s system 602% cpu 4.948 total |

---

| - | P=1 | P=10 | P=40 | P=80 | P=120 |
| --- | --- | --- | --- | --- | --- |
| old no tsh kube credential | 8.61s user 2.99s system 31% cpu 36.336 total | 9.57s user 3.39s system 283% cpu 4.565 total | 10.22s user 4.03s system 553% cpu 2.574 total | 9.32s user 3.82s system 559% cpu 2.351 total | 11.49s user 4.85s system 624% cpu 2.617 total
| new no tsh kube credential | 8.27s user 2.94s system 24% cpu 45.041 total | 10.85s user 4.31s system 195% cpu 7.767 total | 11.32s user 4.64s system 469% cpu 3.401 total | 10.83s user 4.51s system 553% cpu 2.773 total | 10.90s user 4.84s system 537% cpu 2.930 total |

---

| instances | old total | old avg | **new total** | **total avg** |
| --- | --- | --- | --- | --- |
| 1 | 0.145 | 0.145 | 0.074 | 0.074 |
| 10 | 0.430 | 0.043 | 0.146 | 0.0146 |
| 20 | 0.740 | 0.037 | 0.284 | 0.0142 |
| 30 | 1.108 | 0.037 | 0.417 | 0.0139 |
| 40 | 1.483 | 0.037 | 0.580 | 0.0145 |
| 60 | 13.604 | 0.228 | 0.825 | 0.0137 |
| 80 | 30.236 | 0.378 | 1.143 | 0.0142 |
| 106 | 46.681 | 0.440 | 1.413 | 0.0133 |

Fixes #19313

Co-authored-by: Brian Joerger <bjoerger@goteleport.com>
 2023-03-01 19:54:36 +00:00
Jakub Nyckowski 942c0652d1 Move makefile BPF to common.mk (#22485) 
Currently, a lot of makefile logic is copied between OSS end Ent repo. This PR moves BPF-related code to common.mk, so it doesn't need to be copied between reports. I'll move more code in the following PRs. I just want to keep diffs small.
 2023-03-01 19:12:54 +00:00
Steven MartinZac BergquistPaul Gottschling
 		9926da717c Server Access RBAC Docs page (#20246) 
* Server Access RBAC Docs page

* verbiage change

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* verbiage change

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* verbiage change

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* Addressed comments

* Verbiage update

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage update

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage update

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage update

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* wording update

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage update

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* change

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage change

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage change

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage change

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage change

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage change

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage change

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage change

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* Add trusted cluster def

* Update docs/pages/server-access/rbac.mdx

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* Update docs/pages/server-access/rbac.mdx

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

---------

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
 2023-03-01 18:58:43 +00:00
Edoardo Spadolini 6fd8a233e1 lib/usagereporter refactor and consolidation (#22460) 
* services.usagereporter to lib/usagereporter/teleport

* teleterm/daemon/usagereporter to usagereporter/daemon

* usagereporter/daemon type aliases

* Move UsageAnonymizable newtypes in a separate file

* DiscardUsageReporter should be passed by value

* Type renames in usagereporter/teleport

* Move audit event to usage event conversion to lib/usagereporter

* package import renames

* Don't break the e build for now

* move web usage report events to lib/usagereporter

* forgot license blurb

* lib/usagereporter/discover.go to types_discover.go
 2023-03-01 18:40:53 +00:00
Jakub Nyckowski 7e0479fa00 Use curl -fsS when downloading libbpf (#22425) 
Related: #22380
 2023-03-01 18:25:21 +00:00
Nic Klaassen 693dbe78a8 add known STS endpoint for ap-southeast-4 (#22446) 2023-03-01 16:58:06 +00:00
Alan Parra b2faf5f440 Set create_as_resource in device-related tctl RPCs (#22415) 
* Allow devices writes with resource-like semantics

* Update generated protos

* Set `create_as_resource` in device-related `tctl` RPCs

* Do a few tweaks to `tctl` device resources
 2023-03-01 15:43:43 +00:00
Steven MartinandNoah Stride 80fd08f999 Add docs steps to create machine-id data dir and systemd enablement (#22463) 
* Add steps to create machine-id data dir and systemd enablement

* verbiage update

Co-authored-by: Noah Stride <noah.stride@goteleport.com>

* Change daemon-reload to enable for systemctl

---------

Co-authored-by: Noah Stride <noah.stride@goteleport.com>
 2023-03-01 15:36:16 +00:00
Alan Parra 9fe4b30959 Allow devices writes with resource-like semantics (#22306) 
* Allow devices writes with resource-like semantics

* Update generated protos
 2023-03-01 15:16:46 +00:00
Alan Parra 0ea9b9b377 chore: Bump Buf to v1.15.0 (#22430) 2023-03-01 15:10:39 +00:00
dependabot-batcher[bot]dependabot[bot]Tobiasz Heller
 		d5417359b1 Batched Dependabot updates (#22301) 
* Bump github.com/prometheus/common from 0.39.0 to 0.40.0

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.39.0...v0.40.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.86.0 to 1.86.1

Bumps [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) from 1.86.0 to 1.86.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.86.0...service/ec2/v1.86.1)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/jcmturner/gokrb5/v8 from 8.4.3 to 8.4.4

Bumps [github.com/jcmturner/gokrb5/v8](https://github.com/jcmturner/gokrb5) from 8.4.3 to 8.4.4.
- [Release notes](https://github.com/jcmturner/gokrb5/releases)
- [Commits](https://github.com/jcmturner/gokrb5/compare/v8.4.3...v8.4.4)

---
updated-dependencies:
- dependency-name: github.com/jcmturner/gokrb5/v8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/golang-jwt/jwt/v4 from 4.4.3 to 4.5.0

Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.4.3 to 4.5.0.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.4.3...v4.5.0)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump tempfile from 3.3.0 to 3.4.0

Bumps [tempfile](https://github.com/Stebalien/tempfile) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/Stebalien/tempfile/releases)
- [Changelog](https://github.com/Stebalien/tempfile/blob/master/NEWS)
- [Commits](https://github.com/Stebalien/tempfile/commits)

---
updated-dependencies:
- dependency-name: tempfile
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/stretchr/testify from 1.8.1 to 1.8.2 in /api

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/stretchr/testify from 1.8.1 to 1.8.2

* go mod tidy in /api

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tobiasz Heller <tobiasz.heller@goteleport.com>
 2023-03-01 14:58:31 +00:00
Dima Ilchenko fe2ae5fac5 bump cloud version (#22449) 
Update docs to use the latest Cloud version number
 2023-03-01 14:33:50 +00:00
Andrew Burke be9fee43de Fix pickDefaultAddr not respecting HTTPS_PROXY (#22161) 
This change fixes a bug where tsh would not respect HTTPS_PROXY when it
has to guess the Telport proxy's port.
 2023-03-01 00:49:27 +00:00
Tim Buckley f8681cf3d4 Make curl fail on server error when downloading binaries in buildbox (#22380) 
* Make curl fail on bad URLs when downloading `buf` in buildbox

* Use `-f` everywhere, remove debugging

* `-f`-ify the other build.assets Dockerfiles
 2023-02-28 22:28:25 +00:00
Anton Miniailo 9c600393c2 Add delay for the test when expired token is deleted in background (#22383) 
* Add delay for the test when expired token is deleted in background

* Use require.Eventually
 2023-02-28 22:22:57 +00:00
Anton Miniailo 3633c6181e Add secure client IP propagation throughout teleport (#21080) 2023-02-28 20:38:12 +00:00
Aditya KodeAlex FornutoGus Luxton
 		3c0707c710 fix typo in image (#22138) 
* changed  spelling error `devcie` to `device` #21215

* Updated requested changes in svg

fixed issue #22138

* fix spelling errors from original

* standardize punctuation

---------

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
Co-authored-by: Gus Luxton <gus@goteleport.com>
 2023-02-28 19:46:45 +00:00
dependabot[bot] 0a2301b4e6 Bump golang.org/x/net in /examples/workflows (#22364) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20220127200216-cd36cc0744dd to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/commits/v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 19:27:37 +00:00
Michael Wilson 0fec21a1ef Initial Okta objects. (#22151) 
To support the Okta integration, the initial Okta objects have been added.
 2023-02-28 19:22:13 +00:00
Nic KlaassenandBrian Joerger 14a23b9747 feat: add LoginRule methods to api/client (#22379) 
This commit adds LoginRule CRUD methods to api/client so that they can
be used by generated code (terraform provider).

Co-authored-by: Brian Joerger <bjoerger@goteleport.com>
 2023-02-28 19:06:00 +00:00
fheinecke 866ec12165 Added --artifact-version flag to OS package repo tool (#22104) 
* Added `--target-cloud` flag to OS package repo tool

* Updated OS package repo tool to use "version channel" instead of "artifact version"

* Added help flag examples
 2023-02-28 19:04:44 +00:00
rosstimothy 48fe7172c0 Rename ProxyService to TransportService (#22405) 
Changes the name to better align with the naming used by the rest
of the feature and to prevent ambiguity as the term proxy is quite
overloaded. This has not landed in a release yet so there are no
backward compatability concerns as nothing serves or consumes this
api yet.
 2023-02-28 18:40:06 +00:00
Brian Joerger 30d9429fb3 RFD 105 - Headless Authentication (#21005) 
* Draft UX section.

* Complete draft.

* Minor edits.

* Address comments, polish.

* Condense headless login request into a single HTTP endpoint.

* Update security section for limited certificate permissions.

* Address doyensec comments.

* Update RFD.

* Remove certificate limitation from RFD scope; Add RFD number; smaller
edits.

* Small fixes.

* * Update auth flow to use auth.AuthenticateSSHUser endpoint instead of CreateHeadlessAuthRequest and GenerateUserCerts endpoints

 * Remove CreateHeadlessAuthRequest rpc

 * Remove token and other unneeded fields from headless authentication

* * Add resource watcher section

* Don't insert backend data without authenticaion

* Remove view headless requests page

* Update diagram

* Use the client's public key to derive a request ID.
 2023-02-28 18:08:05 +00:00
dependabot[bot] 8cddba3c5d Bump golang.org/x/net in /examples/go-client (#22355) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20220127200216-cd36cc0744dd to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/commits/v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 17:53:16 +00:00
dependabot[bot] d142087b7b Bump golang.org/x/crypto in /assets/backport (#22359) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20210817164053-32db794688a5 to 0.1.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 17:53:11 +00:00
dependabot[bot] 5f1a5a25ad Bump golang.org/x/crypto in /web/.cloudbuild/scripts (#22360) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20211215153901-e495a2d5b3d3 to 0.1.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 17:53:05 +00:00
MichaelandJeff Pihach d94fed7b0d Add static and dynamic web ui configuration options (#21945) 
* Add UiConfig option to proxy service config

* Add uiConfig to GRV_CONFIG window object and use in terminal constructor

* Update configuration reference docs

* Remove extra structs and change property to scrollbackLines

* Update web/packages/teleport/src/config.ts

Co-authored-by: Jeff Pihach <hatched@users.noreply.github.com>

* Use a common struct and apply in applyProxyConfig

* Remove webclient dependency for fileconf

* Add missing doc comments

* Set individual properties of cfg.Proxy.UI

* Remove unneeded comment

* Add nolint rule

* Fix nolint

* Add test for UIConfig

* Cleanup tests

* Fix TestUIConfig context

* Allow dynamic config for web ui (#22097)

* Update protofiles

---------

Co-authored-by: Jeff Pihach <hatched@users.noreply.github.com>
 2023-02-28 17:45:52 +00:00
Gus Luxton 880736463b sshserver: Correctly handle PuTTY winadj channel requests (#19468) 
* sshserver: Correctly handle PuTTY winadj channel requests

Fixes #19365

* Actually send a failure

* dispatch changes

* Reimplement wantReply handling

* Also handle windadj in forwarding server

* lint: Fix typo

* lint: Invert return order to put err last

* Use nil return payload instead

* Use trace.ReplyAlreadyHandled instead

* Handle reply internally and set req.WantReply to false

* Use t.Cleanup()

* behaviour is not a misspelling but whatever makes you happy

* Suggestions from code review
 2023-02-28 17:39:03 +00:00
Michael Wilson 35e94ca5f1 Add missing methods into proxy access point. (#22413) 
SAML IdP methods and the user group methods were not added into the proxy
access point interface after being added to the cache.
 2023-02-28 17:32:22 +00:00
Zac Bergquist 0d8d9e64f6 docs: use approved terminology for desktop access w/ local users (#22403) 2023-02-28 17:20:37 +00:00
Anthony SomersetandHugo Shaka d6f23feb49 fixes #21970 - remove broken config validation check in scratch mode (#22124) 
* fixes #21970 - move from required to a fail check for scratch mode

* fixing typo double proxy reference

* Remove auth predeploy checks

* Remove proxy predeploy checks

---------

Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
 2023-02-28 17:10:01 +00:00
Alexander KlizhentasandZac Bergquist 834da10529 Use developer-friendly and precise technical language in docs (#22382) 
* Update index.mdx

* Update index.mdx

* Update docs/pages/index.mdx

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* Update docs/pages/index.mdx

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* Update index.mdx

---------

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
 2023-02-28 15:05:16 +00:00
dependabot[bot] 787a2af271 Bump golang.org/x/crypto in /examples/go-client (#22357) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20220126234351-aa10faf2a1f8 to 0.1.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 14:25:50 +00:00
dependabot[bot] 5e4301007a Bump golang.org/x/net in /web/.cloudbuild/scripts (#22353) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20211216030914-fe4d6282115f to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/commits/v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 14:25:12 +00:00
dependabot[bot] 328c6ad959 Bump golang.org/x/net in /assets/backport (#22354) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20210226172049-e18ecbb05110 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/commits/v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 14:25:06 +00:00
dependabot[bot] 1b16bae25a Bump golang.org/x/crypto in /examples/workflows (#22361) 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20220126234351-aa10faf2a1f8 to 0.1.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 14:14:48 +00:00
dependabot[bot] 57fb938f81 Bump github.com/aws/aws-sdk-go from 1.44.204 to 1.44.210 (#22351) 
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.204 to 1.44.210.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.204...v1.44.210)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 13:42:41 +00:00
dependabot[bot] b1a4587783 Bump github.com/aws/aws-sdk-go-v2/config from 1.18.13 to 1.18.15 (#22289) 
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.18.13 to 1.18.15.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.13...config/v1.18.15)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 13:38:41 +00:00
Steven MartinandPaul Gottschling 8d31335812 Update to default k8s deployment docs (#22046) 
* Updates to mention there are now proxy, auth pods.  Includes troubleshooting

* change troubleshooting description

* verbiage update

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* verbiage update

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* remove enterprise license mention in guide overivew

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

---------

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
 2023-02-28 12:34:56 +00:00
Steven Martin e8b4218d24 Machine ID readme example script fix (#22385) 
Fix script to run
 2023-02-28 12:23:46 +00:00
dependabot[bot] 17ecc61b42 Bump golang.org/x/text from 0.3.7 to 0.3.8 in /examples/workflows (#22164) 
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.3.7 to 0.3.8.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.3.7...v0.3.8)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-28 12:17:00 +00:00
Yassine Bounekhla 3a6a509aad update e-ref (#22376) 2023-02-28 12:08:03 +00:00