opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-11-04 19:12:46 +08:00
Code Issues Packages Projects Releases Wiki Activity
12,109 Commits 9,614 Branches 7,118 Tags
acb255cd883d3d94de949f54e322edacab736112
Commit Graph
12109 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Wilson 763410ca70 Lock access to mock Firestore Server reqs. (#21742) 
The reqs member of the mock Firestore Server used in the `TestDeleteDocuments`
test was occasionally causing a data race. Accesses to this field have now
been wrapped in a lock.
 2023-02-13 19:28:56 +00:00
Roman Tkachenko f98ae57024 [auto] Update AMI IDs for 12.0.2 (#21743) 2023-02-13 19:17:09 +00:00
Andrew Burke 2455153347 RFD - Automatic Azure discovery (#16957) 
RFD for the automatic discovery and joining of Azure servers.
 2023-02-13 19:04:49 +00:00
dependabot[bot] 9ba2f61c51 Bump github.com/jackc/pgx/v4 from 4.17.2 to 4.18.0 (#21703) 
Bumps [github.com/jackc/pgx/v4](https://github.com/jackc/pgx) from 4.17.2 to 4.18.0.
- [Release notes](https://github.com/jackc/pgx/releases)
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jackc/pgx/compare/v4.17.2...v4.18.0)

---
updated-dependencies:
- dependency-name: github.com/jackc/pgx/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-13 18:34:47 +00:00
Steven Martin 9230d1b17f Role access requests available for all scopes (#21714) 2023-02-13 18:22:53 +00:00
Paul GottschlingandAlex Fornuto a93aaa7e6e Fix linter issues (#21677) 
An issue with `gravitational/docs` caused the docs linter to stop
catching issues for a period of time. Now that we have addressed the
linter issue, this change addresses warnings/errors flagged by the
linter.

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
 2023-02-13 17:07:00 +00:00
dependabot-batcher[bot]anddependabot[bot] 36831dda6c Batched Dependabot updates (#21708) 
* Bump github.com/aws/aws-sdk-go from 1.44.198 to 1.44.199

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.198 to 1.44.199.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.198...v1.44.199)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/jackc/pgconn from 1.13.0 to 1.14.0

Bumps [github.com/jackc/pgconn](https://github.com/jackc/pgconn) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/jackc/pgconn/releases)
- [Changelog](https://github.com/jackc/pgconn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jackc/pgconn/compare/v1.13.0...v1.14.0)

---
updated-dependencies:
- dependency-name: github.com/jackc/pgconn
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.84.1 to 1.85.0

Bumps [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) from 1.84.1 to 1.85.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.84.1...service/ec2/v1.85.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-02-13 17:02:11 +00:00
Steven Martin abb2574926 Update docs link to master db access rfd (#21699) 2023-02-13 16:39:13 +00:00
Grzegorz Zdunek 45add5c484 Connect: Link to docs in UsageData dialog (#21709) 
* Link to docs in `UsageData`

* Replace "documentation" with "our documentation" in link
 2023-02-13 16:32:26 +00:00
Michelle Bergquist ce5a0bb37f set SessionExpires on new sessions (#21688) 2023-02-13 16:28:28 +00:00
Rafał Cieślak 6490755d2b Turn off parallelization of teleterm's integration tests (#21710) 
* Add trace.DebugReport to flaky teleterm integration test

* Turn off parallelization of teleterm's integration tests
 2023-02-13 16:19:04 +00:00
Rafał Cieślak 4feff21158 lib/utils/fs.go: Do not remove lockfiles on Windows (#21655) 
* lib/utils/fs.go: Do not remove lockfiles on Windows

* Remove unused import from fs_windows.go
 2023-02-13 15:55:08 +00:00
Justinas Stankevičius 94079bcd21 Improve webpack "exclude" expressions (#21663) 2023-02-13 15:44:58 +00:00
Alan Parra 8c84d0a766 Add device lock support (#21667) 
* Add Device to LocketTarget proto

* Refactor LockTarget.Match

* Test lib/srv.ComputeLockTargets

* Test lib/services.LockTargetsFromTLSIdentity

* Test device lock during cert issuance

* Add device lock targets where applicable

* Add --device to `tctl lock`

* Fix godocs (unrelated)

* Review: Drop redundant comments
 2023-02-13 14:46:11 +00:00
Jakub Nyckowski d1be9b1a57 Install libbpf 1.0.1 in buildboxes (#21596) 
* Install libbpf 1.0.1 in buildboxes

* Remove unused deps when building libbpf
 2023-02-13 14:15:54 +00:00
Edoardo Spadolini f622510dd0 Make UsageSessionStart report TCP app access separately (#21606) 
* Make UsageSessionStart more selective and granular for app access

* Allow generic "app" kind for app.session.start

app.session.start is consistently emitted, just not consistently stored

* Avoid singling out aws app access

* Use the same check as app access
 2023-02-13 10:13:18 +00:00
Gavin Frazar 5c752c4df8 Fixup teleport db configure create (#20968) 
* add missing flags
* fix config generation bugs
* always wrap generated strings value in quotes
* parse and check generated config
* update tests for db agent config gen
 2023-02-11 00:54:07 +00:00
Tiago Silva 46f1166b86 Reuse auth token when upgrading an Helm chart without token (#20763) 
* Reuse auth token when upgrading an Helm chart without token

When upgrading an Helm chat and not providing the auth token because it
was previously set, Helm deleted the secret and Statefulset pods become
stuck because the secret does not exist.

This PR reads the secret value from the previous upgrade/install and
reuses it during the upgrade.

Fixes #20761

* remove secret lookup
 2023-02-11 00:13:39 +00:00
Travis Rodgers c847c585a4 adding Non-AD video banner to getting started page (#21678) 2023-02-11 00:11:58 +00:00
Gus Luxton 74b078d74e Delete assets/aws/cloudformation directory (#21675) 
https://github.com/gravitational/teleport/pull/20417 deleted the `examples/aws/cloudformation` directory which this README refers to, so it's no longer necessary to keep this here.

Follow up to #20417
 2023-02-11 00:09:59 +00:00
Roman Tkachenko 29b51a76aa Switch to ghcr docs image (#21687) 2023-02-10 23:28:21 +00:00
Zac Bergquist c924be5c6d Refer to tsh apps subcommand (#21431) 
The `tsh appps` family of commands is aliased to `tsh apps`, so both
invocations work correctly. The command itself is defined as `tsh apps`,
so this is what appears in the help message.

Update references to `tsh app` to recommend `tsh apps` instead so that
there isn't confusion when browsing `tsh help` and looking for a missing
`app` subcommand.

Fixes #21367
 2023-02-10 21:40:55 +00:00
Zac Bergquist d74d78b9f0 Create go workspace prior to build (#21668) 2023-02-10 21:18:18 +00:00
dependabot-batcher[bot]dependabot[bot]Tim Ross
 		f1bec29e58 Batched Dependabot updates (#21634) 
* Bump golang.org/x/term from 0.4.0 to 0.5.0

Bumps [golang.org/x/term](https://github.com/golang/term) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/golang/term/releases)
- [Commits](https://github.com/golang/term/compare/v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace

Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.12.0...v1.13.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump go.opentelemetry.io/otel/sdk from 1.12.0 to 1.13.0 in /api

Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.12.0...v1.13.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump golang.org/x/mod from 0.7.0 to 0.8.0

Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.7.0 to 0.8.0.
- [Release notes](https://github.com/golang/mod/releases)
- [Commits](https://github.com/golang/mod/compare/v0.7.0...v0.8.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump sigs.k8s.io/controller-runtime from 0.14.3 to 0.14.4

Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.14.3 to 0.14.4.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.14.3...v0.14.4)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc

Bumps [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.38.0 to 0.39.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.38.0...zpages/v0.39.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc

Bumps [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.38.0 to 0.39.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.38.0...zpages/v0.39.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump google.golang.org/grpc from 1.52.3 to 1.53.0

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.3 to 1.53.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.52.3...v1.53.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump google.golang.org/grpc from 1.52.3 to 1.53.0 in /api

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.3 to 1.53.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.52.3...v1.53.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go from 1.44.195 to 1.44.198

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.195 to 1.44.198.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.195...v1.44.198)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace in /api

Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.12.0...v1.13.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* update golang.org/x/net golang.org/x/sys and go.opentelemetry.io/otel/exporters

* update x/text tracehttp fake-gcs-server go/iam x/oauth2 go/kms

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Ross <tim.ross@goteleport.com>
 2023-02-10 20:52:11 +00:00
Jim Bishopp b31c93d37e Bump cloud version to 11.3.3 (#21666) 2023-02-10 20:42:59 +00:00
Jonathan Lassoff 1b2888ed18 Update download link (#21584) 2023-02-10 20:05:06 +00:00
Jakub Nyckowski 1f85417d60 Always include webassets_embed when building teleport (#21601) 
* Always include webassets_embed when building teleport

Currently, all builds should include webassets, so we can just hanrdcode this tag.

* Update e
 2023-02-10 19:15:54 +00:00
Joel 2402509f33 Update dependencies blocked by the now-updated firestore version in Teleport + nits (#21653) 
* update dep blocked by firestore

* range syntax

* bumpgenproto locally too, due to it being required

* sorry, what

* please

* tidy up
 2023-02-10 18:14:08 +00:00
Zac Bergquist 46bfc6bd8a Fix build-api workflow (#21658) 
- Add missing runs-on stanza
- Fix recursive glob
 2023-02-10 17:24:48 +00:00
Michael Wilsonandrosstimothy 70833b6b3f Initial user group object. (#20848) 
* Initial group object.

The group object has been added to support the Okta appaccess integration
feature. Please see https://github.com/gravitational/teleport.e/pull/609
for more information.

The local service for handling backend management of the group objects has
been added as well. This will be expanded upon in a later PR.

* Rename group to usergroup.

* Linting fixes.

* Remove unnecessary functions.

* Add user groups to test parse shortcut.

* Apply suggestions from code review

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* Update lib/services/local/usergroup_test.go

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* Fix AsResources in usergroup.

* Apply suggestions from code review

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* Update lib/services/local/usergroup.go

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* Fix return in usergroup service.

---------

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
 2023-02-10 16:21:17 +00:00
Yassine Bounekhla 92651b5c20 [Web] Fix missing --request-id= flag in UI for Kubernetes login instructions (#21444) 
* fix missing request-id flag for kube login instructions

* add snapshot tests
 2023-02-10 16:11:21 +00:00
Alan Parra f8386bf0ae Add testplan items for Device Trust role support (#21472) 
* Add testplan items for Device Trust role support

* Trim whitespaces
 2023-02-10 15:53:59 +00:00
Steven MartinYassine BounekhlaJeff Pihach
 		4d8e23bb12 Updates port validation to restrict to valid port numbers 1-65535 (#21566) 
* Updates port validation to restrict to valid port numbers instead of just 4 digits

* lint fix

* comment updates

Co-authored-by: Yassine Bounekhla <56373201+rudream@users.noreply.github.com>

* variable change

Co-authored-by: Yassine Bounekhla <56373201+rudream@users.noreply.github.com>

* variable change

Co-authored-by: Jeff Pihach <hatched@users.noreply.github.com>

* number eval change

Co-authored-by: Jeff Pihach <hatched@users.noreply.github.com>

* error message change

Co-authored-by: Jeff Pihach <hatched@users.noreply.github.com>

* variable change

* remove comment

* update error message

---------

Co-authored-by: Yassine Bounekhla <56373201+rudream@users.noreply.github.com>
Co-authored-by: Jeff Pihach <hatched@users.noreply.github.com>
 2023-02-10 15:48:58 +00:00
Jakub Nyckowski 20f5d0b3e0 Move CentOS 7 assets to GitHub repo (#21435) 
Moving our CentOS build assets, aka Clang-10 is the first step to enabling our full Teleport to build on ARM64. This change should also save us some $$ as getting the assets from S3 sounds expensive.
 2023-02-10 15:46:36 +00:00
Yassine Bounekhla 6edb26c60f [Web] Make language on mfa verify step dialog more clear (#20825) 
* update text on dialog

* tweak language and overwrite error message

* address comments

* fix 'enter' to submit on newdevice form
 2023-02-10 15:04:47 +00:00
Joelandrosstimothy f93d401df2 Update Firestore and held-back dependencies (#21190) 
* update dep

* implicit aggregate

* fix kind check

* remove cring address manip

* correct import

* invert if

* fix rename

---------

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
 2023-02-10 14:20:15 +00:00
Noah Stride e64ff8732a Remove "expires" from delegated joining docs (#21214) 2023-02-10 14:18:12 +00:00
Grzegorz Zdunek 9ed52c327d Ask for job role on the second launch (#21402) 
* Ask for job role on the second run

* Add tests

* Call `onCancel` in mock
 2023-02-10 14:16:27 +00:00
Noah Stride 0181993047 Allow the creation and usage of expiryless ProvisionTokens (#21133) 
* Allow the creation and usage of expiryless tokens

* Tidy up loose ends

* Fix imports

* Add tests for changes to expiryless behaviour

* Use new RPCs for new expiryless behaviour

* Add tests for new RPCs

* Remove unused import

* Recreate behaviour for tokens expiring in past

* Missing NoError check int ests

* Correctly americanize behavior
 2023-02-10 13:45:36 +00:00
Gabriel Corado 22dc3dfb2e Update SQL Server library (#21065) 
* refactor(sqlserver): change to microsoft fork

* chore(gomod): update mssqldb dep

* test(sqlserver): add server on parsing PLP RPC packets

* fix(db): change mssql import

* chore(gomod): update go-mssqldb reference

* test(protocol): use fuzz arguments

* chore: code review suggestions

* test(sqlserver): add missing protocols attribute
 2023-02-10 11:39:11 +00:00
Tiago Silva a3ed4249c3 Fix kube agent shutdown during upgrades (#21537) 
During binary upgrades, Teleport forks the agents and calls the shutdown
method for each one of them.

Kubernetes Agent was calling the `http.Server` shutdown method and which
wasn't stopping the heartbeats neither handling the listeners.
This PR fixes the shutdown behaviour for Kube agent and avoids deleting
the heartbeated resources when the agent is reloading.
 2023-02-10 11:05:40 +00:00
Gabriel CoradoandRafał Cieślak bc63dddd7b Verify if proxy can handle application requests when creating session (#20418) 
* feat(app): ensure there are healthy app services when creating session

* Apply suggestions from code review

Co-authored-by: Rafał Cieślak <rafal.cieslak@goteleport.com>

* chore: code review updates

* refactor(app): preflight connection before creating session

* chore(web): change error message

* reafactor(app): change redirect to launcher rule

* refactor(app): rename preflight connection to health check app server

* refactor(apiserver): rename preflight connection

* refactor(apiserver): rename preflight connection

* refactor(apiserver): remove health check property

* test(appaccess): adjust new http status codes returned

---------

Co-authored-by: Rafał Cieślak <rafal.cieslak@goteleport.com>
 2023-02-10 10:42:55 +00:00
Tiago Silva e5dfcba6ef Moderated sessions request is not forwarded into the leaf cluster (#21422) 
* fix remote cluster redirection fail

* fix forwarder
 2023-02-10 10:37:36 +00:00
Jonathan Lassoff 48d91ab84d Update setup docs to include Yarn (#21055) 
Include references to install Yarn for building the UI, as well as the
alternative "docker-ui" make target.

The Yarn install process is currently dependent on yarn 1.x / pre-2.0
 2023-02-10 00:13:48 +00:00
fheinecke 810a89c0f0 Add OSS repo name to github actions trigger (#21439) 
* Add OSS repo name to github actinons trigger

* Bumped 'e' reference
 2023-02-09 23:57:58 +00:00
Tiago Silva 1bbaf23d86 Add Pod resource search web API (#20183) 
This PR introduces a web API for users to search, from the UI, for Kubernetes pods whose access is only granted by their `search_as_roles`.
The new API can be used to create access requests for those resources.

The new API is located
```bash
curl 'https://<proxy_endpoint>:3080/v1/webapi/sites/<teleport_cluster>/pods?kubeCluster=<kube_cluster>&kubeNamespace=<kube_namespace|empty>&searchAsRoles=yes&limit=10&startKey=&query=&search=&sort=name:asc' \
   | jq .
```
The JSON response:

```json
{
  "items": [
    {
      "kind": "pod",
      "name": "coredns-6d4b75cb6d-k84h9",
      "labels": [
        {
          "name": "k8s-app",
          "value": "kube-dns"
        },
        {
          "name": "pod-template-hash",
          "value": "6d4b75cb6d"
        }
      ],
      "namespace": "kube-system",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "etcd-minikube",
      "labels": [
        {
          "name": "component",
          "value": "etcd"
        },
        {
          "name": "tier",
          "value": "control-plane"
        }
      ],
      "namespace": "kube-system",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "kube-apiserver-minikube",
      "labels": [
        {
          "name": "component",
          "value": "kube-apiserver"
        },
        {
          "name": "tier",
          "value": "control-plane"
        }
      ],
      "namespace": "kube-system",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "kube-controller-manager-minikube",
      "labels": [
        {
          "name": "component",
          "value": "kube-controller-manager"
        },
        {
          "name": "tier",
          "value": "control-plane"
        }
      ],
      "namespace": "kube-system",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "kube-proxy-g7j5r",
      "labels": [
        {
          "name": "controller-revision-hash",
          "value": "94985b49"
        },
        {
          "name": "k8s-app",
          "value": "kube-proxy"
        },
        {
          "name": "pod-template-generation",
          "value": "1"
        }
      ],
      "namespace": "kube-system",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "kube-scheduler-minikube",
      "labels": [
        {
          "name": "component",
          "value": "kube-scheduler"
        },
        {
          "name": "tier",
          "value": "control-plane"
        }
      ],
      "namespace": "kube-system",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "nginx-deployment-6595874d85-6j2zm",
      "labels": [
        {
          "name": "app",
          "value": "nginx"
        },
        {
          "name": "pod-template-hash",
          "value": "6595874d85"
        }
      ],
      "namespace": "default",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "nginx-deployment-6595874d85-7xgmb",
      "labels": [
        {
          "name": "app",
          "value": "nginx"
        },
        {
          "name": "pod-template-hash",
          "value": "6595874d85"
        }
      ],
      "namespace": "default",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "nginx-deployment-6595874d85-c4kz8",
      "labels": [
        {
          "name": "app",
          "value": "nginx"
        },
        {
          "name": "pod-template-hash",
          "value": "6595874d85"
        }
      ],
      "namespace": "default",
      "cluster": "minikube"
    },
    {
      "kind": "pod",
      "name": "storage-provisioner",
      "labels": [
        {
          "name": "addonmanager.kubernetes.io/mode",
          "value": "Reconcile"
        },
        {
          "name": "integration-test",
          "value": "storage-provisioner"
        }
      ],
      "namespace": "kube-system",
      "cluster": "minikube"
    }
  ],
  "startKey": "teleport-agent-0",
  "totalCount": 11
}
```

Part of #20324 and #19573
Updates #19573
 2023-02-09 21:29:58 +00:00
Gavin Frazar 44b3c5d60c disable MFA TTL limit for local proxy tunnel (#21200) 
* require local proxy tunnel when mfa is required
* local proxy tunnel cert reissue with RequesterName
* add test for db mfa session TTL adjustment
 2023-02-09 21:27:21 +00:00
Zac Bergquist a839bc2dfb Remove unused Jenkinsfiles (#21549) 2023-02-09 21:19:44 +00:00
Steven MartinAlex FornutoPaul Gottschling
 		98b3de1d55 Update troubleshooting docs (#21538) 
* Update troubleshooting

* verbiage change

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>

* remove trailing space

* Update docs/pages/management/admin/troubleshooting.mdx

Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

---------

Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
 2023-02-09 21:19:07 +00:00
Steven Martin c117091201 Correct namespace name in k8s doc (#21559) 2023-02-09 21:10:39 +00:00