* Add plugin setup instructions for cloud users
- Turn the identity file export and RBAC instructions into
includes, since these instructions are the same for each
plugin.
- Change the tab set re: an impersonation role to a detail box
scoped to cloud users.
- Add separate example config files for cloud and self-hosted
deployments of each plugin.
- Misc. changes for clarity
Fixes#8936
* Respond to PR feedback
Also make minor stylistic tweaks
* Respond to PR feedback with stylistic tweaks
* Fix meta description clash
Two docs pages had the same meta description, which hurts SEO.
This changes the meta description of one of the page and uses
this opportunity to do some light copy editing.
Fixes#8713
* Respond to PR feedback
The default auditor role which is often applied to new users is
very permissive when it comes to sessions and recordings.
This may cause confusion when users attempt to set up RBAC for
sessions, because the more permissive role wins and the new
role doesn't appear to take effect.
This PR:
* Adds multiple session locking options
* Updates FedRamp guidance with correct explainer on session locks
* Some yarn markdown-lint fixes to pass CI
Add the WebAuthn Access Control guide and tweak various pages that mention U2F
to either refer to WebAuthn or use more generic terms.
* Added `/docs/access-controls/guides/webauthn/` (branched from u2f.mdx)
* Added `webauthn` section to reference configuration (`u2f` kept unchanged)
* U2F access control guide moved under the "References" section and removed
from the index / navigation menu
* Cloud guides removed (U2F was the last guide, now deleted)
* WebAuthn access control guide
* Update access controls pages
Update links to WebAuthn and changes lingo to refer to either WebAuthn,
MFA, "second factor hardware token" and "second factor authenticator",
where appropriate.
U2F is moved to the references sections and WebAuthn is favored as the
guide to be followed in regards to MFA hardware tokens. Generic language
is used whenever possible, excluding places where we reference server
configuration or protocol support.
* WebAuthn cloud guide
* Update cloud pages
* WebAuthn config reference
* Update references to U2F in various pages
* Link to the WebAuthn guide in from the Authentication reference page
Incorporates ibeckermayer's suggestion from
https://github.com/gravitational/teleport/pull/8703.
* Rephrase sentences according to reviewer feedback
* Replace explicit <h2> with `##`
* Move "Migrating from U2F" section to the bottom
* Use numbered steps
* Include tabs for Cloud in config examples
* Add tctl as a prerequisite for WebAuthn setup
* Remove Cloud guides
U2F and WebAuthn were the last remaining items.
* Make linter happy
- Remove mentions of the "built in admin role" as we no longer create it
- Remove mentions to "beta" and use "preview" instead
- Add troubleshooting step for allowing DNS traffic
- Add a desktop access section to the main docs page
Fixes#8576
* Cleanup docs on users and roles
- Updates roles to use v4
- Moves users to a separate guide
- Creates up to date reference for users and roles resources
* Update docs/pages/setup/reference/resources.mdx
Co-authored-by: Roman Tkachenko <roman@gravitational.com>
Co-authored-by: Roman Tkachenko <roman@gravitational.com>
Co-authored-by: Roman Tkachenko <roman@gravitational.com>
* Update impersonation docs
Remove duplicate titles, fix rendering of unordered lists, and take a
pass at better explaining what some of the more advanced impersonation
rules are doing.
Fixes#7988
* Fold the long 'where' rules.
We want the YAML parser to ignore the newline, the line is only
wrapped for readability.
* Address feedback
- use adminition for notes
- fix typo
- clarify the max TTL for impersonated roles
* Re-add step numbers
* Video Banner (#7914)
* Drain off admin guide into setup sections. (#7960)
* Expand daemon section and graceful restarts guide
* Move API section to top
* Move references to setup
Co-authored-by: Ben Arent <ben@goteleport.com>
Russell Jones