teleport

mirror of https://github.com/gravitational/teleport.git synced 2026-11-04 19:12:46 +08:00

Files

T

Noah Stride 5fa3960c13 RFD 79: OIDC Joining (#14414 )

* Start work on OIDC joining RFD

* Better explain why GCE as first platform

* Explain registration flow

* Correct behaviour for bot certificates

* Change structure of configuration to use array

* Add notes on JWT exfilitration security issues

* Adjust RFD for GCP specific configuration

* Add zone to extracted claims from GCP token

* Introduce new ProvisionTokenSpec

* Add migration strategy todo

* Simply GCP OIDC joining config schema

* Remove irrelevant line

* Update GCP example to reference TokenV3

* Notes on certificate pinning mitigation for mitm

* add notes on clock skew

* JWT cache configuration

* fix rfd line wrapping

* Update RFD79 for implementation

2022-10-07 08:58:13 +00:00

assets

RFD 0088: Passwordless for windows CLI (#16360 )

2022-10-07 08:36:31 +02:00

0000-rfds.md

Updated RFD 000: RFDs

2022-04-12 16:05:33 -07:00

0001-testing-guidelines.md

RFD 1: update using new Go 1.15 testing helpers (#5584 )

2021-02-17 09:38:32 -08:00

0002-streaming.md

Fix some typos in lib/ (#15556 )

2022-08-23 07:34:36 +00:00

0003-extended-approval-workflows.md

RFD 0: RFDs (#5228 )

2021-01-09 10:59:42 -08:00

0005-kubernetes-service.md

RFD 0: RFDs (#5228 )

2021-01-09 10:59:42 -08:00

0007-rbac-oss.md

RFD 0: RFDs (#5228 )

2021-01-09 10:59:42 -08:00

0008-application-access.md

Update rfd/0008-application-access.md

2021-02-25 17:24:07 -08:00

0009-locking.md

RFD 9 (Locking): Update with latest developments (#7860 )

2021-11-09 11:06:30 -08:00

0010-api.md

Update API RFD. (#6764 )

2021-06-30 11:41:56 -07:00

0011-database-access.md

RFD 31: Dynamic registration for apps and databases (#6787 )

2021-10-26 09:43:40 -07:00

0012-teleport-versioning.md

Clarify our version compatibility guarantees (#12487 )

2022-05-10 19:56:11 +00:00

0014-session-2FA.md

RFD 14: per-session 2FA (#5125 )

2021-01-27 09:13:59 -08:00

0015-2fa-management.md

RFD 15: 2FA device management (#5135 )

2021-02-09 16:30:37 -08:00

0016-dynamic-configuration.md

Remove API aliases (#6983 )

2021-06-04 13:29:31 -07:00

0018-agent-loading.md

Set status of RFD 18 to implemented. (#6358 )

2021-04-11 08:44:00 -07:00

0019-event-iteration-api.md

Implement RFD 19: Event Iteration API (#6731 )

2021-05-18 16:46:01 +02:00

0021-cluster-routing.md

RFD 21 (Cluster Routing): Mark as implemented (#6835 )

2021-05-17 19:42:55 +02:00

0022-ssh-agent-forwarding.md

RFD-0022: Key Agent Forwarding (#6168 )

2021-04-19 19:52:39 -07:00

0024-dynamo-event-overflow.md

Implement RFD 24 for alternative DynamoDB event indexing (#6583 )

2021-05-06 19:18:28 +02:00

0025-hsm.md

Add support for HSM CA rotation (#7862 )

2021-08-18 21:21:43 -07:00

0026-custom-approval-conditions.md

RFD 0026 - Custom Approval Conditions (#5071 )

2021-04-13 13:42:27 -07:00

0027-mtls-metrics.md

RFD 27: mtls metrics (#6469 )

2021-07-15 10:38:17 -07:00

0028-cluster-config-resources.md

Mark RFD 28 (ClusterConfig reorg) as implemented (#7706 )

2021-07-27 06:47:43 -07:00

0029-account-lifecycle.md

Replace "loose" with "lose" (#9284 )

2021-12-09 03:12:15 +00:00

0031-dynamic-app-db-registration.md

RFD 31: Dynamic registration for apps and databases (#6787 )

2021-10-26 09:43:40 -07:00

0032-access-tester.md

Remove tctl roletester (#13863 )

2022-06-25 04:01:21 +00:00

0033-desktop-access.md

Support traits for Windows Logins (#8585 )

2021-10-13 08:39:31 -07:00

0034-desktop-access-windows.md

Make LDAP desktop discovery disabled by default

2021-10-22 12:22:24 -06:00

0035-desktop-access-windows-authn.md

RFD 33-37: Windows desktop access

2021-08-02 16:50:58 +00:00

0037-desktop-access-protocol.md

Desktop Access optimizations (#16864 )

2022-10-05 01:44:01 +00:00

0038-database-access-aws-discovery.md

Add RFD 38 (#7769 )

2021-10-26 09:55:51 -07:00

0039-sni-alpn-teleport-proxy-routing.md

correct protocol name (#16848 )

2022-10-04 11:47:59 -05:00

0040-webauthn-support.md

Update passwordless RFDs with current FIDO2 flows (#14060 )

2022-07-07 18:04:43 +00:00

0041-aws-node-join.md

RFD 50: Cluster Join Methods and Endpoints (#9871 )

2022-01-31 23:31:48 +00:00

0042-s3-kms-encryption.md

RFD 42 - S3 KMS Encryption (#8344 )

2021-11-30 00:16:00 +01:00

0043-kubeaccess-multiparty.md

[RFD Update] Clarify RBAC rule application for session joining (#11223 )

2022-03-24 07:10:54 +00:00

0044-session-where-condition.md

RFD 44: RBAC where conditions for session recordings list/read (#8084 )

2021-11-10 09:00:12 -08:00

0045-ssh_session-where-condition.md

[RFD Update] Clarify RBAC rule application for session joining (#11223 )

2022-03-24 07:10:54 +00:00

0046-database-access-config.md

feat: update RFD46 with bootstrap and config create (#9719 )

2022-03-04 12:17:07 +00:00

0047-drop-vendor.md

Mark RFD 47 as implemented

2022-01-07 02:15:11 -07:00

0048-desktop-access-session-recording.md

Desktop session recording/playback (#9583 )

2022-02-11 15:39:14 -07:00

0049-desktop-clipboard.md

Desktop Access: clipboard support (#9976 )

2022-02-07 18:57:46 +00:00

0050-join-methods.md

Remove unused RegisterNewAuthServer auth endpoint and references (#13809 )

2022-06-24 07:58:28 +00:00

0051-x11-forwarding.md

RFD 51: X11 forwarding (#10009 )

2022-02-03 17:35:31 +00:00

0052-passwordless.md

RFD 0088: Passwordless for windows CLI (#16360 )

2022-10-07 08:36:31 +02:00

0053-passwordless-fido2.md

Update passwordless RFDs with current FIDO2 flows (#14060 )

2022-07-07 18:04:43 +00:00

0054-passwordless-macos.md

Update passwordless RFDs with current FIDO2 flows (#14060 )

2022-07-07 18:04:43 +00:00

0055-webui-ss-paginate-filter.md

RFD 55: WebUI server-side paginating and filtering (#9633 )

2022-01-28 10:50:18 -08:00

0056-sql-backend.md

RFD 56: SQL Backend (#10253 )

2022-03-04 15:46:37 +00:00

0057-automatic-aws-server-discovery.md

RFD: Automatic AWS Server Discovery (#12410 )

2022-09-01 07:20:07 +00:00

0057-automatic-user-provisioning.md

Add initial verson of automatic user provisioning RFD

2022-06-07 16:09:21 +00:00

0058-desktop-file-transfer.md

File Transfer RFD (#11526 )

2022-05-02 09:09:51 -04:00

0058-package-distribution.md

RFD 58: Package Distribution (#10746 )

2022-06-03 14:36:56 -05:00

0059-search-based-access-requests.md

Make tsh ssh --request the default (#13326 )

2022-06-10 17:14:29 +00:00

0060-gRPC-backend.md

Change rfd number (#11312 )

2022-03-21 16:20:28 -07:00

0061-tsh-aliases.md

Mark RFD#61 as implemented. (#14924 )

2022-07-27 18:01:08 +00:00

0062-tsh-proxy-template.md

Add OpenSSH Proxy Jump docs (#13170 )

2022-06-24 17:20:25 +00:00

0063-teleport-terminal.md

Mark RFD 63 as implemented, update details (#11721 )

2022-04-07 08:39:35 +00:00

0064-bot-for-cert-renewals.md

Update tbot RFD with implementation details (#14921 )

2022-07-27 23:07:35 +00:00

0065-distributed-tracing.md

RFD 65 Distributed Tracing (#11713 )

2022-08-04 15:11:10 +00:00

0066-ip-based-validation.md

Make source IP-pinning an enterprise feature (#14141 )

2022-07-06 17:25:31 +00:00

0067-database-access-aws-redis.md

Documentation for ElastiCache (#13133 )

2022-06-30 16:10:57 +00:00

0067-desktop-access-file-system-sharing.md

Add an is_empty field to FileSystemObject (#16022 )

2022-09-01 17:31:18 +00:00

0068-session-recording-modes.md

RFD 68: Session recording modes (#11631 )

2022-06-06 20:53:28 +00:00

0069-proxy-peering.md

Add proxy peering rfd (#9132 )

2022-04-21 18:27:51 +00:00

0070-tctl-sso-configure-command.md

New commands: tctl sso test, tctl sso configure for GitHub (#12783 )

2022-05-26 23:26:35 +00:00

0071-tctl-sso-test-command.md

New commands: tctl sso test, tctl sso configure for GitHub (#12783 )

2022-05-26 23:26:35 +00:00

0072-ec2-tags.md

Update RFD 72 (EC2 tags) with Azure info (#15881 )

2022-09-14 23:05:15 +00:00

0073-idp-initiated-login.md

RFD 73 - IdP-initated Login Flows for SAML and OIDC (#13467 )

2022-07-06 18:17:08 +00:00

0073-public-image-registry.md

RFD 0073: Public Image Registry (#13165 )

2022-06-23 15:05:25 +00:00

0074-kube-secret-storage.md

RFD 74: Kubernetes Secret for Agent's Identity storage (#12958 )

2022-07-29 10:29:48 +00:00

0074-sftp-support.md

RFD 74: Add SFTP Support (#13216 )

2022-08-12 14:12:50 +00:00

0075-snowflake-support.md

RFD75: Snowflake Integration - Database Access (#12006 )

2022-06-15 19:06:45 +00:00

0079-oidc-joining.md

RFD 79: OIDC Joining (#14414 )

2022-10-07 08:58:13 +00:00

0081-tls-ping.md

TLS routing ping for database protocols (#14887 )

2022-08-26 16:42:23 +00:00

0082-session-tracker-resource-rbac.md

Implement RFD 82: Session Tracker Resource RBAC (#15760 )

2022-09-20 15:38:48 +00:00

0083-machine-id-host-certs.md

Update RFD83 status (#17114 )

2022-10-06 15:01:23 +00:00

0088-passwordless-windows.md

RFD 0088: Passwordless for windows CLI (#16360 )

2022-10-07 08:36:31 +02:00

0090-upgrade-system.md

Update RFD number RFD text body (#17110 )

2022-10-06 16:46:49 +00:00