mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-02 14:11:56 +08:00
Hugo ShakaandPaul Gottschling
920495c6d7
Provides a solution for #9298 This removes an unnecessary limitation of the Helm chart: `.Values.tls.existingCASecretName` can now be used without `.Values.tls.existingSecretName`. This allows users to trust their own CAs without building custom images. Context: - go's x509 library supports loading system certs based on the SSL_CERTS_FILE environment variable - we are already using this in the chart to trust private CAs (teleport proxy needs to trust its own certs to start) - users might want to trust custom CAs to - speak with a S3 backend (minio) - validate upstream app certs (unlike DB access you can't trust certs per-application) - trust another cluster - call an OIDC provider - teleport-kube-agent chart already has the feature Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>
Teleport Docs
Teleport docs are built using Next.js. Please see the README in the docs repo for details on how to make and test changes to Teleport docs.
Linting and checking for bad links
Run make -C build.assets test-docs from the root directory of this repo.