opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-11-02 23:31:08 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
cf6473feb9104584df347bdc42728b8dbc851bdf
teleport/api/types
T
History
Marco André Dinis 859898635f Use Amazon EICE to connect into EC2 instances (#30632) 
* Use Amazon EICE to connect into EC2 instances

This PR adds a new method to SSH into EC2 instances.
It uses the Amazon EC2 Instance Connect Endpoint to do so.

You can read more about the capabilities/limitations of this feature
here
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-using-eice.html

From the Teleport point of view, this uses the AWS OIDC Integration to
call the AWS APIs.
This connection mode is similar to the Agentless mode, where Teleport
connects to the OpenSSH daemon on the target server.
Except, that with this mode there's no required set up on the target
machine (no CAs are being used).

An overview of the flow when the user tries to SSH into a node:
- an SSH Public Key is sent to the target EC2 Instance
- a connection is made to the EC2 Instance Connect Endpoint using
  websockets, which in turn pipes the connection to the Private IP of
  the EC2 Instance

* review pt1

* pass CA for tests

* add godocs to OpenTunnelEC2

* fetch proxy public address jit

* add docs and move key generation to native package

* remove tcp socket
2023-08-24 16:38:51 +00:00
..
accesslist
Fix access list enterprise tests. (#30925)
2023-08-23 19:58:23 +00:00
common
Add discovery for Kubernetes apps (#28988)
2023-08-09 14:44:58 +00:00
events
Add max duration option to access request (#29042)
2023-07-20 22:36:35 +00:00
header
Add access list members to the cache. (#30837)
2023-08-23 17:43:16 +00:00
installers
Update the auto-discovery and discovery installers to support SUSE (#29360)
2023-08-24 15:42:08 +00:00
trait
Add the AccessList to the cache. (#29119)
2023-07-18 15:29:22 +00:00
userloginstate
Generate user login state from access lists and integrate into certificates. (#29364)
2023-08-17 00:44:32 +00:00
webauthn
Remove lib/auth/webauthn dependency from webauthncli (#30377)
2023-08-14 21:24:37 +00:00
wrappers
Use to Buf to lint, format and generate api/ protos (#15856)
2022-08-26 18:11:38 +00:00
access_request_test.go
Access requests implement ResourceWithLabels. (#19838)
2023-01-06 19:36:07 +00:00
access_request.go
Add SessionTTL to the Access Request object (#29658)
2023-07-28 18:29:48 +00:00
accountrecovery.go
Fix operator build (#21362)
2023-02-07 01:15:55 +00:00
app_test.go
Remove deprecated code from Teleport codebase (#30120)
2023-08-07 20:50:35 +00:00
app.go
refactor label string formatting (#30079)
2023-08-08 16:57:34 +00:00
appserver_or_saml_idp_sp_test.go
add saml apps to webui apps list (#28041)
2023-07-20 16:56:43 +00:00
appserver_or_saml_idp_sp.go
add saml apps to webui apps list (#28041)
2023-07-20 16:56:43 +00:00
appserver_test.go
Support app servers on different types of tunnels. (#23749)
2023-03-29 18:13:48 +00:00
appserver.go
Add Unified Resource watcher (#28296)
2023-08-14 21:13:46 +00:00
assertion_info_test.go
Changes for tctl sso test, tctl sso configure commands [SAML] (#11508)
2022-05-04 11:48:20 +02:00
assertion_info.go
gRPC conversions - SSO Auth Connectors (#13073)
2022-06-08 01:45:06 +00:00
audit.go
use "google.golang.org/protobuf" to clone protobuf messages (#25466)
2023-05-04 21:22:01 +00:00
authentication_authpreference_test.go
Device Trust: TPM Enrollment support EKCerts (#27070)
2023-05-29 18:42:41 +00:00
authentication_mfadevice_test.go
Allow unknown fields when unmarshaling types.MFADevice (#25437)
2023-05-01 22:41:01 +00:00
authentication.go
Allow setting max_session_ttl from clusterauth preferences (#26824)
2023-06-21 10:39:34 +00:00
authority_test.go
fix rotation handling in GenerateHostCerts
2022-10-19 16:35:51 -07:00
authority.go
use "google.golang.org/protobuf" to clone protobuf messages (#25466)
2023-05-04 21:22:01 +00:00
clone_test.go
use "google.golang.org/protobuf" to clone protobuf messages (#25466)
2023-05-04 21:22:01 +00:00
cluster_alert_test.go
Alert ack API + CLI implementation (#19480)
2023-01-24 17:30:07 +00:00
cluster_alert.go
Alert ack API + CLI implementation (#19480)
2023-01-24 17:30:07 +00:00
clustername.go
use "google.golang.org/protobuf" to clone protobuf messages (#25466)
2023-05-04 21:22:01 +00:00
cmp_test.go
Rename protoEqual and add a big warning (#21491)
2023-02-08 20:57:18 +00:00
cmp.go
Rename protoEqual and add a big warning (#21491)
2023-02-08 20:57:18 +00:00
connection_diagnostic.go
Adds Origin and Label functions to ResourceHeader. (#20847)
2023-01-30 16:23:24 +00:00
constants.go
Begin separating access list members from access list resources. (#30500)
2023-08-17 13:59:39 +00:00
database_test.go
Use enum to describe IAMPolicyStatus instead of a bool (#29721)
2023-08-02 18:35:42 +00:00
database.go
Audit Log Oracle settings (#29566)
2023-08-21 12:33:12 +00:00
databaseserver_test.go
Remove GetAppSessions and deprecated DatabaseServerSpecV3 fiels (#30141)
2023-08-08 16:59:46 +00:00
databaseserver.go
Add Unified Resource watcher (#28296)
2023-08-14 21:13:46 +00:00
databaseservice.go
Adds Origin and Label functions to ResourceHeader. (#20847)
2023-01-30 16:23:24 +00:00
desktop_test.go
…
desktop.go
Add Unified Resource watcher (#28296)
2023-08-14 21:13:46 +00:00
device_test.go
Add device owner and trusted device IDs to protos (#29606)
2023-07-26 15:08:13 +00:00
device.go
Add device owner and trusted device IDs to protos (#29606)
2023-07-26 15:08:13 +00:00
device.pb.go
Add device owner and trusted device IDs to protos (#29606)
2023-07-26 15:08:13 +00:00
duration_test.go
…
duration.go
Enable GCI linter (#17894)
2022-10-28 20:20:28 +00:00
events_test.go
Partial cache healthiness (#24080)
2023-04-15 20:07:43 +00:00
events.go
Fix headless authentication matching logic for watcher (#28843)
2023-07-11 20:05:17 +00:00
extension.go
…
fuzz_test.go
Fuzzing test improvements (#28066)
2023-06-20 16:14:15 +00:00
github.go
Allow users to specify separate API URL for github connectors (#23200)
2023-03-23 20:10:05 +00:00
headlessauthn.go
Fix headless authentication matching logic for watcher (#28843)
2023-07-11 20:05:17 +00:00
installer.go
Allow for multiple installer scripts instead of a singleton (#15682)
2022-08-30 17:23:57 +00:00
instance_test.go
rework instance hbs to be more scalable and to track upgraders (#27895)
2023-07-08 02:15:56 +00:00
instance.go
chore: Bump golang.org/x/exp and fix breakages (#30439)
2023-08-14 18:29:48 +00:00
integration_awsoidc_test.go
Integrations: AWS OIDC - ListDatabases action (#24460)
2023-04-19 15:42:53 +00:00
integration_awsoidc.go
Integrations: AWS OIDC - ListDatabases action (#24460)
2023-04-19 15:42:53 +00:00
integration_test.go
Integrations service for CRUD operations (#23989)
2023-04-05 16:49:43 +00:00
integration.go
Integrations: web API and tctl (#24145)
2023-04-12 16:06:30 +00:00
jamf_test.go
fix: Use correct sync defaults and validation (#28540)
2023-06-30 20:21:06 +00:00
jamf.go
fix: Use correct sync defaults and validation (#28540)
2023-06-30 20:21:06 +00:00
jwt.go
Add option to configure JWT claim rewriting (#29687)
2023-08-08 10:30:27 +00:00
kubernetes_server_test.go
Introduce dedicated server type for Kubernetes resources (#14389)
2022-08-04 14:21:11 +00:00
kubernetes_server.go
Add Unified Resource watcher (#28296)
2023-08-14 21:13:46 +00:00
kubernetes_test.go
…
kubernetes.go
Emit event for auto-discovered VMs (#29285)
2023-08-10 18:48:10 +00:00
license_test.go
add feature hiding license flag (#30083)
2023-08-15 20:56:33 +00:00
license.go
add custom theme and logos (#30823)
2023-08-23 18:17:11 +00:00
lock_test.go
Extend host lock enforcement to other built in roles besides Node (#27018)
2023-06-05 17:08:18 +00:00
lock.go
Extend host lock enforcement to other built in roles besides Node (#27018)
2023-06-05 17:08:18 +00:00
maintenance_test.go
maintenance window API (#22850)
2023-04-11 00:23:03 +00:00
maintenance.go
use "google.golang.org/protobuf" to clone protobuf messages (#25466)
2023-05-04 21:22:01 +00:00
matchers.go
Add GCP VM auto-discovery (#28562)
2023-07-25 19:27:01 +00:00
mfa.go
use "google.golang.org/protobuf" to clone protobuf messages (#25466)
2023-05-04 21:22:01 +00:00
namespace.go
Enable GCI linter (#17894)
2022-10-28 20:20:28 +00:00
networking_test.go
…
networking.go
support case-insensitive routing option (#29320)
2023-08-17 00:48:19 +00:00
oidc_external_test.go
Changes for tctl sso test, tctl sso configure commands [OIDC] (#12519)
2022-05-17 16:30:19 +00:00
oidc_external.go
Changes for tctl sso test, tctl sso configure commands [OIDC] (#12519)
2022-05-17 16:30:19 +00:00
oidc.go
add option to force re-authentication for OIDC connectors (#29815)
2023-08-09 21:52:41 +00:00
okta_test.go
Simplify Okta assignment statuses. (#25166)
2023-04-26 13:30:10 +00:00
okta.go
Introduce group and app name Okta import rule regexes. (#26561)
2023-05-23 18:29:22 +00:00
order.go
…
plugin_data.go
…
plugin_static_credentials.go
Introduce the Plugin Static Credentials object. (#27121)
2023-05-31 15:11:36 +00:00
plugin_test.go
Adds Discord settings to API types. (#30166)
2023-08-10 23:18:22 +00:00
plugin.go
Changes to Discord plugin for running in hosted mode. (#30432)
2023-08-21 03:32:08 +00:00
presence.go
usagereporter: resource heartbeats (#23093)
2023-03-24 18:47:58 +00:00
provisioning_test.go
Add GCP join method (#24493)
2023-05-10 23:56:59 +00:00
provisioning.go
DeployService: auto upsert IAM Join Token (#28537)
2023-07-06 19:31:44 +00:00
proxied_service.go
Add proxy peering support (#12359)
2022-06-02 17:08:24 +00:00
register.go
…
remotecluster.go
feat: extend label expression syntax (#27312)
2023-06-08 15:43:11 +00:00
resource_ids_test.go
feat: support resource requests via tctl (#29418)
2023-07-24 20:35:12 +00:00
resource_ids.go
feat: support resource requests via tctl (#29418)
2023-07-24 20:35:12 +00:00
resource_test.go
Remove GetAppSessions and deprecated DatabaseServerSpecV3 fiels (#30141)
2023-08-08 16:59:46 +00:00
resource.go
Include SAML apps when filtering by app kind (#30864)
2023-08-23 14:10:38 +00:00
restrictions.go
Set network restrictions static fields upon update (#30274)
2023-08-11 09:08:00 +00:00
role_test.go
Prevent creating Kube resources forbidden by kubernetes_resources (#29248)
2023-07-18 18:54:26 +00:00
role.go
Prevent creating Kube resources forbidden by kubernetes_resources (#29248)
2023-07-18 18:54:26 +00:00
saml_idp_service_provider_test.go
Automatically parse entity ID from SAML SP during CLI creation. (#22101)
2023-02-27 20:58:22 +00:00
saml_idp_service_provider.go
Add Unified Resource watcher (#28296)
2023-08-14 21:13:46 +00:00
saml_test.go
Validate SAML connectors upon creation (#16565)
2022-09-29 18:46:08 +00:00
saml.go
Use x/exp/slices instead of home grown utilities (#18524)
2022-11-17 15:25:46 +00:00
semaphore.go
Enable GCI linter (#17894)
2022-10-28 20:20:28 +00:00
server_info.go
Add discovery-side label reconciler (#27476)
2023-07-14 22:01:23 +00:00
server_test.go
Use Amazon EICE to connect into EC2 instances (#30632)
2023-08-24 16:38:51 +00:00
server.go
Use Amazon EICE to connect into EC2 instances (#30632)
2023-08-24 16:38:51 +00:00
session_tracker_test.go
Fix moderated session presence checking (#25988)
2023-06-08 20:27:13 +00:00
session_tracker.go
Fix moderated session presence checking (#25988)
2023-06-08 20:27:13 +00:00
session.go
Add full IP pinning enforcement (#24743)
2023-04-23 17:09:49 +00:00
sessionrecording.go
Use x/exp/slices instead of home grown utilities (#18524)
2022-11-17 15:25:46 +00:00
sortby_test.go
[connect] access requests for Teleport Connect (#16694)
2022-10-11 18:52:16 -05:00
sortby.go
[connect] access requests for Teleport Connect (#16694)
2022-10-11 18:52:16 -05:00
statictokens.go
Revert "Introduce ProvisionTokenV3 (#16361)" (#16934)
2022-10-03 14:14:01 +00:00
system_role_test.go
Update golangci-lint to 1.49.0 (#16507)
2022-09-19 22:38:59 +00:00
system_role.go
upgrader monitoring and alerts (#28951)
2023-07-17 14:42:27 +00:00
traits.go
Changes for tctl sso test, tctl sso configure commands [SAML] (#11508)
2022-05-04 11:48:20 +02:00
trust.go
Integrations: AWS OIDC - ListDatabases action (#24460)
2023-04-19 15:42:53 +00:00
trustedcluster.go
Allow updating of trusted cluster role maps (#18168)
2023-01-13 19:06:17 +00:00
tunnel_strategy_test.go
Add proxy peering support (#12359)
2022-06-02 17:08:24 +00:00
tunnel_strategy.go
Enable GCI linter (#17894)
2022-10-28 20:20:28 +00:00
tunnel.go
…
tunnelconn.go
Enable GCI linter (#17894)
2022-10-28 20:20:28 +00:00
types.pb.go
List EC2 instances: add subnet id field (#30692)
2023-08-23 09:45:34 +00:00
ui_config.go
Add static and dynamic web ui configuration options (#21945)
2023-02-28 17:45:52 +00:00
user.go
Generate user login state from access lists and integrate into certificates. (#29364)
2023-08-17 00:44:32 +00:00
usergroup_test.go
Add mapping between user groups and applications. (#27812)
2023-06-16 17:52:31 +00:00
usergroup.go
Add mapping between user groups and applications. (#27812)
2023-06-16 17:52:31 +00:00
usertoken.go
…
usertokensecrets.go
…
watch_status.go
Partial cache healthiness (#24080)
2023-04-15 20:07:43 +00:00