mirror of
https://github.com/gravitational/teleport.git
synced 2026-09-24 16:17:11 +08:00
Sasha Klizhentas
83d0f7e7bb
This commit fixes #3252 Security patches 4.2 introduced a regression - leaf clusters ignore role mapping and attempt to use role names coming from identity of the root cluster whenever GetNodes method was used. This commit reverts back the logic, however it ensures that the original fix is preserved - traits and groups are updated on the user object. Integration test has been extended to avoid the regression in the future.
31 lines
566 B
YAML
31 lines
566 B
YAML
# Proxy server for cluster "two". Also runs "node" role
|
|
teleport:
|
|
nodename: two-proxy
|
|
auth_servers: ["two-auth"]
|
|
auth_token: foo
|
|
log:
|
|
output: stdout
|
|
severity: DEBUG
|
|
data_dir: /var/lib/teleport
|
|
storage:
|
|
path: /var/lib/teleport/backend
|
|
type: dir
|
|
|
|
auth_service:
|
|
enabled: no
|
|
|
|
ssh_service:
|
|
enabled: yes
|
|
labels:
|
|
cluster: two
|
|
role: proxy+node
|
|
commands:
|
|
- name: kernel
|
|
command: [/bin/uname, -r]
|
|
period: 5m
|
|
|
|
proxy_service:
|
|
enabled: yes
|
|
listen_addr: 0.0.0.0:5023
|
|
web_listen_addr: 0.0.0.0:5080
|