mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-03 07:40:28 +08:00
bd4dcab802
* Add warning to previous command * Hash out basics of new tbot proxying command use * Avoid passing full botConfig into `tbot ssh-proxy-command` * wip * simplify impl * Set up test suite for ssh config generation * Add support for checking if ALPNConnUpgrade is required * Cache the alpn upgrade result * Americanize Spellings * Update lib/tbot/config/template_ssh_client.go Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com> * Add CHANGELOG.md entry for breaking change * Update tool/tbot/proxy.go Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com> * Update lib/tbot/tbot.go Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com> * Switch to `--no` variants rather than `={bool}` * Use SingleFlight on alpn proxy upgrade cache * Improve singleflight * Add rudimentary shell quoting * Uniformly pad the templating * Rename shellQuote -> proxyCommandQuote * Fix imports --------- Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com> Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com>
84 lines
2.6 KiB
Go
84 lines
2.6 KiB
Go
/*
|
|
* Teleport
|
|
* Copyright (C) 2023 Gravitational, Inc.
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"path/filepath"
|
|
"slices"
|
|
|
|
"github.com/gravitational/trace"
|
|
|
|
"github.com/gravitational/teleport"
|
|
"github.com/gravitational/teleport/lib/tbot/config"
|
|
"github.com/gravitational/teleport/lib/tbot/tshwrap"
|
|
)
|
|
|
|
func onProxyCommand(
|
|
ctx context.Context, botConfig *config.BotConfig, cf *config.CLIConf,
|
|
) error {
|
|
wrapper, err := tshwrap.New()
|
|
if err != nil {
|
|
return trace.Wrap(err)
|
|
}
|
|
|
|
destination, err := tshwrap.GetDestinationDirectory(botConfig)
|
|
if err != nil {
|
|
return trace.Wrap(err)
|
|
}
|
|
|
|
env, err := tshwrap.GetEnvForTSH(destination.Path)
|
|
if err != nil {
|
|
return trace.Wrap(err)
|
|
}
|
|
|
|
identityPath := filepath.Join(destination.Path, config.IdentityFilePath)
|
|
|
|
// TODO(timothyb89): We could consider supporting a --cluster passthrough
|
|
// here as in `tbot db ...`.
|
|
args := []string{"-i", identityPath, "proxy", "--proxy=" + cf.ProxyServer}
|
|
args = append(args, cf.RemainingArgs...)
|
|
|
|
// Pass through the debug flag, and prepend to satisfy argument ordering
|
|
// needs (`-d` must precede `proxy`).
|
|
if botConfig.Debug {
|
|
args = append([]string{"-d"}, args...)
|
|
}
|
|
|
|
// Handle a special case for `tbot proxy kube` where additional env vars
|
|
// need to be injected.
|
|
if slices.Contains(cf.RemainingArgs, "kube") {
|
|
// `tsh kube proxy` uses teleport.EnvKubeConfig to determine the
|
|
// original kube config file.
|
|
env[teleport.EnvKubeConfig] = filepath.Join(
|
|
destination.Path, "kubeconfig.yaml",
|
|
)
|
|
// `tsh kube proxy` uses TELEPORT_KUBECONFIG to determine where to write
|
|
// the modified kube config file intended for proxying.
|
|
env["TELEPORT_KUBECONFIG"] = filepath.Join(
|
|
destination.Path, "kubeconfig-proxied.yaml",
|
|
)
|
|
}
|
|
if slices.Contains(cf.RemainingArgs, "ssh") {
|
|
log.WarnContext(ctx, "`tbot proxy ssh` is deprecated and will stop working in v17. See https://goteleport.com/docs/machine-id/reference/v16-upgrade-guide/")
|
|
}
|
|
|
|
return trace.Wrap(wrapper.Exec(env, args...), "executing `tsh proxy`")
|
|
}
|