15 Commits
Author SHA1 Message Date
Ghassan Gedeon Achi f62ac7c810 Fix teleport-investigate and teleport-access-review skill inaccuracies (#69309)
* docs: fix skill inaccuracies from v18 bp testing

* fix: additional updates after another round of testing
2026-08-12 17:06:18 +00:00
Lisa Kim 98c0769200 Improve acl-lifecycle skill doc (#69381) 2026-08-11 16:15:51 +00:00
Lisa Kim 47ea03796f Add access list create,update,remove skill (#68277)
* Create access list create,update,remove + resource listing skill

* Evals

* Address CR + add scope feature
2026-08-04 17:56:41 +00:00
alex hemard 3f2b3ae757 SKILL: add Azure management groups to discovery skill (#69095)
* SKILL: add Azure management groups to discovery skill

* do not default to tenant
2026-08-04 14:46:15 +00:00
Tiago Silva 4d3765c02d Use split Identity Security entitlements (#68944)
Gate Access Graph, Activity Center, and Session Summaries consumers on
their dedicated entitlements.

Treat legacy Policy as a fallback for missing split entitlements across
module, proto, web config, tctl, and UI config paths so newer clients
remain compatible with older clusters and proxies.

Continues
- https://github.com/gravitational/teleport/pull/66571
- https://github.com/gravitational/teleport/pull/64340
- https://github.com/gravitational/teleport.e/pull/8722
- https://github.com/gravitational/teleport.e/pull/8725
- https://github.com/gravitational/teleport.e/pull/8791
- https://github.com/gravitational/teleport.e/pull/8792

Signed-off-by: Tiago Silva <[email protected]>
2026-07-31 09:02:59 +00:00
Ghassan Gedeon Achi d0aa161a36 feat: grantor rename, default window and iac msg (#68781)
Some updates to the `tctl access-review` command and skill based on some
feedback from Roman. The changes here include:
1) Using `Granted By` instead of `Grantor` to reduce confusion around
   the noun (other columns, fields changed accordingly)
2) Defaulting the activitity window to 24h (instead unset by default) so
   that if IAC is available the access information is returned by
   default
3) Splitting the IAC error/warning into it's own JSON/YAML field and
   giving it a dedicated location in the text output (this is paired
   with an Access Graph PR that returns a `Not Configured` message when
   IAC is not enabled on the cluster (with links to docs).
2026-07-21 20:06:47 +00:00
charlestp 94697f2bcf Teleport discovery skill - Reinstate the human description intro for automated docs generation (#68468) 2026-07-20 20:29:14 +00:00
Ghassan Gedeon Achi 143f547ef4 feat: add eval for access review skill (#68374) 2026-07-16 20:58:34 +00:00
Ghassan Gedeon Achi 62d4de8b69 feat: add tctl access review skill (#68285) 2026-07-16 19:46:15 +00:00
charlestp e976b750af teleport-discovery skill combined azure and aws version (#68029) 2026-07-02 23:16:05 +00:00
alex hemard 263a1736cc [discovery] add teleport-discovery claude skill (#67021) 2026-06-17 16:13:56 +00:00
Ghassan Gedeon Achi 821d50f902 feat: add geo filters to stats endpoint (#67523) 2026-06-12 20:53:04 +00:00
Ghassan Gedeon Achi 708dbb1bd9 tctl-investigate[2]: add text output, geo filters, and --skill (#67220)
* feat: text output, geo, and `--skill` support

Layer three orthogonal additions on top of the core command:

  - Text rendering: period header, matches summary, wrapped facet
    panel, events table. `--all-facets` opts out of the top-5
    truncation.
  - Geo filter (`--latitude`/`--longitude`/`--radius`, all three
    required together). Geo applies to events only; the stats endpoint
    has no geo params, so facet counts and `total` cover the
    window+query without geo. Text output prints a Note when geo is
    active.
  - `--skill` prints an embedded Markdown skill for LLM agents and
    skips the backend entirely.

* fix: update skill to follow RFD 0037e

* fix: small fixes reported in PR review

* fix: small suggestion about code comment

* feat: iteration based on notion/customer request

* feat: add sanitization to text rendering

* fix: small fix to the access request review

* fix: typos and PR suggestions

* fix: help message indentation
2026-06-11 18:27:12 +00:00
Ben ArentandPaul Gottschling 0f8210cdb7 Add teleport-session-review skill for Session Recordings + Session Recording Search (#67491)
* First Draft of teleport-session-review skill

Framework based on ACL skill

* Adds Examples and Playbook for how to use Session Search

* Add a preflight check

* Feedback from Docs

* Extra Testing on a Teleport Cloud Tenant

* Docs to Skill

* Remove local dev for now

* update locate commands to include $TSH

* Update docs/pages/identity-security/session-summaries/session-search.mdx

Co-authored-by: Paul Gottschling <[email protected]>

* Remove Filter caveats

These have been fixed

---------

Co-authored-by: Paul Gottschling <[email protected]>
2026-06-09 19:55:56 +00:00
Roman Tkachenko 17446b130e Add teleport-acl-review skill (#65361) 2026-04-10 23:14:20 +00:00