* Move `packages/shared` dependencies to correct workspaces
* Move `packages/build` dependencies to correct workspaces
* Remove `e-imports` workspace
* Move `packages/teleterm` dependencies to correct workspaces
`@protobuf-ts/*` is imported in protobuf files, so it has to be available globally.
* Add undeclared dependencies
* Move `packages/teleport` dependencies to correct workspaces
* Move `setupTests` to `packages/build`
* Add a section about where to put deps
* Move `events` back to workspaces
* Rewrite the section about adding deps
* Update `e`
* Use `teleport install autodiscover-node` command for Server Auto Discovery
This PR changes the default agent installation to use oneoff script with
`teleport install autodiscover-node` instead of the current installation
script.
* use installers constant for the script name
This PR adds the ability to watch for events for `*devicepb.Device` objects.
Backend storage representation of `devicepb.Device` is achieved using an internal representation that lives in `e/lib/devicetrust/storage` and whose logic is internal to the package.
To be able to expose the unmarshal logic necessary for events to work, this PR exposes a registration hook that `e/lib/devicetrust/storage` function must call during initialization to register the unmarshal function.
Part of https://github.com/gravitational/access-graph/issues/637
Signed-off-by: Tiago Silva <[email protected]>
This PR adds the `clusterconfigpbv1.AccessGraphSettings` resource that will be used to control the secrets scanning definition of Teleport.
This resource will be a singleton and the only goal is to carry some settings related to access graph because on the cloud, users don't have access to fileconf.
This PR is part of https://github.com/gravitational/access-graph/issues/637.
Signed-off-by: Tiago Silva <[email protected]>
* [sec_scan][5] add secrets backend service
This PR implements the backend service to support storing `authorized_keys` and `private_keys` into Teleport backend.
Part of https://github.com/gravitational/access-graph/issues/637
Signed-off-by: Tiago Silva <[email protected]>
* handle feedback
* handle nits
---------
Signed-off-by: Tiago Silva <[email protected]>
Update `Dockerfile.gha` to copy embeddedtbot from its new location in
`integrations/lib`. This change was made to `Dockerfile` but missed
`Dockerfile.gha`.
A follow-up commit will remove the "old" Dockerfile which should have
been done shortly after Drone was decommissioned.
* Update `e` ref for macOS minos changes in teleport.e
* build: Simplify the vars that target minimum macOS version
Simplify how we tell rust/xcode/go which minimum version of macOS to
target. Xcode defines the environment variable
`MACOSX_DEPLOYMENT_TARGET` that contains the version of macOS to target.
llvm has adopted this too, so cargo/rust supports this, meaning we no
longer need to use `RUSTFLAGS` with a linker flag. This is much simpler
as we need to be careful not to set this flag when targetting wasm for
the UI (ironrdp). When building Go with CGO, it uses the system linker,
which is xcode, so we can rely on the `MACOSX_DEPLOYMENT_TARGET` var
there too, allowing us to get rid of the `CGO_LDFLAGS` var. We do still
need to set a linker flag on `CGO_CFLAGS` though, from testing.
This also ensures that `fdpass-teleport` also meets the macOS minimum
version requirements. It is nice that we no longer need special handling
on each rust target to do this.
* Introduce the `tctl terrafor env` command
* fix tests
* address marco's feedback + use correct b64 lib
* add license
* add created-by label as specified in the RFD
* Update tool/tctl/common/terraform_command.go
Co-authored-by: Roman Tkachenko <[email protected]>
* Apply suggestions from code review
Co-authored-by: Roman Tkachenko <[email protected]>
* Have telpeort create the Terraform default role
* rename use-existing-role -> role, and stop hijacking identity.SSHCACertBytes
* Make the terraform provider role a real preset, rename to 'terraform-provider'
* lint
* Fix tbot's invocation after rebase
---------
Co-authored-by: Roman Tkachenko <[email protected]>
* A new Button component
* Update snapshots
* UI corrections after updating the Button component
* Update snapshots
* buttons.story.tsx: Group related buttons together
Also increase gap to increase visibility of individual groups
* Fix Cancel button in ClusterAdd in teleterm
* Correct display names of auth providers in ClusterLogin story
* Update Retry button in Unified Resources
* Fix the buttons story snapshot
* Add license
---------
Co-authored-by: Rafał Cieślak <[email protected]>
While tsh ssh doesn't explicitly allow specifying predicate expressions
or search keywords via the CLI they can be populated via a proxy template.
However, the node resolution code in tsh only considered labels which
results in confusing behavior, especially given the fact that debug logs
indicate that a proxy template match was found and being used.
* Enhance library dependency management with libelf check
Added logic to check for libelf presence and use pkgconf to dynamically include necessary static libraries when available. If libelf is not found, default to manually specified -lelf and -lz libraries. This ensures more reliable builds across different environments and addresses issues with Ubuntu 24.04.
* Remove duplicated pkgconf library
* support separate SSH and TLS keys in `generateUserCert`
This PR splits the SSH and TLS public keys passed to
`auth.(*Server).generateUserCert`. The attestation statement associated
with the public key is also split.
Now, `sshPublicKey` will be the subject public key of the returned SSH
certificate, and `tlsPublicKey` will be the subject public key of the
returned TLS certificate. If either is not provided, the corresponding
certificate is not generated or returned.
This does not update any code paths to actually use different keys here,
but prepares for that in the future.
* use public key conversion func
* fix public key format in db tests
* Add DiscoveryConfigStatus fields for AWS EC2 Instances
This PR introduces AWS EC2 discovered resources into the
DiscoveryConfigStatus.
This will allow us to list all discovered instances, and for the failed
ones, why we weren't able to enroll them.
* remove console url and rename enroll status
* fix typo
This tells tsh to respect timing data (and the configured playback
speed) while there is active recording data, but to skip over larger
periods of idle time.
This PR is part of the new join tokens feature. This will make the join
tokens UI available on /web/tokens but not enable it in the navigation.
You will have to manually view it. We will add it to the navigation just
before the backport to the release branch. I did it this way so we can
start PRing the larger chunks while we work on the "create token" forms.
So obviously, the "create token" button doesn't exist on here. this is
for viewing/editting for now.
Change the C type casts of `c.handle` from `C.ulong` to `C.uintptr_t`.
This is needed to compile on 32-bit architectures.
We do not currently build in the RDP client for 32-bit architectures but
it will be possible with a crosstool-NG based buildbox and is otherwise
of no detriment.
Co-authored-by: Jakub Nyckowski <[email protected]>
* add new page directing users to official Datadog integration
* remove old guide to sending events to Datadog
* update navigation and redirects for new Datadog page
---------
Signed-off-by: Dave Sudia <[email protected]>
* Add quicker retry to get kube cluster details if the cluster goes offline.
* Add kubedetails close call on error.
Although this error will never actually happen in practice.
We are migrating away from aws sdk v1.
This PR removes the usage of the awsutil package.
Changes include removing a helper method that was not ported to V2.
This method would copy from one struct into another one, using their
field names.
That's useful when we want to mutate a single field (eg update the ECS
image version).
However, that helper method was not ported.
Instead, we are now using json marshal/unmarshal to the same effect.
* Ensure tbot compiles on windows
* Restore unix tbot support
* fixup! Restore unix tbot support
* address feedback
* Fix tbot build on windows, use CGO for this OS
* Move unix-specific syscalls and file descriptors out of os-agnostic files
* fixup! Move unix-specific syscalls and file descriptors out of os-agnostic files
* lint
* Move `cspPlugin` to teleterm
* Keep `reactPlugin` config in `build/vite`
* Keep `tsconfigPathsPlugin` config in `build/vite`
* Add a comment about .mjs
* Lint
* `resolve` -> `path.resolve`
* Convert arrow function to regular function
* Teleport install command for discovery agents (go)
This PR adds a new command that will install teleport on the current
system.
Its goal is to replace the default installer script used in Auto
Discovery scripts.
Its correctness should be compared to the current script. Improvements
will only be considered on a 2nd phase.
* rename ani/asi and re-organize install/configure sections
* create lib/utils/packagemanager package
* rename Autodiscover to AutoDiscover
This PR extends the Access Graph resources to be able include the newly added `teleport.access_graph.v1.PrivateKey`,
`teleport.access_graph.v1.AuthorizedKey` and existing device trust information `teleport.devicetrust.v1.Device`.
Part of https://github.com/gravitational/access-graph/issues/637
Signed-off-by: Tiago Silva <[email protected]>
