mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-12 02:15:01 +00:00
a2e3c53e42
* Add LinuxDesktop protos and generated code (#62971) * Add LinuxDesktop gRPC and backend (#62974) * Add LinuxDesktop gRPC and backend * Remove CloneResource * Review comments * Fix logins * Update lib/auth/linuxdesktop/linuxdesktopv1/service.go Co-authored-by: Zac Bergquist <[email protected]> * Fix role --------- Co-authored-by: Zac Bergquist <[email protected]> * Add LinuxDesktop resource to unified resources (#63101) * Add LinuxDesktop gRPC and backend * Add LinuxDesktop resource to unified resources * Remove CloneResource * Review comments * Fix logins * Review comment * Add ClonableResourceWithLabels * Fix missing CloneResource * Update lib/auth/linuxdesktop/linuxdesktopv1/service.go Co-authored-by: Zac Bergquist <[email protected]> * Fix role * Update lib/auth/auth_with_roles.go Co-authored-by: Zac Bergquist <[email protected]> * Update lib/web/ui/server.go Co-authored-by: Zac Bergquist <[email protected]> * Fix compilation * e * skip gogoproto * e * fix test * Update api/client/proto/linuxdesktop.go Co-authored-by: Zac Bergquist <[email protected]> --------- Co-authored-by: Zac Bergquist <[email protected]> * Add tctl support for Linux desktop (#63273) * Add LinuxDesktop gRPC and backend * Add tctl support for Linux desktop * Add LinuxDesktop gRPC and backend * Remove CloneResource * Review comments * Fix logins * Update lib/auth/linuxdesktop/linuxdesktopv1/service.go Co-authored-by: Zac Bergquist <[email protected]> * Fix role * Remove duplicate code * Cleanup * Fix test --------- Co-authored-by: Zac Bergquist <[email protected]> * Proto changes for Linux Desktop (#65692) * Add LinuxDesktop gRPC and backend * Add LinuxDesktop resource to unified resources * Remove CloneResource * Review comments * Fix logins * Review comment * Add ClonableResourceWithLabels * Fix missing CloneResource * Update lib/auth/linuxdesktop/linuxdesktopv1/service.go Co-authored-by: Zac Bergquist <[email protected]> * Proto changes for Linux Desktop * Fix role * Update lib/auth/auth_with_roles.go Co-authored-by: Zac Bergquist <[email protected]> * Update lib/web/ui/server.go Co-authored-by: Zac Bergquist <[email protected]> * Fix compilation * Review comments * Review comments * e * skip gogoproto * e * fix test --------- Co-authored-by: Zac Bergquist <[email protected]> * Add locks support for Linux desktop (#65761) * Add LinuxDesktop gRPC and backend * Add LinuxDesktop resource to unified resources * Remove CloneResource * Review comments * Fix logins * Review comment * Add ClonableResourceWithLabels * Fix missing CloneResource * Update lib/auth/linuxdesktop/linuxdesktopv1/service.go Co-authored-by: Zac Bergquist <[email protected]> * Proto changes for Linux Desktop * Add locks support for Linux desktop * Fix role * Update lib/auth/auth_with_roles.go Co-authored-by: Zac Bergquist <[email protected]> * Update lib/web/ui/server.go Co-authored-by: Zac Bergquist <[email protected]> * Fix compilation * Review comments * Review comments * fix e --------- Co-authored-by: Zac Bergquist <[email protected]> * Fix compilation * Operator CRD * Fix test * Add Linux desktop support (#65841) * Implement support for TDPB in Desktop Agent. * Add LinuxDesktop gRPC and backend * Add LinuxDesktop resource to unified resources * Add Linux desktop service * Remove CloneResource * Review comments * Unifide fix * routing * Fix logins * Fix logins * Fix CA cache and write basic loop * Review comment * Fix components and handleConnection * Review comment * Add ClonableResourceWithLabels * Fix missing CloneResource * Add Xvfb handlers * Add Xephyr * Add Xvfb controller * Add QOI encoder * encoder + xsession * reexec * ChildLogConfig * session * add forceloginshell * update frontend + fix session * Review comments * Fix code, update docs * Fix TARGETS format, reuse waiting * Remove direct mode * Update lib/auth/linuxdesktop/linuxdesktopv1/service.go Co-authored-by: Zac Bergquist <[email protected]> * Add MFA and cert usage support * Add RemoteAddr * Revert Uacc setup * Add session selector * Refactor code * Add session recording, tracking and events * Add session recording, tracking and events * Refactor command reexecution * Review comments * Use reexec.ConfigureCommand * Proto changes for Linux Desktop * Proto changes for Linux Desktop * Add locks support for Linux desktop * Add guard around m.ScreenSpec * Cleanup * Add activity monitor * Cleanup * Fix compilation * Cleanup unified view * Refactor linux session * Add logging * Add logging * go mod tidy * Adjust logging * go mod tidy * Grab stderr from reexec * Fix UACC * pass remote addr to uacc * TMP: debug images * Fix panic * TMP: debug images * limit change size * Monitor resolution and restore it * TMP: debug images * TMP: debug images * TMP: debug images * Modify screen resize * TMP: debug images * TMP: debug images * Add XDG env variable * Use dbus-run-session * pam * variables fix * variables fix * revert uacc * cleanup * EncodeQOIZ noop * EncodeQOIZ noop * Fix auditing * Cleanup * Fix type check * Fix formatting * Fix licenses * Fix lint * go mod tidy * Fix audit reference * Fix log * Fix tests * Fix tests * Remove testing from xgb * go mod tidy * Fix tests * xgb 1.3.1 * Handle multiple SessionSelection messages * Add filters for sessions * fix events * Fix compilation + events * Fix test * Fix test * Fix UI * cleanup * review comments * Rework poll eq * Fix bounds clipping * fix imports * lint * lint * err * Fix locking in resize * Fix ReadChildError * remove dependabot exclusion * Fix session end * Cleanup metedata * Fix session events * Ignore multiple ClientHello * Use slices.IndexFunc in setScreenSize * Cleanup unused code * Update lib/service/linux_desktop.go Co-authored-by: Zac Bergquist <[email protected]> * Use slices.Clone * Update lib/srv/desktop/x11/xsession.go Co-authored-by: Zac Bergquist <[email protected]> * Fix import * Use filepath.Glob * Simplify testdata path calculation * Cleanup comment * Cleanup endpoints * Update lib/web/apiserver.go Co-authored-by: Zac Bergquist <[email protected]> * Update lib/web/desktop.go Co-authored-by: Zac Bergquist <[email protected]> * Cleanup createDesktopConnection signature * Cleanup createDesktopConnection signature * Use server capabilities * Remove dep override * Add bounds check * Cleanup * Add EndTime to reconstructed event * use cleanupCtx * cleanup * Add configuration test * Add horizontal scroll * Review comments * Fix scrolling * Fix scrolling * Sort available sessions * Fix build * Add bounds check * Fix tests * Move expiry * lint * Add back metadata nil check * lint * Add usage reporting * Fix error handling * Fix resizing, add lock prevention * Move backend creation after authorization * Fix possible panic in handleSessionSelection * Check if clipboard is allowed * Cleanup errors during normal session ending * use errgroup for all backround tasks * Review comments * fix heartbeat * add guard for root * fix tests * add negative check in changes * cleanup * cleanup * add guard * Review comments * Review comments * Review comments * Review comments * Review comments * Read only access for RoleLinuxDesktop * use dbus-launch * Add Linux Desktops to inventory UI * Use X11 launcher script to start sessions Use a launch script instead of executing the Exec= line from the Xsession file directly. This handles the "default" case on Debian systems where the Xsession file reads `Exec=default`. The launcher can be explicitly configured at the agent level or left blank, in which case we probe a set of well-known launchers. * Compositing support * Fix dbus launcher Support both `dbus-run-session` and the older `dbus-launch`. * Fix error messages when Xvfb is not installed * Add non-root warning * Use forceFullDamage for resize * Fix Open API usage * invalid user test fix * remove commented code * Complete TLS handshake * Improve error message * Logged wrapped command * Add dbus-daemon as dependency for dbus-launch * Update dbus warning and add llvm check to macos build * Add LinuxDesktop to role list in new token dialog * Fix teleport start role validation * Run messageLoop in separate goroutine * Add LinuxDesktop labels to Admin role * Add handling for extended keys and ID reuse * Cleanup shut down logs * Xsession cleanup * Rework llvm requirement in Makefile --------- Co-authored-by: Ryan Hammonds <[email protected]> Co-authored-by: Zac Bergquist <[email protected]> * Add support for `internal.linux_desktop_logins` trait (#67777) * Add support for internal.linux_desktop_logins trait * Fix xsession test * Check Linux Desktop Kind is valid (#68675) * Fix compilation * Validate Kind at service level (#68710) * tctl fix * Fix reexecution * Fix UI and service * Fix Windows webassets build * Add desktop name to active session * Fix tctl get/edit linux_desktop * imports * fix logging * fix logging * License * lint * Clean logs * Add xauth entry before starting Xvfb * Fix release build * Fix release build * Fix labels handling * lint * tsh recordings export: support Linux desktop recordings * Fix ListLinuxDesktops --------- Co-authored-by: Zac Bergquist <[email protected]> Co-authored-by: Ryan Hammonds <[email protected]> Co-authored-by: Dan Share <[email protected]>
50 lines
2.8 KiB
Plaintext
50 lines
2.8 KiB
Plaintext
---
|
|
title: TeleportLockV2
|
|
description: Provides a comprehensive list of fields in the TeleportLockV2 resource available through the Teleport Kubernetes operator
|
|
---
|
|
|
|
{/*Auto-generated file. Do not edit.*/}
|
|
{/*To regenerate, navigate to integrations/operator and run "make crd-docs".*/}
|
|
|
|
This guide is a comprehensive reference to the fields in the `TeleportLockV2`
|
|
resource, which you can apply after installing the Teleport Kubernetes operator.
|
|
|
|
|
|
## resources.teleport.dev/v1
|
|
|
|
**apiVersion:** resources.teleport.dev/v1
|
|
|
|
|Field|Type|Description|
|
|
|---|---|---|
|
|
|apiVersion|string|APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources|
|
|
|kind|string|Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds|
|
|
|metadata|object||
|
|
|spec|[object](#spec)|Lock resource definition v2 from Teleport|
|
|
|
|
### spec
|
|
|
|
|Field|Type|Description|
|
|
|---|---|---|
|
|
|created_at|string|CreatedAt is the date time that the lock was created.|
|
|
|created_by|string|CreatedBy is the username of the author of the lock.|
|
|
|expires|string|Expires if set specifies when the lock ceases to be in force.|
|
|
|message|string|Message is the message displayed to locked-out users.|
|
|
|target|[object](#spectarget)|Target describes the set of interactions that the lock applies to.|
|
|
|
|
### spec.target
|
|
|
|
|Field|Type|Description|
|
|
|---|---|---|
|
|
|access_request|string|AccessRequest specifies the UUID of an Access Request.|
|
|
|bot_instance_id|string|BotInstanceID is the bot instance ID if this is a bot identity and is ignored otherwise.|
|
|
|device|string|Device is the device ID of a trusted device. Requires Teleport Enterprise.|
|
|
|join_token|string|JoinToken is the name of the join token used when this identity originally joined. This is only valid for bot identities, and cannot be used to target `token`-joined bots.|
|
|
|linux_desktop|string|LinuxDesktop specifies the name of a Linux desktop.|
|
|
|login|string|Login specifies the name of a local UNIX user.|
|
|
|mfa_device|string|MFADevice specifies the UUID of a user MFA device.|
|
|
|role|string|Role specifies the name of an RBAC role known to the root cluster. In remote clusters, this constraint is evaluated before translating to local roles.|
|
|
|server_id|string|ServerID is the host id of the Teleport instance.|
|
|
|user|string|User specifies the name of a Teleport user.|
|
|
|windows_desktop|string|WindowsDesktop specifies the name of a Windows desktop.|
|
|
|