docs: Reorganize and revise moderated sessions#32420
docs: Reorganize and revise moderated sessions#32420lsgunn-teleport merged 17 commits intomasterfrom
Conversation
|
🤖 Vercel preview here: https://docs-chce74fcq-goteleport.vercel.app/docs/ver/14.x |
|
🤖 Vercel preview here: https://docs-oxsbp9sli-goteleport.vercel.app/docs/ver/14.x |
|
🤖 Vercel preview here: https://docs-cnzj7zcnw-goteleport.vercel.app/docs/ver/14.x |
|
@lsgunn-teleport To help with reviews, would you mind summarizing why this PR makes these changes, including any GitHub issues it addresses? |
| You should note that users who are assigned a role with a `join_sessions` allow policy are | ||
| implicitly allowed to list sessions. In most cases, `deny` statements take precedent. | ||
| However, if the `join_sessions` policy is set in a role, the `join_sessions` policy | ||
| overrides any explicit deny setting for listing sessions. |
There was a problem hiding this comment.
As per discussion on your other PR, we need to clarify this behavior before we update the docs.
| ### Require policy count | ||
| If you join a session with `tsh join` or `tsh kube join`, you can specify a | ||
| participant mode with the `--mode <mode>` command-line option, where `<mode>` is `peer`, | ||
| `moderator`, or `observer`. The default participant mode is `observer`. |
There was a problem hiding this comment.
Do note that defaulting to observer is a relatively recent change, so be careful when backporting this. (Off the top of my head, I think it only applies to v13 and up)
|
🤖 Vercel preview here: https://docs-14wfs5e3k-goteleport.vercel.app/docs/ver/14.x |
|
🤖 Vercel preview here: https://docs-kcssk7z8h-goteleport.vercel.app/docs/ver/14.x |
|
🤖 Vercel preview here: https://docs-elhg795l4-goteleport.vercel.app/docs/ver/preview |
|
@xinding33 Can you take a look at this PR? It's been hanging around a while waiting for #32357. |
|
🤖 Vercel preview here: https://docs-5bhwa5oao-goteleport.vercel.app/docs/ver/preview |
|
@lsgunn-teleport See the table below for backport results.
|
|
Hi @lsgunn-teleport, just checking whether we have a plan to backport this one! |
Related to the change in #32357.
Reorganized to more clearly delineate configuring "require" policies and fields and configuring "allow" policies and fields.
Removed some redundant information.
Moved descriptions of fields to where they seemed most relevant.
Removed backward compatibility chunk for v4 roles (not planning to backport this beyond v14, per se).
Updated the links to sections where headings changed.
Updated voice, tense, and PoV.