Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[branch/v6] Backport "RFD 19 implementation (#6731)" #6908

Closed
wants to merge 219 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
219 commits
Select commit Hold shift + click to select a range
ab89c54
Update CHANGELOG.md for 6.0.0-rc.1 (#5689)
webvictim Feb 24, 2021
5470bb9
Release 6.0.0-rc.1
webvictim Feb 24, 2021
c5698c4
Update docs file structure for v6 (#5716)
iAdramelk Feb 25, 2021
0e4dbd7
Fix paths to included files (#5724)
iAdramelk Feb 25, 2021
de790c5
Downgrades admin OSS role (#5710)
klizhentas Feb 25, 2021
b07c3db
utmp fix for symlinked path
xacrimon Feb 25, 2021
508d49f
[auto] Update webassets in branch/v6 (#5739)
kimlisa Feb 25, 2021
df0468a
Update old proxy version detection algorithm (#5709)
r0mant Feb 25, 2021
bcebebe
Sasha/newlines (#5738) (#5740)
klizhentas Feb 25, 2021
bc8fb9f
Adds public_addr when using ACME (#5734) (#5743)
klizhentas Feb 26, 2021
3f53461
[tctl] Don't explicitly set value for config path and preserve backwa…
webvictim Feb 26, 2021
83001a4
Correct label example and provide sample
stevenGravy Feb 26, 2021
e63fc57
fix last output timestamps on some systems
xacrimon Feb 26, 2021
be8739a
docs: clarify why etcd doesn't store audit events
Feb 19, 2021
3ed729e
Database access docs overhaul (#5643)
r0mant Feb 27, 2021
fb74a64
release updates (#5782)
klizhentas Feb 28, 2021
2f77bc2
Fix existence leak of label-restricted resources
andrejtokarcik Jan 27, 2021
9b4c094
Require initialized TLS config in utils.TLSDial
andrejtokarcik Mar 1, 2021
91bedb0
Fix CLI content spoofing through access request reason
andrejtokarcik Mar 1, 2021
b64a09a
Fix AAP headers injection
andrejtokarcik Mar 1, 2021
4535f06
Add obfuscation to diagnostic metrics
andrejtokarcik Mar 1, 2021
54bcfe7
Check CA expiration status when joining a cluster
andrejtokarcik Mar 1, 2021
51a6ae8
Introduce utils.ReadAtMost to prevent resource exhaustion
andrejtokarcik Mar 1, 2021
03bf924
Assemble safe FQDN values for AAP redirects
andrejtokarcik Mar 1, 2021
f029d08
Set stricter HTTP Content-Security-Policy directives
andrejtokarcik Mar 1, 2021
e761851
Set cookies with '__Host-' prefix
andrejtokarcik Mar 1, 2021
d69e894
Prevent AAP login CSRF with OAuth-style state tokens
andrejtokarcik Mar 1, 2021
0e94f8a
[auto] Update webassets in andrej/v6/security-fixes
andrejtokarcik Mar 1, 2021
4de643c
Propagate the mapped local user identity via auth.Context (#5789)
andrejtokarcik Mar 1, 2021
9813af2
fix #5783 utmp regression on macos
xacrimon Feb 28, 2021
3a311da
Fixed build failure for non-Linux platforms. (#5801)
russjones Mar 1, 2021
cb37f3a
Release 6.0.0-rc.2 (#5802)
webvictim Mar 1, 2021
c76791d
Updated faq.mdx.
russjones Feb 27, 2021
8b0ee96
Update Admin Guide user section to mention roles (#5810)
tcsc Mar 2, 2021
119fea9
Fixed `tctl get`. Had `delete` instead of `get` (#5814)
Mar 2, 2021
70d0ec7
Backport of https://github.com/gravitational/teleport/pull/5729/ to v6.
a-palchikov Feb 26, 2021
d392342
mfa: delete user MFA devices on account reset (#5823)
Mar 3, 2021
231736c
Fix db server test data race (#5829)
r0mant Mar 3, 2021
a7fc5f0
Updated CHANGELOG.md.
russjones Feb 25, 2021
56547d4
Release 6.0.
russjones Mar 3, 2021
5ba56bb
Adds md5 auth caveat to Self-Hosted Postgres Guide (#5834)
tcsc Mar 4, 2021
b24ff11
Fix a broken link and add permission grants to MySQL guides (#5835)
r0mant Mar 4, 2021
f134ab8
Fixes ACME default configuration (#5839)
klizhentas Mar 5, 2021
ed1ec0b
Fix ADFS provider and add debug message.
Joerger Mar 5, 2021
e16d5f5
Lint markdown files syntax for v6.0 with the new linterLint docs (#5855)
iAdramelk Mar 8, 2021
6d5be71
Update getting started to 6.0.1 (#5890)
klizhentas Mar 8, 2021
13ad701
Fix --insecure-no-tls flag (#5922)
r0mant Mar 10, 2021
0315d05
Update Kubernetes Access docs (#5865)
klizhentas Mar 10, 2021
efd34b3
Update release table to 6.0.0 (#5838)
r0mant Mar 10, 2021
e70ca67
Move redirects to docs config (#5945)
iAdramelk Mar 11, 2021
fe6f424
Add missing redirects (#5948)
iAdramelk Mar 11, 2021
43fd4fd
Fix path to video in 6.0 docs (#5954)
iAdramelk Mar 11, 2021
7bd13f1
add support for encrypted saml assertions with a seperate x509 pair
xacrimon Mar 11, 2021
0a9a727
Creates preset roles (#5943)
klizhentas Mar 12, 2021
6b8c642
getting started configure doc fix (#5963)
stevenGravy Mar 12, 2021
31f783c
backport branch/v6: Add google_service_account inline field option fo…
stevenGravy Mar 12, 2021
409b603
misspellings in docs (#5980)
stevenGravy Mar 12, 2021
76c3c08
Fix title for app access (#5974)
stevenGravy Mar 13, 2021
5398ba8
Add "billing_information" RBAC resource (#5676) (#5998)
alex-kovoy Mar 15, 2021
4bb07c6
Moves loadCredsFromProfile to OSS (#5891) (#5997)
alex-kovoy Mar 15, 2021
39820e5
Add Billing Access to default admin role (#5925) (#6002)
alex-kovoy Mar 16, 2021
fa63bb0
[auto] Update webassets in branch/v6 (#6006)
alex-kovoy Mar 16, 2021
97087d3
cherry pick rfd 18
xacrimon Mar 17, 2021
d7a0424
adjust to v6
xacrimon Mar 17, 2021
d4b59fc
New getting started video (#6064)
benarent Mar 18, 2021
05f6294
Adds controls for impersonation requests. (#6009)
klizhentas Mar 19, 2021
7061b52
Fix app access websockets support (#6028)
r0mant Mar 19, 2021
749ff89
Fix error in docs (#6070)
iAdramelk Mar 19, 2021
b88526a
Fix an issue with impersonating SSO users (#6077)
r0mant Mar 20, 2021
3e86d6e
App access cli flow (#6089)
r0mant Mar 22, 2021
c1d537e
Add Postgres Cloud SQL support (#6090)
r0mant Mar 22, 2021
17080fb
Correct Port and Protocol (#6102)
benarent Mar 23, 2021
41130f7
Properly marks k8s stream complete on error exit (#6068) (#6104)
tcsc Mar 23, 2021
4651a95
Backport Getting started with Kubernetes (#6044)
benarent Mar 24, 2021
fb1d371
(6.1) Update application access docs (#6055)
r0mant Mar 24, 2021
1fb4989
Backport `tsh play` with file arg (#6162)
quinqu Mar 25, 2021
f2ca518
[v6] Backport: dronegen: drone config generator (#6142)
webvictim Mar 26, 2021
9a1d946
fix race in filelog
fspmarshall Mar 26, 2021
6a7e1a5
Fixed data race in Audit Log.
russjones Mar 26, 2021
7e6cbea
GitLab Instructions for SSO (#6190)
stevenGravy Mar 28, 2021
3677888
Follow along guide for Applications and Kubernetes (#6184)
benarent Mar 28, 2021
8f5157e
Backport - gRPC conversions (#6175)
Joerger Mar 29, 2021
efc6d20
mfa: audit events for adding/removing devices (#5665)
Mar 4, 2021
9e405fd
mfa: add WithMFA to session-related audit events (#5833)
Mar 4, 2021
0758c38
mfa: reuse the same challenge for all U2F devices (#5837)
Mar 10, 2021
698c3ae
mfa: per-session MFA certs for SSH and Kubernetes (#5564)
Mar 10, 2021
ed79d67
mfa: unhide 'tsh mfa' commands and add docs (#5932)
Mar 11, 2021
8101de9
mfa: add cluster-level require_session_mfa option (#5939)
Mar 17, 2021
cbc08c2
mfa: handle older servers during IsMFARequired RPC from tsh (#6039)
Mar 18, 2021
d2817ed
u2f: add optional attestation cert validation (#6057)
Mar 23, 2021
31fc369
mfa: don't check MFA for teleport services in UpsertKubeService (#6129)
Mar 24, 2021
b64dd6c
mfa: per-session U2F challenge for web SSH (#6098)
Mar 25, 2021
3f91c10
Update webasserts submodule
Mar 25, 2021
5a5237f
custom approval conditions
fspmarshall Mar 18, 2021
c4b329e
ignore dangling tunnel conns
fspmarshall Mar 18, 2021
5d40af0
add special resource type for access plugin data
fspmarshall Mar 29, 2021
8211189
[6.1] Add empty token check for 2fa optional type for web logins (#6202)
kimlisa Mar 29, 2021
8b090ea
[6.1] Define cloud billing event types and codes (#6037) (#6203)
kimlisa Mar 29, 2021
18f5f1f
[6.1] Make SSO login failure event emit more specific errors (#6108) …
kimlisa Mar 29, 2021
40b4485
Set suggested reviewers field to the UI user context struct (#5467) (…
kimlisa Mar 30, 2021
c635a92
Open Sources Access Controls Docs (#6188)
klizhentas Mar 30, 2021
d18ecfc
fix nil slice bug
xacrimon Mar 26, 2021
f8562af
add PAM environment with interpolation support
xacrimon Mar 30, 2021
a0128e1
Fix href links (#6230)
klizhentas Mar 30, 2021
26db273
Backport - API Client Credential/Connection changes (#6131)
Joerger Mar 30, 2021
7fc1b14
[auto] Update webassets in branch/v6 (#6235)
kimlisa Mar 30, 2021
3dd1afc
Remove ARM64 FIPS builds (#6236) (#6237)
webvictim Mar 30, 2021
6cbe57a
mfa: fix gRPC unimplemented check in cert reissue
Mar 29, 2021
c4024dc
Cache per-cluster SSH certificates under ~/.tsh
andrejtokarcik Mar 29, 2021
b734c15
tsh Profile SSH certs fix (#6214)
Joerger Mar 30, 2021
bae911d
ssh: fix relogin with jumphosts (#6213)
Mar 30, 2021
5d8e132
Implement alternative reverse tunnel address support and add a test c…
a-palchikov Mar 23, 2021
b00da76
Update Architecture Overview With Link To User Roles (#6223)
irishgordo Mar 31, 2021
c7e8074
Enable DynamoDB autoscaling on global secondary indices (#6112) (#6205)
pierrebeaucamp Mar 31, 2021
8e85788
Add Features and PublicAddrs to PingResponse (#5742) (#6215)
Joerger Mar 31, 2021
9646c3c
Refactor ssh.ClientConfig used by tctl and API clients to use the fir…
Joerger Mar 30, 2021
693576f
Release 6.1.0-beta.1.
russjones Mar 31, 2021
982bdc1
kube: add kubernetes_labels to role JSON schema (#6206)
Mar 31, 2021
2d0ceac
Parse all CAs in CertPoolFromCertAuthorities (#6253)
Mar 31, 2021
6e31a48
Adds encrypted token docs (#6266)
klizhentas Apr 1, 2021
f8f357e
[v6] Don't use OpaqueAccessDenied with CheckAccessToRule (#6247)
andrejtokarcik Apr 1, 2021
040b929
Delete obsolete stored keys in LocalKeyAgent.AddKey (#6251) (#6280)
Apr 2, 2021
7d92243
Close leaky direct client. (#6297) (#6298)
Joerger Apr 2, 2021
0bf8ed1
Fix regression bug for DynamoDB scaling policy names (#6259)
pierrebeaucamp Apr 1, 2021
803e85b
Removed * from roles and updated copyright (#6260)
stevenGravy Apr 3, 2021
c7cb8af
tsh: handle missing cluster name in profile (#6257) (#6295)
Apr 3, 2021
bd910cb
[auto] Update webassets in branch/v6 (#6323)
kimlisa Apr 6, 2021
72adad1
add fix
xacrimon Apr 1, 2021
21a81d3
Augment checking stream/streamer and AuditWriter with cluster name de…
a-palchikov Mar 8, 2021
37c1fa0
Avoid data race in audit writer test by syncing close with shutdown o…
a-palchikov Mar 10, 2021
6648095
Address review feedback
a-palchikov Mar 11, 2021
02aca14
v6.1 syntax update (#6315)
iAdramelk Apr 6, 2021
c080108
Propogate user not found error from authenticater. (#6321)
Joerger Apr 7, 2021
b1f8137
web: fix AccessRequest loading on user cert reissue (#6264)
Apr 6, 2021
fdfc92b
Always set an AuditLog (#6338)
xacrimon Apr 7, 2021
98b87d0
Fix tctl profile loading logic by adding WithSSHCerts certOption. (#6…
Joerger Apr 7, 2021
2d41d36
Add DialOpts and CallOpts to API client. (#6301) (#6312)
Joerger Apr 7, 2021
80033e8
improve cert rotation periodics
fspmarshall Mar 31, 2021
1115eb1
Release 6.1.0-rc.1.
russjones Apr 8, 2021
b58aa4a
client: load all SSH certs when connecting to proxy
Apr 8, 2021
ebc43f4
Documents impersonation (#6293)
klizhentas Apr 8, 2021
05641e5
docs: document per-session MFA feature (#6285)
Apr 8, 2021
e96a038
Update some variables and links (#6366)
klizhentas Apr 8, 2021
7652434
Documents dual authz with Mattermost (#6398)
klizhentas Apr 10, 2021
e096f28
Rename images to match logical pixels (#6380)
iAdramelk Apr 10, 2021
7551492
Add OpenSSH Video (#6370)
benarent Apr 10, 2021
601b0ed
drone: allow ARM builds in reprepro config (#6392)
Apr 12, 2021
c56dd98
[auto] Update webassets in branch/v6 (#6437)
kimlisa Apr 13, 2021
e3927a5
Move introductions to the appropriate sections (#6455)
klizhentas Apr 15, 2021
66171e5
Set correct auditlog instead of discard (#6432)
xacrimon Apr 15, 2021
099fa67
add timestamp option to logs
quinqu Apr 12, 2021
4b28749
remove message from config options
quinqu Apr 12, 2021
2f6188a
[web] Check for cloud feature before setting billing access (#6475)
kimlisa Apr 16, 2021
a4839c3
Capture postgres extended protocol messages in audit log (#6303) (#6453)
r0mant Apr 16, 2021
1c69091
add needed $ for variable example (#6485)
stevenGravy Apr 16, 2021
e5817af
tctl: Return error if profile key is not for the root cluster (#6450)
andrejtokarcik Apr 15, 2021
da69b4e
Revert "[web] Check for cloud feature before setting billing access (…
kimlisa Apr 19, 2021
e8f58f6
Refactor process.newClient for better error handling and logging. (#6…
Joerger Apr 21, 2021
d8ee055
Teleport Slackbot for latest slackbot (#6522) (#6524)
klizhentas Apr 21, 2021
fbfe415
correct dir reference for slack in plugin build instrs (#6528)
stevenGravy Apr 21, 2021
1d363e6
[6.2] Backport - API docs refactor (#6310) (#6388) (#6521)
Joerger Apr 21, 2021
149cd32
Convert types.AuthPreference into a proto definition (#6513)
andrejtokarcik Apr 22, 2021
c2cda4b
[v6.1] Editorial Pass/Review - Home (#6544)
inertial-frame Apr 22, 2021
ea2b6f5
Adds releases preview (#6533)
klizhentas Apr 22, 2021
214545f
docs: fix typos in sample roles in MFA guide
Apr 21, 2021
ddcf533
Adding postgres_public_addr and mysql_public_addr (#6426) (#6546)
r0mant Apr 23, 2021
ad506b3
[v6.2] edit pass - app + kub access (#6569)
inertial-frame Apr 23, 2021
89de4e6
docs: update changes from 6.1 (#6580)
inertial-frame Apr 26, 2021
6198466
[v6.2] Merge style guide into docs (#6576)
inertial-frame Apr 26, 2021
0468cf0
[v6.2] Fix descriptions for labels and diag-addr parameters for Telep…
stevenGravy Apr 27, 2021
fdfa2bd
Adding redshift support (#6596)
r0mant Apr 27, 2021
5e66fe6
Fix test requiring gcp credentials (#6609)
r0mant Apr 27, 2021
0247eff
Switch to tiles (#6611)
klizhentas Apr 27, 2021
d79eb98
mfa: prevent the user from deleting the last MFA device (#6585)
Apr 27, 2021
5267e63
mfa: better OTP registration flow on CLI (#6567) (#6621)
Apr 28, 2021
41660eb
[v.6.2] reword docs [fwdport] (#6628)
inertial-frame Apr 28, 2021
c907d54
Provide a dedicated API endpoint for app FQDN resolving (#6641)
andrejtokarcik Apr 28, 2021
8357e75
Add `tctl create cap` for dynamically configuring cluster auth prefer…
andrejtokarcik Apr 29, 2021
73f40b3
[web] Add ability to switchback to default roles/expiry (#6639)
kimlisa Apr 29, 2021
8aa95a7
Handle `tctl get`'s input ref more strictly (#6640)
andrejtokarcik Apr 29, 2021
21c4549
docs: bump 6.2 release date to May 21st (#6652) (#6662)
Apr 29, 2021
b6afcf7
[auto] Update webassets in branch/v6 (#6657)
kimlisa Apr 29, 2021
8be90d4
Proxy line support for mysql (#6674)
r0mant Apr 30, 2021
0cb3394
[v6.2] access requests from workflows [fwdport] (#6623)
inertial-frame Apr 30, 2021
fe3e467
docs: correct tables (#6617)
inertial-frame Apr 30, 2021
deda125
Propagate external traits to leaf clusters (#6649)
r0mant Apr 30, 2021
44d7ab5
kube: handle large number of trusted clusters in mTLS handshake (#651…
May 3, 2021
f90cfc5
mfa: cancel TOTP prompt if U2F was used (#6542) (#6658)
May 3, 2021
1e31bf8
k8s: add merge-kubeconfigs.sh script (#5677) (#6654)
May 3, 2021
b110759
Remove proto-based ServerV2 implementation of DeepCopy in favor of the
a-palchikov Feb 25, 2021
50f2584
Updated TLS handshake timeout.
russjones May 1, 2021
c8a6973
Fix non-interactive ssh output in teleport log (#6733)
nklaassen May 5, 2021
08b8dba
add various prometheus metrics
quinqu May 3, 2021
814cf03
[auto] Update webassets in branch/v6 (#6740)
andrejtokarcik May 5, 2021
db310bb
mfa: only reject last device deletion of correct type (#6656) (#6715)
May 5, 2021
594f943
ami: Update InfluxDB version to 1.8.5 (#6741) (#6747)
webvictim May 5, 2021
55a01fe
[v6] gRPC conversions - Nodes (#6535) (#6655)
Joerger May 6, 2021
d4b6c55
Update region list for AWS AMI publishing (#6282) (#6744)
webvictim May 6, 2021
4d06370
rebase onto v6 (#6762)
xacrimon May 6, 2021
d819160
Add app access headers rewrite (#6763)
r0mant May 6, 2021
f0a5923
Handle missing IdP trait in PAM interpolation. (#6558) (#6768)
xacrimon May 6, 2021
8e677f2
Create db/kube handler and check cloud feature for web billing access…
kimlisa May 6, 2021
60dcb42
Delete user k8s, etc. certificates on re-issue (#6492) (#6757)
tcsc May 7, 2021
7ab146f
Implements RFD-0022 - OpenSSH-compatible Agent Forwarding (#6525) (#6…
tcsc May 7, 2021
7847820
[Backport v6] CLI opt-in adoption survey (#6645)
benarent May 10, 2021
bb61fcc
Release v6.2.0-alpha.1
May 11, 2021
b8e0ab5
Align atomics to prevent segmentation faults on ARMv7 (#6711) (#6803)
xacrimon May 12, 2021
a2d20c0
mfa: fix startup crash when SSO users with MFA expire (#6779) (#6833)
May 12, 2021
5d2ca11
[Backport 6.2] google workspace sso doc changes (#6730)
stevenGravy May 12, 2021
a05f30a
docs: add version to docs (#6810)
inertial-frame May 13, 2021
ab7cca5
[v6.2] Docs: add acme to yaml (#6808)
inertial-frame May 13, 2021
4d4eeaf
docs: update section (#6699)
inertial-frame May 13, 2021
92b460e
client: set TLS certificate usage for k8s/app/db certs (#6824)
May 13, 2021
9fdd9ca
Revert TLS cert usage for database certs
May 13, 2021
62c4c46
Update version to v6.2.0-beta.1
awly May 14, 2021
db8dfe5
Adds concurrent default-port selection to `tsh`
tcsc Apr 7, 2021
e870846
docs: backport and make consistent (#6856)
inertial-frame May 17, 2021
ee9b80f
backport RFD 19 impl
xacrimon May 18, 2021
08c6760
update proto
xacrimon May 18, 2021
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
5,361 changes: 2,635 additions & 2,726 deletions .drone.yml

Large diffs are not rendered by default.

247 changes: 220 additions & 27 deletions CHANGELOG.md

Large diffs are not rendered by default.

60 changes: 32 additions & 28 deletions Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
# Stable releases: "1.0.0"
# Pre-releases: "1.0.0-alpha.1", "1.0.0-beta.2", "1.0.0-rc.3"
# Master/dev branch: "1.0.0-dev"
VERSION=6.0.0-alpha.2
VERSION=6.2.0-beta.1

DOCKER_IMAGE ?= quay.io/gravitational/teleport
DOCKER_IMAGE_CI ?= quay.io/gravitational/teleport-ci
Expand Down Expand Up @@ -178,6 +178,23 @@ else
$(MAKE) --no-print-directory release-unix
endif

# These are aliases used to make build commands uniform.
.PHONY: release-amd64
release-amd64:
$(MAKE) release ARCH=amd64

.PHONY: release-386
release-386:
$(MAKE) release ARCH=386

.PHONY: release-arm
release-arm:
$(MAKE) release ARCH=arm

.PHONY: release-arm64
release-arm64:
$(MAKE) release ARCH=arm64

#
# make release-unix - Produces a binary release tarball containing teleport,
# tctl, and tsh.
Expand Down Expand Up @@ -216,21 +233,6 @@ release-windows: clean all
rm -rf teleport/
@echo "---> Created $(RELEASE).zip."

#
# Builds docs using containerized mkdocs
#
.PHONY:docs
docs: docs-test
$(MAKE) -C build.assets docs

#
# Runs the documentation site inside a container on localhost with live updates
# Convenient for editing documentation.
#
.PHONY:run-docs
run-docs:
$(MAKE) -C build.assets run-docs

#
# Remove trailing whitespace in all markdown files under docs/.
#
Expand All @@ -246,7 +248,7 @@ docs-fix-whitespace:
# Test docs for trailing whitespace and broken links
#
.PHONY:docs-test
docs-test: docs-test-whitespace docs-test-links
docs-test: docs-test-whitespace

#
# Check for trailing whitespace in all markdown files under docs/
Expand All @@ -259,17 +261,6 @@ docs-test-whitespace:
exit 1; \
fi

#
# Run milv in docs to detect broken internal links.
# milv is installed if missing.
#
.PHONY:docs-test-links
docs-test-links: DOCS_FOLDERS := $(shell find . -name milv.config.yaml -exec dirname {} \;)
docs-test-links:
for docs_dir in $(DOCS_FOLDERS); do \
echo "running milv -ignore-external in $${docs_dir}"; \
cd $${docs_dir} && milv -ignore-external; cd $(PWD); \
done

#
# Runs all tests except integration, called by CI/CD.
Expand Down Expand Up @@ -641,3 +632,16 @@ update-vendor:
# create a symlink to the the original api package
rm -r vendor/github.com/gravitational/teleport/api
ln -s -r $(shell readlink -f api) vendor/github.com/gravitational/teleport

# update-webassets updates the minified code in the webassets repo using the latest webapps
# repo and creates a PR in the teleport repo to update webassets submodule.
.PHONY: update-webassets
update-webassets: WEBAPPS_BRANCH ?= 'master'
update-webassets: TELEPORT_BRANCH ?= 'master'
update-webassets:
build.assets/webapps/update-teleport-webassets.sh -w $(WEBAPPS_BRANCH) -t $(TELEPORT_BRANCH)

# dronegen generates .drone.yml config
.PHONY: dronegen
dronegen:
go run ./dronegen
23 changes: 19 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -99,9 +99,12 @@ will not work.

NOTE: This will build the latest version of Teleport, regardless of whether it is stable. If you want to build the latest stable release, `git checkout` to that tag (e.g. `git checkout v5.0.0`) before running `make full`.

### Rebuilding Web UI
### Web UI

Teleport Web UI is located in the [Gravitational Webapps](https://github.com/gravitational/webapps) repo.

#### Rebuilding Web UI for development

Teleport Web UI is located in the [Gravitational Webapps](https://github.com/gravitational/webapps) monorepo.
You can clone that repository and rebuild teleport UI package with:

```bash
Expand All @@ -110,12 +113,12 @@ $ cd webapps
$ make build-teleport
```

Then you can replace Teleport web UI files with the one found in the generated `/dist` folder.
Then you can replace Teleport Web UI files with the one found in the generated `/dist` folder.

To enable speedy iterations on the Web UI, you can run a
[local web-dev server](https://github.com/gravitational/webapps/tree/master/packages/teleport).

You can also tell teleport to load the web UI assets from the source directory.
You can also tell teleport to load the Web UI assets from the source directory.
To enable this behavior, set the environment variable `DEBUG=1` and rebuild with the default target:

```bash
Expand All @@ -126,6 +129,18 @@ $ DEBUG=1 ./build/teleport start -d
Keep the server running in this mode, and make your UI changes in `/dist` directory.
Refer to [the webapps README](https://github.com/gravitational/webapps/blob/master/README.md) for instructions on how to update the Web UI.

#### Updating Web UI assets

After you commit a change to [the webapps
repo](https://github.com/gravitational/webapps), you need to update the Web UI
assets in the `webassets/` git submodule.

Use `make update-webassets` to update the `webassets` repo and create a PR for
`teleport` to update its git submodule.

You will need to have the `gh` utility installed on your system for the script
to work. You can download it from https://github.com/cli/cli/releases/latest

### Updating Documentation

TL;DR version:
Expand Down
10 changes: 10 additions & 0 deletions api/client/README.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
This package is documented using a combination of [pkg.go.dev](https://pkg.go.dev/github.com/gravitational/teleport/api/client) and Teleport [Docs](https://goteleport.com/docs/).

## Reference

- [Introduction](https:/goteleport.com/docs/reference/api/introduction/)
- [Getting Started](https:/goteleport.com/docs/reference/api/getting-started/)
- [Architecture](https:/goteleport.com/docs/reference/api/architecture/)
- [pkg.go.dev](https://pkg.go.dev/github.com/gravitational/teleport/api/client/)
- [Using the client](https://pkg.go.dev/github.com/gravitational/teleport/api/client#Client/)
- [Working with credentials](https://pkg.go.dev/github.com/gravitational/teleport/api/client#Credentials/)
3 changes: 2 additions & 1 deletion api/client/auditstreamer.go
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,8 @@ import (
// createOrResumeAuditStream creates or resumes audit stream described in the request.
func (c *Client) createOrResumeAuditStream(ctx context.Context, request proto.AuditStreamRequest) (events.Stream, error) {
closeCtx, cancel := context.WithCancel(ctx)
stream, err := c.grpc.CreateAuditStream(closeCtx, grpc.UseCompressor(ggzip.Name))
callOpts := append(c.callOpts, grpc.UseCompressor(ggzip.Name))
stream, err := c.grpc.CreateAuditStream(closeCtx, callOpts...)
if err != nil {
cancel()
return nil, trail.FromGRPC(err)
Expand Down
Loading