Comments (5)
Thank you @hugoShaka, I confirm this fixes our issue with the upgrade.
You help is very much appreciated 👍 !
from teleport.
[omitted our config from
auth.teleportConfig
]
To validate and reproduce the issue we need your values.yaml with the potential secrets redacted, and the generated auth configmap which contans invalid YAML.
from teleport.
@hugoShaka thank you for the response. The teleport-cluster-auth-test
configmap was posted in the original issue.
Here is our values.yaml for our teleport-cluster
helm release:
teleport-cluster:
enterprise: true
proxyProtocol: "off"
auth:
teleportConfig:
auth_service:
client_idle_timeout: 4h
web_idle_timeout: 4h
authentication:
type: oidc
secondFactor: "on"
proxyListenerMode: multiplex
exposeDiagPort: false
sessionRecording: "'off'"
operator:
enabled: false
chartMode: gcp
gcp:
backendTable: teleport-backend
auditLogTable: teleport-auditlog
auditLogMirrorOnStdout: true
sessionRecordingBucket: redacted-session-recordings
credentialSecretName: ""
podMonitor:
enabled: true
highAvailability:
replicaCount: 2
requireAntiAffinity: true
podDisruptionBudget:
enabled: true
minAvailable: 1
certManager:
enabled: true
addCommonName: true
issuerName: letsencrypt-dns01
issuerKind: ClusterIssuer
issuerGroup: cert-manager.io
resources:
requests:
cpu: 500m
memory: 1Gi
limits:
memory: 2Gi
log:
level: INFO
output: stderr
format: json
extraFields: ["timestamp", "level", "component", "caller"]
priorityClassName: high-priority
exposeDiagPort: true
authentication:
localAuth: true
clusterName: teleport.example.com
gcp:
projectId: example
sessionRecordingBucket: example-session-recordings
global:
license: redacted_teleport_license
from teleport.
sessionRecording: "'off'"
This is the broken bit, you're relying on the previous bug and are working around by encapsulating a string in a string. Since f431c3b and as indicated in the release notes, the typing bug is solved and you no longer have to hack in the chart for the field to stay string type.
The correct value to disable session recording is
sessionRecording: 'off'
from teleport.
just wanted to say, thankyou for this feedback. resolved upgrading from 15.0.0 -> 16.0.1
from teleport.
Related Issues (20)
- Integration Enrollment Rules page for EC2, RDS and EKS HOT 1
- Broken data source in Terraform provider
- Machine ID: Allow `ssh_config` to be generated to match on any host
- [invalid payload] PDU error HOT 3
- Using a Web Application on a fortigate via jump issues a CORS error and does not work
- MOTD display HOT 3
- [v.16.x] /docs/pages/enroll-resources/database-access/enroll-aws-databases/rds.mdx
- `TestDatabases/redshift_cluster/auto_user_drop` flakiness HOT 1
- Support Wildcard or Regex for SSH Login Principals
- Prevent Teleport event handler crash when ingesting audit Log larger than 1 MB
- `Feature Hiding` does not render Access Request topbar tab despite having access
- `tsh proxy ssh` should not open more than one SSO browser tab
- docs: per-resource RBAC content for Docs coverage HOT 1
- AWS console discovery resource conflicts with Okta Integration
- SLOW TRANSACTION in RegisterControlStream when enrolling new device HOT 2
- Yubikey race condition using tsh HOT 2
- RDP client exited with an error: [invalid payload] PDU error
- Firestore issue with Teleport 16.2.1
- "tctl tokens ls" could use a --labels flag
- Document how to validate usage reporting data
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from teleport.