Versions in this module Expand all Collapse all v11 v11.3.3 Dec 13, 2022 Changes in this version + const AddKeysToAgentAuto + const AddKeysToAgentNo + const AddKeysToAgentOnly + const AddKeysToAgentYes + const HTTPS + const LoginFailedBadCallbackRedirectURL + const LoginFailedRedirectURL + const LoginFailedUnauthorizedRedirectURL + const LoginSuccessRedirectURL + const WSS + var AllAddKeysOptions = []string + var HasPlatformSupport = &hasPlatformSupport + var PromptMFAStandalone = &promptMFAStandalone + var PromptWebauthn = &promptWebauthn + var WithAllCerts = []CertOption + func GetKubeTLSServerName(k8host string) string + func GetPaginatedSessions(ctx context.Context, fromUTC, toUTC time.Time, pageSize int, ...) ([]apievents.AuditEvent, error) + func GetWebConfig(ctx context.Context, proxyAddr string, insecure bool) (*webclient.WebConfig, error) + func HostCredentials(ctx context.Context, proxyAddr string, insecure bool, ...) (*proto.Certs, error) + func InsecureSkipHostKeyChecking(host string, remote net.Addr, key ssh.PublicKey) error + func IsErrorResolvableWithRelogin(err error) bool + func NewDBCertChecker(tc *TeleportClient, dbRoute tlsca.RouteToDatabase, clock clockwork.Clock) alpnproxy.LocalProxyMiddleware + func NewInsecureWebClient() *http.Client + func NewKeyStoreCertChecker(keyStore sshKnowHostGetter, host string) ssh.HostKeyCallback + func ParseLabelSpec(spec string) (map[string]string, error) + func ParseSearchKeywords(spec string, customDelimiter rune) []string + func PlayFile(ctx context.Context, tarFile io.Reader, sid string) error + func PromptMFAChallenge(ctx context.Context, c *proto.MFAAuthenticateChallenge, proxyAddr string, ...) (*proto.MFAAuthenticateResponse, error) + func ProxyHost(proxyHost string) string + func RetryWithRelogin(ctx context.Context, tc *TeleportClient, fn func() error) error + func SSHAgentLogin(ctx context.Context, login SSHLoginDirect) (*auth.SSHLoginResponse, error) + func SSHAgentMFALogin(ctx context.Context, login SSHLoginMFA) (*auth.SSHLoginResponse, error) + func SSHAgentPasswordlessLogin(ctx context.Context, login SSHLoginPasswordless) (*auth.SSHLoginResponse, error) + func SSHAgentSSOLogin(ctx context.Context, login SSHLoginSSO, config *RedirectorConfig) (*auth.SSHLoginResponse, error) + func Status(profileDir, proxyHost string) (*ProfileStatus, []*ProfileStatus, error) + func Username() (string, error) + func ValidateAgentKeyOption(supplied string) error + func VirtualPathEnvName(kind VirtualPathKind, params VirtualPathParams) string + func VirtualPathEnvNames(kind VirtualPathKind, params VirtualPathParams) []string + type AgentForwardingMode int + const ForwardAgentLocal + const ForwardAgentNo + const ForwardAgentYes + type AuthenticateSSHUserRequest struct + AttestationStatement *keys.AttestationStatement + Compatibility string + KubernetesCluster string + Password string + PubKey []byte + RouteToCluster string + TOTPCode string + TTL time.Duration + User string + WebauthnChallengeResponse *wanlib.CredentialAssertionResponse + type AuthenticateWebUserRequest struct + User string + WebauthnAssertionResponse *wanlib.CredentialAssertionResponse + type CachePolicy struct + CacheTTL time.Duration + NeverExpires bool + type CertCachePolicy int + const CertCacheDrop + const CertCacheKeep + type CertOption interface + type Config struct + AddKeysToAgent string + Agent agent.ExtendedAgent + AllowStdinHijack bool + AuthConnector string + AuthMethods []ssh.AuthMethod + AuthenticatorAttachment wancli.AuthenticatorAttachment + BindAddr string + Browser string + CachePolicy *CachePolicy + CertificateFormat string + CheckVersions bool + ClientAddr string + DatabaseService string + DefaultPrincipal string + DisplayParticipantRequirements bool + DynamicForwardedPorts DynamicForwardedPorts + EnableEscapeSequences bool + EnableX11Forwarding bool + Env map[string]string + ExitStatus int + ExplicitUsername bool + ExtraProxyHeaders map[string]string + ForwardAgent AgentForwardingMode + HomePath string + Host string + HostKeyCallback ssh.HostKeyCallback + HostLogin string + HostPort int + InsecureSkipVerify bool + Interactive bool + Invited []string + JumpHosts []utils.JumpHost + KeyTTL time.Duration + KeysDir string + KubeProxyAddr string + KubernetesCluster string + Labels map[string]string + LoadAllCAs bool + LocalForwardPorts ForwardedPorts + MockSSOLogin SSOLoginFunc + MongoProxyAddr string + MySQLProxyAddr string + Namespace string + NoRemoteExec bool + PostgresProxyAddr string + PredicateExpression string + PreferOTP bool + PreloadKey *Key + PrivateKeyPolicy keys.PrivateKeyPolicy + Reason string + SSHProxyAddr string + SearchKeywords []string + SiteName string + SkipLocalAuth bool + Stderr io.Writer + Stdin io.Reader + Stdout io.Writer + TLS *tls.Config + TLSRoutingEnabled bool + Tracer oteltrace.Tracer + UseKeyPrincipals bool + Username string + WebProxyAddr string + X11ForwardingTimeout time.Duration + X11ForwardingTrusted bool + func MakeDefaultConfig() *Config + func (c *Config) DatabaseProxyHostPort(db tlsca.RouteToDatabase) (string, int) + func (c *Config) DefaultResourceFilter() *proto.ListResourcesRequest + func (c *Config) KubeClusterAddr() string + func (c *Config) KubeProxyHostPort() (string, int) + func (c *Config) LoadProfile(profileDir string, proxyName string) error + func (c *Config) MongoProxyHostPort() (string, int) + func (c *Config) MySQLProxyHostPort() (string, int) + func (c *Config) ParseProxyHost(proxyHost string) error + func (c *Config) PostgresProxyHostPort() (string, int) + func (c *Config) ProxySpecified() bool + func (c *Config) SSHProxyHostPort() (string, int) + func (c *Config) SaveProfile(dir string, makeCurrent bool) error + func (c *Config) WebProxyHost() string + func (c *Config) WebProxyHostPort() (string, int) + func (c *Config) WebProxyPort() int + type CreateSSHCertReq struct + AttestationStatement *keys.AttestationStatement + Compatibility string + KubernetesCluster string + OTPToken string + Password string + PubKey []byte + RouteToCluster string + TTL time.Duration + User string + type DBCertChecker struct + func (c *DBCertChecker) OnNewConnection(ctx context.Context, lp *alpnproxy.LocalProxy, conn net.Conn) error + func (c *DBCertChecker) OnStart(ctx context.Context, lp *alpnproxy.LocalProxy) error + type DynamicForwardedPort struct + SrcIP string + SrcPort int + func (p *DynamicForwardedPort) ToString() string + type DynamicForwardedPorts []DynamicForwardedPort + func ParseDynamicPortForwardSpec(spec []string) (DynamicForwardedPorts, error) + func (fp DynamicForwardedPorts) String() (retval []string) + type FSLocalKeyStore struct + func NewFSLocalKeyStore(dirPath string) (s *FSLocalKeyStore, err error) + func (fs *FSLocalKeyStore) AddKey(key *Key) error + func (fs *FSLocalKeyStore) AddKnownHostKeys(hostname, proxyHost string, hostKeys []ssh.PublicKey) (retErr error) + func (fs *FSLocalKeyStore) DeleteKey(idx KeyIndex) error + func (fs *FSLocalKeyStore) DeleteKeys() error + func (fs *FSLocalKeyStore) DeleteUserCerts(idx KeyIndex, opts ...CertOption) error + func (fs *FSLocalKeyStore) GetKey(idx KeyIndex, opts ...CertOption) (*Key, error) + func (fs *FSLocalKeyStore) GetKnownHostKeys(hostname string) (keys []ssh.PublicKey, retErr error) + func (fs *FSLocalKeyStore) GetSSHCertificates(proxyHost, username string) ([]*ssh.Certificate, error) + func (fs *FSLocalKeyStore) GetTrustedCertsPEM(proxyHost string) ([][]byte, error) + func (fs *FSLocalKeyStore) SaveTrustedCerts(proxyHost string, cas []auth.TrustedCerts) (retErr error) + type ForwardedPort struct + DestHost string + DestPort int + SrcIP string + SrcPort int + func (p *ForwardedPort) ToString() string + type ForwardedPorts []ForwardedPort + func ParsePortForwardSpec(spec []string) (ports ForwardedPorts, err error) + func (fp ForwardedPorts) String() (retval []string) + type HostKeyCallback func(host string, ip net.Addr, key ssh.PublicKey) error + type Key struct + AppTLSCerts map[string][]byte + Cert []byte + DBTLSCerts map[string][]byte + KubeTLSCerts map[string][]byte + TLSCert []byte + TrustedCA []auth.TrustedCerts + WindowsDesktopCerts map[string][]byte + func GenerateRSAKey() (*Key, error) + func KeyFromIdentityFile(path string) (*Key, error) + func NewKey(priv *keys.PrivateKey) *Key + func (k *Key) ActiveRequests() (services.RequestIDs, error) + func (k *Key) AppTLSCertificates() (certs []x509.Certificate, err error) + func (k *Key) AsAgentKey() (agent.AddedKey, error) + func (k *Key) AsAuthMethod() (ssh.AuthMethod, error) + func (k *Key) CertPrincipals() ([]string, error) + func (k *Key) CertRoles() ([]string, error) + func (k *Key) CertUsername() (string, error) + func (k *Key) CertValidBefore() (t time.Time, err error) + func (k *Key) CheckCert() error + func (k *Key) DBTLSCertificates() (certs []x509.Certificate, err error) + func (k *Key) EqualPrivateKey(other *Key) bool + func (k *Key) GetClusterNames() ([]string, error) + func (k *Key) HostKeyCallback(withHostKeyFallback bool) (ssh.HostKeyCallback, error) + func (k *Key) HostKeyCallbackForClusters(withHostKeyFallback bool, clusters []string) (ssh.HostKeyCallback, error) + func (k *Key) KubeClientTLSConfig(cipherSuites []uint16, kubeClusterName string) (*tls.Config, error) + func (k *Key) KubeTLSCertificate(kubeClusterName string) (*x509.Certificate, error) + func (k *Key) ProxyClientSSHConfig(keyStore sshKnowHostGetter, host string) (*ssh.ClientConfig, error) + func (k *Key) RootClusterCAs() ([][]byte, error) + func (k *Key) RootClusterName() (string, error) + func (k *Key) SSHCAs() (result [][]byte) + func (k *Key) SSHCAsForClusters(clusters []string) (result [][]byte, err error) + func (k *Key) SSHCert() (*ssh.Certificate, error) + func (k *Key) SSHSigner() (ssh.Signer, error) + func (k *Key) TLSCAs() (result [][]byte) + func (k *Key) TeleportClientTLSConfig(cipherSuites []uint16, clusters []string) (*tls.Config, error) + func (k *Key) TeleportTLSCertValidBefore() (t time.Time, err error) + func (k *Key) TeleportTLSCertificate() (*x509.Certificate, error) + type KeyIndex struct + ClusterName string + ProxyHost string + Username string + func (idx KeyIndex) Check() error + type KubeSession struct + func NewKubeSession(ctx context.Context, tc *TeleportClient, meta types.SessionTracker, ...) (*KubeSession, error) + func (s *KubeSession) Close() error + func (s *KubeSession) Detach() error + func (s *KubeSession) Wait() + type LocalAgentConfig struct + Agent agent.ExtendedAgent + Insecure bool + KeysOption string + Keystore LocalKeyStore + LoadAllCAs bool + ProxyHost string + Site string + Username string + type LocalKeyAgent struct + func NewLocalAgent(conf LocalAgentConfig) (a *LocalKeyAgent, err error) + func (a *LocalKeyAgent) AddDatabaseKey(key *Key) error + func (a *LocalKeyAgent) AddHostSignersToCache(certAuthorities []auth.TrustedCerts) error + func (a *LocalKeyAgent) AddKey(key *Key) error + func (a *LocalKeyAgent) CheckHostSignature(addr string, remote net.Addr, hostKey ssh.PublicKey) error + func (a *LocalKeyAgent) ClientCertPool(cluster string) (*x509.CertPool, error) + func (a *LocalKeyAgent) DeleteKey() error + func (a *LocalKeyAgent) DeleteKeys() error + func (a *LocalKeyAgent) DeleteUserCerts(clusterName string, opts ...CertOption) error + func (a *LocalKeyAgent) GetClusterNames() ([]string, error) + func (a *LocalKeyAgent) GetCoreKey() (*Key, error) + func (a *LocalKeyAgent) GetKey(clusterName string, opts ...CertOption) (*Key, error) + func (a *LocalKeyAgent) GetTrustedCertsPEM() ([][]byte, error) + func (a *LocalKeyAgent) LoadKey(key Key) error + func (a *LocalKeyAgent) LoadKeyForCluster(clusterName string) error + func (a *LocalKeyAgent) SaveTrustedCerts(certAuthorities []auth.TrustedCerts) error + func (a *LocalKeyAgent) Signers() ([]ssh.Signer, error) + func (a *LocalKeyAgent) UnloadKey() error + func (a *LocalKeyAgent) UnloadKeys() error + func (a *LocalKeyAgent) UpdateCluster(cluster string) + func (a *LocalKeyAgent) UpdateLoadAllCAs(loadAllCAs bool) + func (a *LocalKeyAgent) UpdateProxyHost(proxyHost string) + func (a *LocalKeyAgent) UpdateUsername(username string) + func (a *LocalKeyAgent) UserRefusedHosts() bool + type LocalKeyStore interface + AddKey func(key *Key) error + AddKnownHostKeys func(hostname, proxyHost string, keys []ssh.PublicKey) error + DeleteKey func(idx KeyIndex) error + DeleteKeys func() error + DeleteUserCerts func(idx KeyIndex, opts ...CertOption) error + GetKey func(idx KeyIndex, opts ...CertOption) (*Key, error) + GetKnownHostKeys func(hostname string) ([]ssh.PublicKey, error) + GetSSHCertificates func(proxyHost, username string) ([]*ssh.Certificate, error) + GetTrustedCertsPEM func(proxyHost string) ([][]byte, error) + SaveTrustedCerts func(proxyHost string, cas []auth.TrustedCerts) error + type MFAAuthenticateChallenge struct + TOTPChallenge bool + WebauthnChallenge *wanlib.CredentialAssertion + func MakeAuthenticateChallenge(protoChal *proto.MFAAuthenticateChallenge) *MFAAuthenticateChallenge + type MFAChallengeRequest struct + Pass string + Passwordless bool + User string + type MFARegisterChallenge struct + TOTP *TOTPRegisterChallenge + Webauthn *wanlib.CredentialCreation + func MakeRegisterChallenge(protoChal *proto.MFARegisterChallenge) *MFARegisterChallenge + type MemLocalKeyStore struct + func NewMemLocalKeyStore(dirPath string) (*MemLocalKeyStore, error) + func (fs *MemLocalKeyStore) AddKnownHostKeys(hostname, proxyHost string, hostKeys []ssh.PublicKey) (retErr error) + func (fs *MemLocalKeyStore) GetKnownHostKeys(hostname string) (keys []ssh.PublicKey, retErr error) + func (fs *MemLocalKeyStore) GetTrustedCertsPEM(proxyHost string) ([][]byte, error) + func (fs *MemLocalKeyStore) SaveTrustedCerts(proxyHost string, cas []auth.TrustedCerts) (retErr error) + func (s *MemLocalKeyStore) AddKey(key *Key) error + func (s *MemLocalKeyStore) DeleteKey(idx KeyIndex) error + func (s *MemLocalKeyStore) DeleteKeys() error + func (s *MemLocalKeyStore) DeleteUserCerts(idx KeyIndex, opts ...CertOption) error + func (s *MemLocalKeyStore) GetKey(idx KeyIndex, opts ...CertOption) (*Key, error) + func (s *MemLocalKeyStore) GetSSHCertificates(proxyHost, username string) ([]*ssh.Certificate, error) + type NodeClient struct + Client *tracessh.Client + FIPSEnabled bool + Namespace string + OnMFA func() + TC *TeleportClient + Tracer oteltrace.Tracer + func NewNodeClient(ctx context.Context, sshConfig *ssh.ClientConfig, conn net.Conn, ...) (*NodeClient, error) + func (c *NodeClient) Close() error + func (c *NodeClient) ExecuteSCP(ctx context.Context, cmd scp.Command) error + func (c *NodeClient) GetRemoteTerminalSize(ctx context.Context, sessionID string) (*term.Winsize, error) + func (c *NodeClient) RunInteractiveShell(ctx context.Context, mode types.SessionParticipantMode, ...) error + func (c *NodeClient) TransferFiles(ctx context.Context, cfg *sftp.Config) error + type NodeDetails struct + Addr string + Cluster string + MFACheck *proto.IsMFARequiredResponse + Namespace string + func (n *NodeDetails) ProxyFormat() string + func (n NodeDetails) String() string + type NodeSession struct + ExitMsg string + func (ns *NodeSession) Close() error + func (ns *NodeSession) NodeClient() *NodeClient + type ParsedProxyHost struct + Host string + SSHProxyAddr string + UsingDefaultWebProxyPort bool + WebProxyAddr string + func ParseProxyHost(proxyHost string) (*ParsedProxyHost, error) + type ProfileOptions struct + IsVirtual bool + KubeProxyAddr string + ProfileDir string + ProfileName string + SiteName string + Username string + WebProxyAddr string + type ProfileStatus struct + AWSRolesARNs []string + ActiveRequests services.RequestIDs + AllowedResourceIDs []types.ResourceID + Apps []tlsca.RouteToApp + Cluster string + CriticalOptions map[string]string + Databases []tlsca.RouteToDatabase + Dir string + Extensions []string + IsVirtual bool + KubeEnabled bool + KubeGroups []string + KubeUsers []string + Logins []string + Name string + ProxyURL url.URL + Roles []string + Traits wrappers.Traits + Username string + ValidUntil time.Time + func ReadProfileFromIdentity(key *Key, opts ProfileOptions) (*ProfileStatus, error) + func ReadProfileStatus(profileDir string, profileName string) (*ProfileStatus, error) + func StatusCurrent(profileDir, proxyHost, identityFilePath string) (*ProfileStatus, error) + func StatusFor(profileDir, proxyHost, username string) (*ProfileStatus, error) + func (p *ProfileStatus) AppCertPath(name string) string + func (p *ProfileStatus) AppLocalCAPath(name string) string + func (p *ProfileStatus) AppNames() (result []string) + func (p *ProfileStatus) CACertPathForCluster(cluster string) string + func (p *ProfileStatus) DatabaseCertPathForCluster(clusterName string, databaseName string) string + func (p *ProfileStatus) DatabaseServices() (result []string) + func (p *ProfileStatus) DatabasesForCluster(clusterName string) ([]tlsca.RouteToDatabase, error) + func (p *ProfileStatus) IsExpired(clock clockwork.Clock) bool + func (p *ProfileStatus) KeyPath() string + func (p *ProfileStatus) KubeConfigPath(name string) string + type PromptMFAChallengeHandler func(ctx context.Context, proxyAddr string, c *proto.MFAAuthenticateChallenge) (*proto.MFAAuthenticateResponse, error) + type PromptMFAChallengeOpts struct + AllowStdinHijack bool + AuthenticatorAttachment wancli.AuthenticatorAttachment + HintBeforePrompt string + PreferOTP bool + PromptDevicePrefix string + Quiet bool + type ProxyClient struct + Client *tracessh.Client + Tracer oteltrace.Tracer + func (proxy *ProxyClient) Close() error + func (proxy *ProxyClient) ClusterName() string + func (proxy *ProxyClient) ConnectToAuthServiceThroughALPNSNIProxy(ctx context.Context, clusterName, proxyAddr string) (auth.ClientI, error) + func (proxy *ProxyClient) ConnectToCluster(ctx context.Context, clusterName string) (auth.ClientI, error) + func (proxy *ProxyClient) ConnectToNode(ctx context.Context, nodeAddress NodeDetails, user string, ...) (*NodeClient, error) + func (proxy *ProxyClient) ConnectToRootCluster(ctx context.Context) (auth.ClientI, error) + func (proxy *ProxyClient) CreateAccessRequest(ctx context.Context, req types.AccessRequest) error + func (proxy *ProxyClient) CreateAppSession(ctx context.Context, req types.CreateAppSessionRequest) (types.WebSession, error) + func (proxy *ProxyClient) CurrentCluster() auth.ClientI + func (proxy *ProxyClient) DeleteAppSession(ctx context.Context, sessionID string) error + func (proxy *ProxyClient) DeleteUserAppSessions(ctx context.Context, req *proto.DeleteUserAppSessionsRequest) error + func (proxy *ProxyClient) FindAppServersByFilters(ctx context.Context, req proto.ListResourcesRequest) ([]types.AppServer, error) + func (proxy *ProxyClient) FindAppServersByFiltersForCluster(ctx context.Context, req proto.ListResourcesRequest, cluster string) ([]types.AppServer, error) + func (proxy *ProxyClient) FindDatabaseServersByFilters(ctx context.Context, req proto.ListResourcesRequest) ([]types.DatabaseServer, error) + func (proxy *ProxyClient) FindDatabaseServersByFiltersForCluster(ctx context.Context, req proto.ListResourcesRequest, cluster string) ([]types.DatabaseServer, error) + func (proxy *ProxyClient) FindDatabasesByFilters(ctx context.Context, req proto.ListResourcesRequest) ([]types.Database, error) + func (proxy *ProxyClient) FindDatabasesByFiltersForCluster(ctx context.Context, req proto.ListResourcesRequest, cluster string) ([]types.Database, error) + func (proxy *ProxyClient) FindNodesByFilters(ctx context.Context, req proto.ListResourcesRequest) ([]types.Server, error) + func (proxy *ProxyClient) FindNodesByFiltersForCluster(ctx context.Context, req proto.ListResourcesRequest, cluster string) ([]types.Server, error) + func (proxy *ProxyClient) GetAccessRequests(ctx context.Context, filter types.AccessRequestFilter) ([]types.AccessRequest, error) + func (proxy *ProxyClient) GetClusterAlerts(ctx context.Context, req types.GetClusterAlertsRequest) ([]types.ClusterAlert, error) + func (proxy *ProxyClient) GetLeafClusters(ctx context.Context) ([]types.RemoteCluster, error) + func (proxy *ProxyClient) GetRole(ctx context.Context, name string) (types.Role, error) + func (proxy *ProxyClient) GetSites(ctx context.Context) ([]types.Site, error) + func (proxy *ProxyClient) IssueUserCertsWithMFA(ctx context.Context, params ReissueParams, ...) (*Key, error) + func (proxy *ProxyClient) ListResources(ctx context.Context, namespace, resource, startKey string, limit int) ([]types.ResourceWithLabels, string, error) + func (proxy *ProxyClient) NewTracingClient(ctx context.Context, clusterName string) (*tracing.Client, error) + func (proxy *ProxyClient) NewWatcher(ctx context.Context, watch types.Watch) (types.Watcher, error) + func (proxy *ProxyClient) PortForwardToNode(ctx context.Context, nodeAddress NodeDetails, user string, ...) (*NodeClient, error) + func (proxy *ProxyClient) ReissueUserCerts(ctx context.Context, cachePolicy CertCachePolicy, params ReissueParams) error + func (proxy *ProxyClient) RootClusterName(ctx context.Context) (string, error) + type Redirector struct + func NewRedirector(ctx context.Context, login SSHLoginSSO, config *RedirectorConfig) (*Redirector, error) + func (rd *Redirector) ClickableURL() string + func (rd *Redirector) Close() error + func (rd *Redirector) Done() <-chan struct{} + func (rd *Redirector) ErrorC() <-chan error + func (rd *Redirector) ResponseC() <-chan *auth.SSHLoginResponse + func (rd *Redirector) Start() error + type RedirectorConfig struct + SSOLoginConsoleRequestFn func(req SSOLoginConsoleReq) (*SSOLoginConsoleResponse, error) + type ReissueParams struct + AccessRequests []string + AuthClient auth.ClientI + DropAccessRequests []string + ExistingCreds *Key + KubernetesCluster string + MFACheck *proto.IsMFARequiredResponse + NodeName string + RouteToApp proto.RouteToApp + RouteToCluster string + RouteToDatabase proto.RouteToDatabase + RouteToWindowsDesktop proto.RouteToWindowsDesktop + type SSHLogin struct + AttestationStatement *keys.AttestationStatement + Compatibility string + Insecure bool + KubernetesCluster string + Pool *x509.CertPool + ProxyAddr string + PubKey []byte + RouteToCluster string + TTL time.Duration + type SSHLoginDirect struct + OTPToken string + Password string + User string + type SSHLoginFunc func(context.Context, *keys.PrivateKey) (*auth.SSHLoginResponse, error) + type SSHLoginMFA struct + AllowStdinHijack bool + AuthenticatorAttachment wancli.AuthenticatorAttachment + Password string + PreferOTP bool + User string + type SSHLoginPasswordless struct + AuthenticatorAttachment wancli.AuthenticatorAttachment + CustomPrompt wancli.LoginPrompt + StderrOverride io.Writer + User string + type SSHLoginSSO struct + BindAddr string + Browser string + ConnectorID string + Protocol string + type SSOLoginConsoleReq struct + AttestationStatement *keys.AttestationStatement + CertTTL time.Duration + Compatibility string + ConnectorID string + KubernetesCluster string + PublicKey []byte + RedirectURL string + RouteToCluster string + func (r *SSOLoginConsoleReq) CheckAndSetDefaults() error + type SSOLoginConsoleResponse struct + RedirectURL string + type SSOLoginFunc func(ctx context.Context, connectorID string, priv *keys.PrivateKey, ...) (*auth.SSHLoginResponse, error) + type ShellCreatedCallback func(s *tracessh.Session, c *tracessh.Client, terminal io.ReadWriteCloser) (exit bool, err error) + type TOTPRegisterChallenge struct + QRCode []byte + type TeleportClient struct + OnShellCreated ShellCreatedCallback + func NewClient(c *Config) (tc *TeleportClient, err error) + func (tc *TeleportClient) ActivateKey(ctx context.Context, key *Key) error + func (tc *TeleportClient) AddKey(key *Key) error + func (tc *TeleportClient) AddTrustedCA(ctx context.Context, ca types.CertAuthority) error + func (tc *TeleportClient) AskOTP(ctx context.Context) (token string, err error) + func (tc *TeleportClient) AskPassword(ctx context.Context) (pwd string, err error) + func (tc *TeleportClient) ConnectToNode(ctx context.Context, proxyClient *ProxyClient, nodeDetails NodeDetails, ...) (*NodeClient, error) + func (tc *TeleportClient) ConnectToProxy(ctx context.Context) (*ProxyClient, error) + func (tc *TeleportClient) CreateAccessRequest(ctx context.Context, req types.AccessRequest) error + func (tc *TeleportClient) CreateAppSession(ctx context.Context, req types.CreateAppSessionRequest) (types.WebSession, error) + func (tc *TeleportClient) DeleteAppSession(ctx context.Context, sessionID string) error + func (tc *TeleportClient) EventsChannel() <-chan events.EventFields + func (tc *TeleportClient) ExecuteSCP(ctx context.Context, cmd scp.Command) (err error) + func (tc *TeleportClient) GetAccessRequests(ctx context.Context, filter types.AccessRequestFilter) ([]types.AccessRequest, error) + func (tc *TeleportClient) GetClusterAlerts(ctx context.Context, req types.GetClusterAlertsRequest) ([]types.ClusterAlert, error) + func (tc *TeleportClient) GetNewLoginKey(ctx context.Context, keyPolicy keys.PrivateKeyPolicy) (*keys.PrivateKey, error) + func (tc *TeleportClient) GetRole(ctx context.Context, name string) (types.Role, error) + func (tc *TeleportClient) GetSessionEvents(ctx context.Context, namespace, sessionID string) ([]events.EventFields, error) + func (tc *TeleportClient) GetTrustedCA(ctx context.Context, clusterName string) ([]types.CertAuthority, error) + func (tc *TeleportClient) GetWebConfig(ctx context.Context) (*webclient.WebConfig, error) + func (tc *TeleportClient) IssueUserCertsWithMFA(ctx context.Context, params ReissueParams, ...) (*Key, error) + func (tc *TeleportClient) Join(ctx context.Context, mode types.SessionParticipantMode, namespace string, ...) (err error) + func (tc *TeleportClient) ListAllNodes(ctx context.Context) ([]types.Server, error) + func (tc *TeleportClient) ListAppServersWithFilters(ctx context.Context, customFilter *proto.ListResourcesRequest) ([]types.AppServer, error) + func (tc *TeleportClient) ListApps(ctx context.Context, customFilter *proto.ListResourcesRequest) ([]types.Application, error) + func (tc *TeleportClient) ListAppsAllClusters(ctx context.Context, customFilter *proto.ListResourcesRequest) (map[string][]types.Application, error) + func (tc *TeleportClient) ListDatabaseServersWithFilters(ctx context.Context, customFilter *proto.ListResourcesRequest) ([]types.DatabaseServer, error) + func (tc *TeleportClient) ListDatabases(ctx context.Context, customFilter *proto.ListResourcesRequest) ([]types.Database, error) + func (tc *TeleportClient) ListDatabasesAllClusters(ctx context.Context, customFilter *proto.ListResourcesRequest) (map[string][]types.Database, error) + func (tc *TeleportClient) ListKubernetesClustersWithFiltersAllClusters(ctx context.Context, req proto.ListResourcesRequest) (map[string][]types.KubeCluster, error) + func (tc *TeleportClient) ListNodesWithFilters(ctx context.Context) ([]types.Server, error) + func (tc *TeleportClient) ListNodesWithFiltersAllClusters(ctx context.Context) (map[string][]types.Server, error) + func (tc *TeleportClient) LoadKeyForCluster(clusterName string) error + func (tc *TeleportClient) LoadKeyForClusterWithReissue(ctx context.Context, clusterName string) error + func (tc *TeleportClient) LocalAgent() *LocalKeyAgent + func (tc *TeleportClient) Login(ctx context.Context) (*Key, error) + func (tc *TeleportClient) Logout() error + func (tc *TeleportClient) LogoutAll() error + func (tc *TeleportClient) LogoutApp(appName string) error + func (tc *TeleportClient) LogoutDatabase(dbName string) error + func (tc *TeleportClient) NewTracingClient(ctx context.Context) (*apitracing.Client, error) + func (tc *TeleportClient) NewWatcher(ctx context.Context, watch types.Watch) (types.Watcher, error) + func (tc *TeleportClient) Ping(ctx context.Context) (*webclient.PingResponse, error) + func (tc *TeleportClient) PingAndShowMOTD(ctx context.Context) (*webclient.PingResponse, error) + func (tc *TeleportClient) Play(ctx context.Context, namespace, sessionID string) (err error) + func (tc *TeleportClient) PromptMFAChallenge(ctx context.Context, proxyAddr string, c *proto.MFAAuthenticateChallenge, ...) (*proto.MFAAuthenticateResponse, error) + func (tc *TeleportClient) ReissueUserCerts(ctx context.Context, cachePolicy CertCachePolicy, params ReissueParams) error + func (tc *TeleportClient) RootClusterName(ctx context.Context) (string, error) + func (tc *TeleportClient) SFTP(ctx context.Context, args []string, port int, opts sftp.Options, quiet bool) (err error) + func (tc *TeleportClient) SSH(ctx context.Context, command []string, runLocally bool) error + func (tc *TeleportClient) SSHLogin(ctx context.Context, sshLoginFunc SSHLoginFunc) (*Key, error) + func (tc *TeleportClient) SearchSessionEvents(ctx context.Context, fromUTC, toUTC time.Time, pageSize int, ...) ([]apievents.AuditEvent, error) + func (tc *TeleportClient) SendEvent(ctx context.Context, e events.EventFields) error + func (tc *TeleportClient) ShowMOTD(ctx context.Context) error + func (tc *TeleportClient) SignersForClusterWithReissue(ctx context.Context, clusterName string) ([]ssh.Signer, error) + func (tc *TeleportClient) TransferFiles(ctx context.Context, hostLogin, nodeAddr string, cfg *sftp.Config) error + func (tc *TeleportClient) UpdateTrustedCA(ctx context.Context, clusterName string) error + func (tc *TeleportClient) WithRootClusterClient(ctx context.Context, do func(clt auth.ClientI) error) error + func (tc *TeleportClient) WithoutJumpHosts(fn func(tcNoJump *TeleportClient) error) error + type VirtualPathKind string + const VirtualPathApp + const VirtualPathCA + const VirtualPathDatabase + const VirtualPathEnvPrefix + const VirtualPathKey + const VirtualPathKubernetes + type VirtualPathParams []string + func VirtualPathAppParams(appName string) VirtualPathParams + func VirtualPathCAParams(caType types.CertAuthType) VirtualPathParams + func VirtualPathDatabaseParams(databaseName string) VirtualPathParams + func VirtualPathKubernetesParams(k8sCluster string) VirtualPathParams + type WebClient struct + func NewWebClient(url string, opts ...roundtrip.ClientParam) (*WebClient, error) + func (w *WebClient) Delete(ctx context.Context, endpoint string) (*roundtrip.Response, error) + func (w *WebClient) DeleteWithParams(ctx context.Context, endpoint string, val url.Values) (*roundtrip.Response, error) + func (w *WebClient) Get(ctx context.Context, endpoint string, val url.Values) (*roundtrip.Response, error) + func (w *WebClient) PostJSON(ctx context.Context, endpoint string, val interface{}) (*roundtrip.Response, error) + func (w *WebClient) PostJSONWithFallback(ctx context.Context, endpoint string, val interface{}, allowHTTPFallback bool) (*roundtrip.Response, error) + func (w *WebClient) PutJSON(ctx context.Context, endpoint string, val interface{}) (*roundtrip.Response, error) + type WithAppCerts struct + type WithDBCerts struct + type WithKubeCerts struct + type WithSSHCerts struct Other modules containing this package github.com/zmb3/teleport
Go to main page