Skip to content
This repository has been archived by the owner on Feb 9, 2024. It is now read-only.

Replace "tele login" with "tsh login" #580

Closed
3 of 4 tasks
benarent opened this issue Aug 13, 2019 · 0 comments · Fixed by #898
Closed
3 of 4 tasks

Replace "tele login" with "tsh login" #580

benarent opened this issue Aug 13, 2019 · 0 comments · Fixed by #898
Assignees
Milestone

Comments

@benarent
Copy link
Contributor

benarent commented Aug 13, 2019

Objectives

  • tele login command is no longer needed to login into Hub.
  • tsh login is used to login into Hub and regular clusters.
  • tele commands (such as build, ls, pull, push) work after tsh login.
  • tsh login can login users into Docker/Helm as well.

Implementation notes

  • tele should be taught to read user's x509 certificate from ~/.tsh and use it for client auth when talking to Gravity API.
  • Gravity web servers (pack/app/ops) should be extended to support client-cert auth and extract user information from the client certificate. Maybe use Teleport's lib/auth/middleware.go:AuthMiddleware for that.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants