You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Expected behavior:
When logged in to the root cluster of a trusted cluster pair where auth_service.load_all_cas is true, tsh ssh <leaf-node-addr> should work.
Current behavior: tsh ssh <leaf-node-addr> fails with error direct dialing to nodes not found in inventory is not supported.
Bug details:
Teleport version: v14.0.0-alpha.2
Recreation steps: Follow tsh CA loading section of testplan
#30323 removed support for direct dialing of nodes, which was the only case where load_all_cas applied. It may make sense to also deprecate loading all CAs for tsh ssh.
Edit: Works correctly when TELEPORT_UNSTABLE_UNLISTED_AGENT_DIALING=yes in the proxy's environment.
The text was updated successfully, but these errors were encountered:
Expected behavior:
When logged in to the root cluster of a trusted cluster pair where
auth_service.load_all_cas
istrue
,tsh ssh <leaf-node-addr>
should work.Current behavior:
tsh ssh <leaf-node-addr>
fails with errordirect dialing to nodes not found in inventory is not supported
.Bug details:
#30323 removed support for direct dialing of nodes, which was the only case where
load_all_cas
applied. It may make sense to also deprecate loading all CAs fortsh ssh
.Edit: Works correctly when
TELEPORT_UNSTABLE_UNLISTED_AGENT_DIALING=yes
in the proxy's environment.The text was updated successfully, but these errors were encountered: