Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adds tctl auth sign --tar docs to Docker Installation Guide #29665

Merged
merged 10 commits into from
Aug 1, 2023

Conversation

tcsc
Copy link
Contributor

@tcsc tcsc commented Jul 27, 2023

Adds a FAQ entry about extracting certificates from a distroless image using tctl auth sign --tar.

I'm not sure of a good place to put this information, so I've added it as a section in the Docker installation guide entry just so its written down and searchable.

Documents new functionality from #29451 to address #29262

x alice.local.key
x alice.local.cas
```

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just wondering if there should be a pointer to the tbot docs here also? Thoughts?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What did you have in mind for the link to the tbot docs?

@@ -63,6 +63,31 @@ are not logged in to Teleport or may not have access to a browser.
Make sure that all Teleport components are at least at version 10.3.0. Older versions
don't support the SFTP protocol, and it's enabled by default in `tsh` v11.0.0 and OpenSSH v9.0.

## How do I extract certificates from a container running a distroless image?
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would it make more sense to put this information in the Installation page where we introduce distroless images? Otherwise, it strikes me as a little unexpected to have a specific question like this right above something general like "How is Open Source different from Enterprise".

Otherwise, I think the wording is okay.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Moved, and updated example to use docker exec rather than kubectl exec

x alice.local.key
x alice.local.cas
```

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What did you have in mind for the link to the tbot docs?

@tcsc tcsc requested a review from ptgott August 1, 2023 02:04
@tcsc tcsc changed the title Adds FAQ entry for tctl auth sign --tar Adds tctl auth sign --tar docs to Docker Installation Guide Aug 1, 2023
@tcsc
Copy link
Contributor Author

tcsc commented Aug 1, 2023

What did you have in mind for the link to the tbot docs?

Just that the circumstances where you'd use tctl auth sign overlap with situations where using tbot would be a better alternative. I've left it out for now.

@tcsc tcsc added this pull request to the merge queue Aug 1, 2023
Merged via the queue into master with commit 621becc Aug 1, 2023
@tcsc tcsc deleted the tcsc/auth-sign-tar-faq branch August 1, 2023 23:38
@public-teleport-github-review-bot

@tcsc See the table below for backport results.

Branch Result
branch/v13 Failed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants