(6.1) Update application access docs #6055
Conversation
|
I would also add a section about how to use RBAC to limit access to applications. Bonus points if it uses Workflows to get access to applications. |
|
@r0mant I will do another pass tomorrow, but overall, great work! |
| # Name of the application. Used for identification purposes. | ||
| - name: "grafana" | ||
| # URI and port the application is available at. | ||
| uri: "http://localhost:3000" |
There was a problem hiding this comment.
This guide (or some other guide) should mention that if you have two apps with the same name on different hosts it will load balance them. (HA). May be for the future.
There was a problem hiding this comment.
Yeah I think dedicated HA guides for both app and db access are needed. Also, app access HA needs some work too, the way it's implemented right now it's not really HA because the session sticks to the app server for its entire duration.
r0mant
force-pushed
the
roman/v6/app-access-docs
branch
from
21c3cd5 to
8260330
Compare
|
@klizhentas Addressed your review comments in 8260330. |
@benarent Yeah, I will do it in a future PR. |
…e/dynamodb-gsi-autoscaling * 'master' of github.com:gravitational/teleport: (41 commits) Refactor ssh.ClientConfig used by tctl and API clients to use the first valid principal as User. Update Architecture Overview With Link To User Roles (#6224) Add `lint-api` target and fix lint errors (#6169) ssh: fix relogin with jumphosts (#6213) drone: use emptyDir for /var/lib/docker filesystem and prevent repetitive docker pulls (#6145) Remove ARM64 FIPS builds (#6236) tsh Profile SSH certs fix (#6214) mfa: fix gRPC unimplemented check in cert reissue Open Sources Access Controls Docs (#6188) (#6217) add PAM environment with interpolation support Cache per-cluster SSH certificates under ~/.tsh (#5938) add special resource type for access plugin data Enable DynamoDB autoscaling on global secondary indices (#6112) darwin fips builds (#5866) kube: add kubernetes_labels to role JSON schema mfa: send username instead of SSH login name in MFA cert request fix nil slice bug RFD 16: Add a section on `tctl rm` resetting resources back to defaults (#5673) Update application access docs (#6055) (#6137) Bump linux FIPS builds to use go1.16.2b7 release (#6143) ...
Update App Access docs to have structure similar to K8s and Database Access docs. Fixes #5940.
Changes made:
Guides / General Usage(couldn't come up with a better name, suggestions welcome) andGuides / Integrating with JWT.Getting Started,Guides / API AccessandReference.Needs forward-port to master.