gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.42k stars 1.74k forks source link

tsh db config reporting Port 3080 instead of the public_addr 443 when using TLS routing #12863

Closed WilliamLoy closed 1 year ago

WilliamLoy commented 2 years ago

Expected behavior: tsh db config output should be reporting the web public addr port rather than the web listen port

Current behavior: tsh db config output reports Port 3080 on 9.0.4 and on 9.2.3. I didn't test other versions.

Bug details:

c4milo commented 1 year ago

I'm running in this as well with the ssh config:

❯ tsh config
# Begin generated Teleport configuration for proxy.tp.foo.com by tsh

# Common flags for all proxy.tp.foo.com hosts
Host *.proxy.tp.foo.com proxy.tp.foo.com
    UserKnownHostsFile "/Users/camiloaguilar/.tsh/known_hosts"
    IdentityFile "/Users/camiloaguilar/.tsh/keys/proxy.tp.foo.com/c4milo"
    CertificateFile "/Users/camiloaguilar/.tsh/keys/proxy.tp.foo.com/c4milo-ssh/proxy.tp.foo.com-cert.pub"
    PubkeyAcceptedAlgorithms +ssh-rsa-cert-v01@openssh.com
    HostKeyAlgorithms rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,ssh-rsa-cert-v01@openssh.com

# Flags for all proxy.tp.foo.com hosts except the proxy
Host *.proxy.tp.foo.com !proxy.tp.foo.com
    Port 3022
    ProxyCommand "/opt/homebrew/bin/tsh" proxy ssh --cluster=proxy.tp.foo.com --proxy=proxy.tp.foo.com %r@%h:%p

# End generated Teleport configuration