search

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.66k stars 1.77k forks source link

Add a whoami/status page in the UI #36592

Open hugoShaka opened 10 months ago

hugoShaka commented 10 months ago

What would you like Teleport to do?

Have a web UI page that shows me who I am, which roles I have (including the roles from Access Lists), which traits I have... Basically, a tsh status in the web UI.

It would also be a nice addition to show the command to log in to the cluster using tsh. Currently, we only show CLI commands when a user wants to access a specific resource, but the user might want to do something else (e.g. use tctl). In this case, showing the tsh login command makes the CLI usage easier.

What problem does this solve?

This would make troubleshooting way easier. Especially since the addition of access lists, it's hard for a user to know exactly which roles and traits they have. When they cannot access an app, they can more easily validate if they have the correct traits or not and communicate this information to the team providing access or to our support.

If a workaround exists, please include it.

Install tsh, run tsh login, then tsh status.

pgreidanusupgrade commented 9 months ago

An alternative workaround would be to write a small service that dumps JWT content.. which hits some of the needs here, but the best way would be the proposed UI enhancement