Accepting request 1185175 from home:ojkastl_buildservice:Branch_devel_kubic

update to 15.4.6

OBS-URL: https://build.opensuse.org/request/show/1185175
OBS-URL: https://build.opensuse.org/package/show/devel:kubic/teleport?expand=0&rev=224

.gitattributes

@@ -0,0 +1,23 @@
+## Default LFS
+*.7z filter=lfs diff=lfs merge=lfs -text
+*.bsp filter=lfs diff=lfs merge=lfs -text
+*.bz2 filter=lfs diff=lfs merge=lfs -text
+*.gem filter=lfs diff=lfs merge=lfs -text
+*.gz filter=lfs diff=lfs merge=lfs -text
+*.jar filter=lfs diff=lfs merge=lfs -text
+*.lz filter=lfs diff=lfs merge=lfs -text
+*.lzma filter=lfs diff=lfs merge=lfs -text
+*.obscpio filter=lfs diff=lfs merge=lfs -text
+*.oxt filter=lfs diff=lfs merge=lfs -text
+*.pdf filter=lfs diff=lfs merge=lfs -text
+*.png filter=lfs diff=lfs merge=lfs -text
+*.rpm filter=lfs diff=lfs merge=lfs -text
+*.tbz filter=lfs diff=lfs merge=lfs -text
+*.tbz2 filter=lfs diff=lfs merge=lfs -text
+*.tgz filter=lfs diff=lfs merge=lfs -text
+*.ttf filter=lfs diff=lfs merge=lfs -text
+*.txz filter=lfs diff=lfs merge=lfs -text
+*.whl filter=lfs diff=lfs merge=lfs -text
+*.xz filter=lfs diff=lfs merge=lfs -text
+*.zip filter=lfs diff=lfs merge=lfs -text
+*.zst filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -0,0 +1 @@
+.osc

_service

@@ -0,0 +1,39 @@
+<services>
+  <service name="obs_scm" mode="manual">
+    <param name="url">https://github.com/gravitational/teleport</param>
+    <param name="scm">git</param>
+    <param name="submodules">disable</param>
+    <param name="exclude">.git</param>
+    <param name="revision">v15.4.6</param>
+    <param name="versionformat">@PARENT_TAG@</param>
+    <param name="changesgenerate">disable</param>
+    <param name="versionrewrite-pattern">v(.*)</param>
+    <param name="match-tag">v*</param>
+  </service>
+  <service name="tar_scm" mode="manual">
+    <param name="url">https://github.com/gravitational/webassets</param>
+    <param name="scm">git</param>
+    <param name="submodules">disable</param>
+    <param name="exclude">.git</param>
+    <param name="filename">webassets</param>
+    <param name="without-version">yes</param>
+  </service>
+  <service name="recompress" mode="manual">
+    <param name="file">*.tar</param>
+    <param name="compression">gz</param>
+  </service>
+  <service name="set_version" mode="manual">
+    <param name="basename">teleport</param>
+  </service>
+  <service name="tar" mode="buildtime"/>
+  <service name="recompress" mode="buildtime">
+    <param name="file">*.tar</param>
+    <param name="compression">gz</param>
+  </service>
+  <service name="go_modules" mode="manual">
+  </service>
+  <service name="cargo_vendor" mode="manual">
+    <param name="update">true</param>
+    <param name="srcdir">teleport/tool/fdpass-teleport</param>
+  </service>
+</services>

_servicedata

@@ -0,0 +1,4 @@
+<servicedata>
+<service name="tar_scm">
+                <param name="url">https://github.com/gravitational/teleport</param>
+              <param name="changesrevision">f1ce28f6f67aa2e9f14400785f7a43ec247da995</param></service></servicedata>

tbot.yaml

@@ -0,0 +1,15 @@
+#
+# Example tbot.yaml
+# please see https://github.com/gravitational/teleport/tree/master/examples/systemd/machine-id
+# for details
+
+# auth_server: "auth.example.com:3025"
+# onboarding:
+#   join_method: "token"
+#   token: "00000000000000000000000000000000"
+#   ca_pins:
+#   - "sha256:1111111111111111111111111111111111111111111111111111111111111111"
+# storage:
+#   directory: /var/lib/teleport/bot
+# destinations:
+#   - directory: /opt/machine-id

teleport-15.4.6.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:4b9959f200429506779cd839be0ff687a984666e73eb08e63d5c999cc2abdebf
+size 254900750

teleport.obsinfo

@@ -0,0 +1,4 @@
+name: teleport
+version: 15.4.6
+mtime: 1719465569
+commit: 5ed51dddad616fae03f57e50ea31c7d59bf4a7fa

teleport.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=Teleport SSH Service
+After=network.target
+
+[Service]
+Type=simple
+Restart=on-failure
+EnvironmentFile=-/etc/default/teleport
+ExecStart=/usr/sbin/teleport start --pid-file=/run/teleport.pid
+ExecReload=/bin/kill -HUP $MAINPID
+PIDFile=/run/teleport.pid
+LimitNOFILE=8192
+
+[Install]
+WantedBy=multi-user.target

teleport.spec

@@ -0,0 +1,192 @@
+#
+# spec file for package teleport
+#
+# Copyright (c) 2024 SUSE LLC
+#
+# All modifications and additions to the file contributed by third parties
+# remain the property of their copyright owners, unless otherwise agreed
+# upon. The license for this file, and modifications and additions to the
+# file, is the same license as for the pristine package itself (unless the
+# license for the pristine package is not an Open Source License, in which
+# case the license is the MIT License). An "Open Source License" is a
+# license that conforms to the Open Source Definition (Version 1.9)
+# published by the Open Source Initiative.
+
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
+#
+
+
+%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
+
+Name:           teleport
+Version:        15.4.6
+Release:        0
+Summary:        Identity-aware, multi-protocol access proxy
+License:        AGPL-3.0-only
+URL:            https://github.com/gravitational/teleport
+Source:         %{name}-%{version}.tar.gz
+# go vendoring
+Source1:        vendor.tar.gz
+Source2:        webassets.tar.gz
+Source3:        teleport.service
+Source4:        teleport.yaml
+Source5:        tbot.yaml
+# Rust vendoring
+Source6:        vendor.tar.zst
+BuildRequires:  cargo >= 1.69
+BuildRequires:  cargo-packaging
+BuildRequires:  git-core
+BuildRequires:  go >= 1.20
+BuildRequires:  pam-devel
+BuildRequires:  systemd-rpm-macros
+Requires:       teleport-tctl
+
+%description
+Teleport is the easiest, most secure way to access all your infrastructure. Teleport is an identity-aware, multi-protocol access proxy which understands SSH, HTTPS, RDP, Kubernetes API, MySQL, MongoDB and PostgreSQL wire protocols.
+
+On the server-side, Teleport is a single binary which enables convenient secure access to behind-NAT resources such as:
+* SSH nodes - SSH works in browsers too!
+* Kubernetes clusters
+* PostgreSQL, MongoDB, CockroachDB and MySQL databases
+* Internal Web apps
+* Windows Hosts
+* Networked servers
+
+%package -n teleport-tctl
+Summary:        CLI tool for managing a teleport server
+License:        Apache-2.0
+
+%description -n teleport-tctl
+An administrative tool that can configure Teleport Auth Service.
+
+%package -n teleport-tsh
+Summary:        CLI tool for logging into nodes via Teleport SSH
+License:        Apache-2.0
+
+%description -n teleport-tsh
+A tool that lets end users interact with Teleport nodes. This replaces ssh.
+
+%package -n teleport-tbot
+Summary:        CLI tool for Machine ID
+License:        Apache-2.0
+
+%description -n teleport-tbot
+Machine ID is a service that programmatically issues and renews short-lived certificates to any service account (e.g., a CI/CD server) by retrieving credentials from the Teleport Auth Service. This enables fine-grained role-based access controls and audit.
+tbot is the executable belonging to the Machine ID service.
+
+%package -n teleport-fdpass-teleport
+Summary:        Significantly reduce resource consumption by large numbers of SSH connections
+License:        Apache-2.0
+
+%description -n teleport-fdpass-teleport
+fdpass-teleport can be optionally used by Machine ID to significantly reduce resource consumption in use-cases that create large numbers of SSH connections (e.g. Ansible).
+
+%prep
+%setup -q
+%setup -q -T -D -a 1
+%setup -q -T -D -a 2
+tar xvf %{SOURCE6} -C tool/fdpass-teleport
+
+%build
+
+mkdir -p lib/web/build/webassets
+cp -r webassets/teleport/* lib/web/build/webassets
+
+go build \
+   -tags "pam webassets_embed" \
+   -mod=vendor \
+   -buildmode=pie \
+   -ldflags="-w -s -X main.VERSION=%{version}" \
+   -o teleport ./tool/teleport
+go build \
+   -tags "pam" \
+   -mod=vendor \
+   -buildmode=pie \
+   -ldflags="-w -s -X main.VERSION=%{version}" \
+   -o tsh ./tool/tsh
+go build \
+   -tags "pam" \
+   -mod=vendor \
+   -buildmode=pie \
+   -ldflags="-w -s -X main.VERSION=%{version}" \
+   -o tbot ./tool/tbot
+go build \
+   -tags "pam" \
+   -mod=vendor \
+   -buildmode=pie \
+   -ldflags="-w -s -X main.VERSION=%{version}" \
+   -o tctl ./tool/tctl
+
+cd tool/fdpass-teleport
+%{cargo_build}
+
+%install
+# Install the binary.
+install -D -m 0755 tsh "%{buildroot}/%{_bindir}/tsh"
+install -D -m 0755 tctl "%{buildroot}/%{_bindir}/tctl"
+install -D -m 0755 tbot "%{buildroot}/%{_bindir}/tbot"
+install -D -m 0755 tool/fdpass-teleport/target/release/fdpass-teleport "%{buildroot}/%{_bindir}/fdpass-teleport"
+install -D -m 0755 teleport "%{buildroot}/%{_sbindir}/teleport"
+install -D -m 644 %{SOURCE3} %{buildroot}%{_unitdir}/teleport.service
+install -D -m 644 %{SOURCE4} %{buildroot}%{_sysconfdir}/teleport.yaml
+install -D -m 644 examples/systemd/machine-id/machine-id.service %{buildroot}%{_unitdir}/
+install -D -m 644 %{SOURCE5} %{buildroot}%{_sysconfdir}/tbot.yaml
+
+# teleport service
+
+%pre -n teleport
+%service_add_pre teleport.service
+
+%post -n teleport
+%service_add_post teleport.service
+
+%preun -n teleport
+%service_del_preun teleport.service
+
+%postun -n teleport
+%service_del_postun teleport.service
+
+# machine-id service
+
+%pre -n teleport-tbot
+%service_add_pre machine-id.service
+
+%post -n teleport-tbot
+%service_add_post machine-id.service
+
+%preun -n teleport-tbot
+%service_del_preun machine-id.service
+
+%postun -n teleport-tbot
+%service_del_postun machine-id.service
+
+%files -n teleport
+%doc README.md
+%license LICENSE
+%{_sbindir}/teleport
+%{_unitdir}/teleport.service
+%config(noreplace) %{_sysconfdir}/teleport.yaml
+
+%files -n teleport-tsh
+%doc README.md
+%license LICENSE
+%{_bindir}/tsh
+
+%files -n teleport-tctl
+%doc README.md
+%license LICENSE
+%{_bindir}/tctl
+
+%files -n teleport-tbot
+%doc README.md
+%license LICENSE
+%{_bindir}/tbot
+%{_unitdir}/machine-id.service
+%config(noreplace) %{_sysconfdir}/tbot.yaml
+
+%files -n teleport-fdpass-teleport
+%doc README.md
+%license LICENSE
+%{_bindir}/fdpass-teleport
+
+%changelog

teleport.yaml

@@ -0,0 +1,35 @@
+# Please check the documentation at
+# https://goteleport.com/docs/setup/reference/config/
+
+# Sample Teleport configuration file.
+# Creates a single proxy, auth and node server.
+#
+# Things to update:
+#  1. license.pem: You only need a license from https://dashboard.goteleport.com
+#     if you are an Enterprise customer.
+#
+teleport:
+  nodename: your-hostname-goes-here
+  data_dir: /var/lib/teleport
+  log:
+    output: stderr
+    severity: INFO
+    format:
+      output: text
+  ca_pin: ""
+auth_service:
+  enabled: "yes"
+  listen_addr: 0.0.0.0:3025
+ssh_service:
+  enabled: "yes"
+  labels:
+    env: example
+  commands:
+  - name: hostname
+    command: [hostname]
+    period: 1m0s
+proxy_service:
+  enabled: "yes"
+  listen_addr: 0.0.0.0:3023
+  https_keypairs: []
+  acme: {}

vendor.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c747cd9276e98cfa91856cda0d4d3bcfe732c4ef595ebbf9463cdf7570471106
+size 51518081

vendor.tar.zst

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:b480dee68be122e0800be803149b442ad6549a40c193608419ee22644399aed2
+size 716045

webassets.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:82995946fa24dec4df96b0ca17a295f420d78a442272a59251de2af1dae4633f
+size 4314856