Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

MWI: Decouple identity output for SSH/Identity use-cases #53272

Open
strideynet opened this issue Mar 21, 2025 · 0 comments
Open

MWI: Decouple identity output for SSH/Identity use-cases #53272

strideynet opened this issue Mar 21, 2025 · 0 comments
Labels
feature-request Used for new features in Teleport, improvements to current should be #enhancements machine-id

Comments

@strideynet
Copy link
Contributor

strideynet commented Mar 21, 2025

Today, when you want to generate an identity file for use with an access plugin or API client, you use the identity output of tbot. When you want to generate a SSH config, you use the identity output of tbot. Effectively, the identity output is overloaded for multiple use-cases.

This has a few negative impacts:

  • Unnecessary work for a use-case is completed (e.g generating SSH configs) and a failure of this unnecessary work can prevent the output generating correctly.
  • Overly complex UX, users must understand which configuration options are relevant to their use-case, and these two use-cases contrast significantly.

We should create a plan to decouple the UX for these two stories. We'll want to avoid creating any breaking changes. As an initial thought for discussion:

  1. Introduce identity/v2 which is designed for pure identity use-cases
  2. Introduce openssh which is designed to provide an OpenSSH compatible configuration/credentials
  3. Provide a migration command which moves users from identity to openssh or identity/v2 depending on their usecase.
@strideynet strideynet added feature-request Used for new features in Teleport, improvements to current should be #enhancements machine-id labels Mar 21, 2025
@strideynet strideynet changed the title MWI: Decouple identity file and SSH output MWI: Decouple identity output for SSH/Identity use-cases Mar 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature-request Used for new features in Teleport, improvements to current should be #enhancements machine-id
Projects
None yet
Development

No branches or pull requests

1 participant