Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve Observability for Join Token Deletion Events in Audit Logs #49198

Open
pnrao1983 opened this issue Nov 19, 2024 · 0 comments
Open

Improve Observability for Join Token Deletion Events in Audit Logs #49198

pnrao1983 opened this issue Nov 19, 2024 · 0 comments
Labels
audit-log Issues related to Teleports Audit Log c-vkc Internal Customer Reference feature-request Used for new features in Teleport, improvements to current should be #enhancements

Comments

@pnrao1983
Copy link
Contributor

What would you like Teleport to do?
Teleport does not log an event when a join token is manually deleted. This lack of visibility makes it challenging for administrators to investigate issues such as unexpectedly removing tokens before expiry. A long-lived join token (180 days) was removed, causing difficulty in joining new nodes.

Impact: Customers with complex setups, such as multiple on-prem networks where Teleport is the sole access method, face severe accessibility issues if tokens are deleted without visibility into the cause.
What problem does this solve?

If a workaround exists, please include it.
Until this feature is implemented, customers are advised to use short-lived tokens or implement automation to regenerate tokens periodically. However, these solutions may not fit all use cases, such as the one described above.
Proposed Solution:
Add a join_token.delete Audit Event:
Log details such as:
Actor: User, role, or system process responsible for deletion.
Timestamp: Exact time of the deletion.
Token Details: Token name and associated metadata (e.g., node type, validity period).

@pnrao1983 pnrao1983 added audit-log Issues related to Teleports Audit Log feature-request Used for new features in Teleport, improvements to current should be #enhancements c-vkc Internal Customer Reference labels Nov 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
audit-log Issues related to Teleports Audit Log c-vkc Internal Customer Reference feature-request Used for new features in Teleport, improvements to current should be #enhancements
Projects
None yet
Development

No branches or pull requests

1 participant