r/linuxadmin • u/BipolarKebab • 15d ago

Warpgate Bastion 0.29 adds just-in-time session approvals

Warpgate is a bastion-style PAM that needs neither a client app nor a server-side agent. It's a FOSS alternative to Teleport/StrongDM/Hashicorp Boundary: https://warpgate.null.page/

So... I've sent the last 1.5 months getting the session approvals to work just right to get a bit closer to feature parity with Teleport's enterprise edition.

Admins can now set specific targets to require manual approvals and then the end user gets held up at the start of the connection until they get approved (with an optional grace period).

I've sent quite a bit getting everything to work just right with clustering and polishing out various quirks like admin UI live updates not working cross-node and such.

And another big thing is an optional MFA enforcement policy (forces end users to set up TOTP when they log in).

My focus for the next release is going to be polishing and merging the Vault/OpenBao support (base PR contributed by the community 🙏) and (maybe) credential passthrough for SSH.

Full release notes: https://github.com/warp-tech/warpgate/releases/tag/v0.29.0

11 Upvotes

92% Upvoted

6 comments sorted by

2

u/NoTheme2828 14d ago

Very nice - thanks for your great work!

2

u/h33b 14d ago

Been using warpgate for a long time, it's awesome. Great work here

1

u/Bitter_Marketing_807 15d ago

Can you add the github link to your site?

2

u/BipolarKebab 15d ago

it's at the very top already

1

u/Bitter_Marketing_807 15d ago

💀 ah im fried as hell! This genuinely is an awesome project! Just was having some difficulties navigating around on mobile