GitLab Delegated Joining (#22705)

* Add type for GitLab ProvisionToken

* Add default behaviour for domain

* Add IDTokenClaims for GitLab

* Add gitlab token source and token validator

* Thread GitLab support through auth and tbot packages

* Adjust cluster name fetching in token validator

* Initialize GitLab token validator in auth

* Improve comment on `sub`

* Working GitLab CI delegated joining

* Add additional token rule fields

* Add checking for new configuration fields

* add additional test cases for validation of gitlab config struct

* Add TestAuth_RegisterUsingToken_GitLab

* Add tests for IDTokenSource

* Fix imports

* Add tests for GitLab Token Validator

* Fix some comments that were incomplete

* Add license headers
This commit is contained in:
Noah Stride
2023-03-16 16:19:11 +00:00
committed by GitHub
parent 81f319d3e3
commit acb255cd88
20 changed files with 3619 additions and 1578 deletions
+1
View File
@@ -44,6 +44,7 @@ var SupportedJoinMethods = []string{
string(types.JoinMethodIAM),
string(types.JoinMethodGitHub),
string(types.JoinMethodCircleCI),
string(types.JoinMethodGitLab),
}
var log = logrus.WithFields(logrus.Fields{
+1
View File
@@ -502,6 +502,7 @@ func (b *Bot) renewIdentityViaAuth(
// renewing using existing credentials.
case types.JoinMethodIAM,
types.JoinMethodGitHub,
types.JoinMethodGitLab,
types.JoinMethodCircleCI:
ident, err := b.getIdentityFromToken()
return ident, trace.Wrap(err)