opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-09-19 01:58:44 +08:00
Code Issues Packages Projects Releases Wiki Activity
27,004 Commits 9,613 Branches 7,118 Tags
041ea89e6930dd47091b09c0c6fd50ef4c1ef95b
Commit Graph
1148 Commits
Author SHA1 Message Date
Kevin b1922cd5f8 Add native review config and app-level client for Slack plugin (#67208) 
* Add review config and app-level client for slack plugin

* Address feedback
 2026-06-10 18:31:52 +00:00
Gavin Frazar 6b368c0234 Quote VERSION in docs make recipe (#67639) 
VERSION can be empty if there is an error running get-version.
Quote the arg so that empty VERSION is detected and returns
an error when running make docs.
 2026-06-09 22:46:53 +00:00
Kevin ed080fa018 Add Slack Socket Mode client for app interactions (#67148) 
* Add slack socketmode client

* Address feedback; extend status; increase write wait

* Apply auto-reset to retry attempts counter

* Add link_disabled as fatal error

* Address feedback; change omitempty to omitzero
 2026-06-09 17:54:44 +00:00
dependabot[bot]andTiago Silva f997e37f41 Bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1 (#67453) 
* Bump github.com/quic-go/quic-go from 0.57.0 to 0.59.1

Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.57.0 to 0.59.1.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](https://github.com/quic-go/quic-go/compare/v0.57.0...v0.59.1)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.59.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* go-mod-tidy-all

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>
 2026-06-09 14:13:02 +00:00
dependabot[bot] 3e6fe4e654 Bump github.com/hashicorp/terraform-plugin-testing (#67555) 
Bumps the go group with 1 update in the /integrations/terraform-mwi directory: [github.com/hashicorp/terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing).


Updates `github.com/hashicorp/terraform-plugin-testing` from 1.15.0 to 1.16.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-testing/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-testing/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/terraform-plugin-testing/compare/v1.15.0...v1.16.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/terraform-plugin-testing
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-09 12:25:39 +00:00
teleport-renovate[bot]andChris Thach 04471ea746 Update Go version to v1.26.4 (#67476) 
* Update Go version to v1.26.4

* Rm GO_VERSION from Makefile/Dockerfile and rely on go.mod to inform Go version. Update code to adhere to 1.26 deprecation/changes.

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

* Bump e to 54d1d0cb67b71860b943de477b3146d32ccdd74a.

Signed-off-by: Chris Thach <chris.thach@goteleport.com>

---------

Signed-off-by: Chris Thach <chris.thach@goteleport.com>
Co-authored-by: teleport-renovate[bot] <275214890+teleport-renovate[bot]@users.noreply.github.com>
Co-authored-by: Chris Thach <chris.thach@goteleport.com>
 2026-06-08 14:28:40 +00:00
rosstimothy 4f17314a11 Initial migration to the Opaque API (#67279) 
* Convert existing non-gogo codegen to the Hybrid API

Contributes to https://github.com/gravitational/teleport/issues/66776.

All existing protos explicitly set to API_OPEN have been change to
API_HBYRID. The new codegen was performed via make grpc. There are no
other functional changes to the code to start consuming the Hybrid API
those will come later. The intent is to get all Hybrid codegen in and
backported to ease the transition.

* Initial migration to the Opaque API

Contributes to https://github.com/gravitational/teleport/issues/66776.

All of the changes here are mechanical conversions generated from
`open2opaque rewrite -levels=green ./...`. There will be a follow up
to this in teleport.e which does the same. Once all changes have been
merged the process will be repeated with -levels=yellow followed by
-levels=red.


See https://protobuf.dev/reference/go/opaque-migration/ for more
details.
 2026-06-05 14:52:58 +00:00
teleport-renovate[bot]andChris Thach 887960a4dc Update Go version to v1.25.11 (#67420) 
Co-authored-by: teleport-renovate[bot] <275214890+teleport-renovate[bot]@users.noreply.github.com>
Co-authored-by: Chris Thach <chris.thach@goteleport.com>
 2026-06-04 15:31:22 +00:00
Ryan Clark 5b6ff5bf86 Protect recording metadata/thumbnail generation from panics (#66078) 
* Protect recording metadata/thumbnail generation from panics

* Fix test
 2026-06-03 10:54:39 +00:00
Ryan Clark 2405c6e786 Add property-based testing for RDPState (#67317) 
* Add property-based testing for RDPState

* Move max screen size to separate test to avoid 8192x8192 framebuffer allocation

* Be consistent with avoiding IronRDP OOB

* Move rapid draws to outside of the run

* Fix bug in test util WrapFastPathPDU

* Reduce allocations in CI, fix row byte calculatino
 2026-06-03 07:05:25 +00:00
dependabot[bot] fce37cc2cf Bump the go group in /integrations/terraform with 3 updates (#67359) 
Bumps the go group in /integrations/terraform with 3 updates: [github.com/DataDog/datadog-agent/pkg/template](https://github.com/DataDog/datadog-agent), [google.golang.org/grpc](https://github.com/grpc/grpc-go) and [github.com/mailgun/errors](https://github.com/mailgun/errors).

Updates `github.com/DataDog/datadog-agent/pkg/template` from 0.77.2 to 0.79.1
- [Release notes](https://github.com/DataDog/datadog-agent/releases)
- [Changelog](https://github.com/DataDog/datadog-agent/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/DataDog/datadog-agent/compare/pkg/api/v0.77.2...pkg/api/v0.79.1)

Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1)

Updates `github.com/mailgun/errors` from 0.4.0 to 0.6.0
- [Release notes](https://github.com/mailgun/errors/releases)
- [Commits](https://github.com/mailgun/errors/compare/v0.4.0...v0.6.0)

---
updated-dependencies:
- dependency-name: github.com/DataDog/datadog-agent/pkg/template
  dependency-version: 0.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mailgun/errors
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-02 15:36:30 +00:00
dependabot[bot] 7eae3c200e Bump the go group in /integrations/event-handler with 2 updates (#67358) 
Bumps the go group in /integrations/event-handler with 2 updates: [github.com/DataDog/datadog-agent/pkg/template](https://github.com/DataDog/datadog-agent) and [github.com/alecthomas/kong](https://github.com/alecthomas/kong).


Updates `github.com/DataDog/datadog-agent/pkg/template` from 0.77.2 to 0.79.1
- [Release notes](https://github.com/DataDog/datadog-agent/releases)
- [Changelog](https://github.com/DataDog/datadog-agent/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/DataDog/datadog-agent/compare/pkg/api/v0.77.2...pkg/api/v0.79.1)

Updates `github.com/alecthomas/kong` from 1.14.0 to 1.15.0
- [Commits](https://github.com/alecthomas/kong/compare/v1.14.0...v1.15.0)

---
updated-dependencies:
- dependency-name: github.com/DataDog/datadog-agent/pkg/template
  dependency-version: 0.79.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/alecthomas/kong
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-02 14:45:00 +00:00
dependabot[bot] 12daaf29b8 Bump the go group in /api with 12 updates (#67353) 
Bumps the go group in /api with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-piv/piv-go/v2](https://github.com/go-piv/piv-go) | `2.5.0` | `2.6.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260406210006-6f92a3bedf2d` | `0.0.0-20260526163538-3dc84a4a5aaa` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.80.0` | `1.81.1` |

Updates `github.com/go-piv/piv-go/v2` from 2.5.0 to 2.6.0
- [Release notes](https://github.com/go-piv/piv-go/releases)
- [Commits](https://github.com/go-piv/piv-go/compare/v2.5.0...v2.6.0)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0)

Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/metric` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260406210006-6f92a3bedf2d to 0.0.0-20260526163538-3dc84a4a5aaa
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.80.0 to 1.81.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.80.0...v1.81.1)

---
updated-dependencies:
- dependency-name: github.com/go-piv/piv-go/v2
  dependency-version: 2.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260526163538-3dc84a4a5aaa
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-06-02 14:43:23 +00:00
Kevin d27d251f95 Improve access request message titles for slack and discord plugins (#67285) 
* Add RequestKind to plugin AccessRequestData

* Improve access request message titles for slack and discord plugins

* Clarify long-term access message
 2026-06-01 22:18:06 +00:00
Kevin bb97c8f5db Add RequestKind to plugin AccessRequestData (#67281) 2026-06-01 21:51:58 +00:00
Marco Dinis 8528e7d3a8 Update terraform module for Azure VMs to allow uniform VMSS enrollment (#66999) 2026-06-01 17:07:25 +00:00
Hugo Shaka 1453212f2a operator: add secret lookup to oidc's google_service_account (#67196) 2026-05-29 20:56:40 +00:00
rosstimothy 45a427eedc Rework scopes feature flags (#67073) 
Replace the functions in the scopes package to infer if scoped features
are enabled with a concrete struct that is injected to consumers. This
permits tests to toggle scopes features without having to specify environment
variables.
 2026-05-29 13:37:25 +00:00
Yassine Bounekhla c28001c8c9 Add web_terminal_copy_mode role option (#66597) 
* add web terminal copy mode role option

* CR
 2026-05-28 19:58:49 +00:00
Bernard Kim 6c23ad9a69 Remove unused terraform reference doc (#67145) 2026-05-28 15:43:59 +00:00
Trevor North d664314511 Fix link to docs in terraform provider readme (#66804) 2026-05-28 09:55:16 +00:00
Hugo Shaka 725707a917 Add scoped bot support to Terraform (#66961) 
* Add scoped bot support to Terraform

* Document scoped bot

* Remove useless fixture + make scope part of RFD 153
 2026-05-27 17:04:17 +00:00
Noah Stride d79bff946e Revert x/crypto ssh update (#67111) 2026-05-27 12:36:00 +00:00
Alan Parra a6b9e2fd49 chore: Bump golang.org/x/ dependencies (#67011) 
* chore: Bump golang.org/x/ dependencies

* tidy

* Fix TestTCPIPForward (close resources in the correct order)
 2026-05-25 14:27:42 +00:00
Hugo Shaka 57ee7542c8 Force resource replacement on scope change (#66960) 2026-05-22 21:43:42 +00:00
Hugo Shaka 9443943375 crdgen: address scope-related bugs (#66955) 
* crdgen: restore age column + fix additional column scoped bug

* Make scope field immutable

* Scope bots
 2026-05-22 21:09:42 +00:00
Hugo Shaka e2c22ebd54 Add scoped mode for the operator (#66762) 
This work is not production ready yet. While this work makes the
operator support running with a scoped token, this is not enough for a
public release.

Several failure modes must be addressed, including scoped name
conflicts, and operators fighting for ownership of a resource.
 2026-05-22 20:48:45 +00:00
dependabot[bot]andTiago Silva d9fd110fd7 Bump github.com/containerd/containerd from 1.7.30 to 1.7.32 (#66984) 
* Bump github.com/containerd/containerd from 1.7.30 to 1.7.32

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.30 to 1.7.32.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](https://github.com/containerd/containerd/compare/v1.7.30...v1.7.32)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.32
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* go mod tidy all

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>
 2026-05-22 13:54:17 +00:00
dependabot[bot]andAlan Parra 195e80421c build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1 (#66864) 
* build(deps): bump github.com/go-git/go-git/v5 from 5.19.0 to 5.19.1

Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.19.0 to 5.19.1.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](https://github.com/go-git/go-git/compare/v5.19.0...v5.19.1)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* tidy

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alan Parra <alan.parra@goteleport.com>
 2026-05-19 17:26:50 +00:00
dependabot[bot]andAlan Parra 3b1455c6a7 Bump github.com/apache/thrift from 0.22.0 to 0.23.0 (#66511) 
* Bump github.com/apache/thrift from 0.22.0 to 0.23.0

Bumps [github.com/apache/thrift](https://github.com/apache/thrift) from 0.22.0 to 0.23.0.
- [Release notes](https://github.com/apache/thrift/releases)
- [Changelog](https://github.com/apache/thrift/blob/master/CHANGES.md)
- [Commits](https://github.com/apache/thrift/compare/v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: github.com/apache/thrift
  dependency-version: 0.23.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update e_imports.go

* Tidy modules

* make fix-imports

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alan Parra <alan.parra@goteleport.com>
 2026-05-19 14:10:12 +00:00
Hugo ShakaandAdam Carheden 479f8e59df Operator scope CRD column (#66730) 
* Simplify crdgen scope API + add scope column

* re-generate operator CRDs

* fixup! re-generate operator CRDs

* Update schemagen.go

filed/field

---------

Co-authored-by: Adam Carheden <adam.carheden@goteleport.com>
 2026-05-15 14:49:55 +00:00
williamong-tel 6500619d93 Add disconnect expired cert and lock mode for scoped role (#66376) 
* Add disconnect expired cert and lock mode for scoped role

Update IAC docs

* respond to code review

Add a scoped authorizer in the forwarder_test

fix up proto comments

Update forwarder.go

* fix forwarder setting nil disconnectExpiredCert

* Update validate lock to accept empty string - will be treated as best_effort down the line

add comment
 2026-05-14 21:51:48 +00:00
Edoardo Spadolini 737bda9b31 Optimize contains(split()) in resource expression parser (#66645) 
* Bump gravitational/predicate to WIP commit

* Remove some allocations in predicate expressions

* Optimize contains(split()) in resource expression parser

* Do a type-safe assert on the result of astutil.Apply

* Keep the full value argument in the early exit of optimizeSplitContains

* Handle degenerate cases in splitContains

* Expand on the benchmark

* Rename LazyStringSlice to StringSlice

* Document StringSlice

* Fix test

* Fix handling of split on empty string

* Bump gravitational/predicate to 1.4.0

* Optimize multibyte delimiters too

* Update godoc for optimizeSplitContains

* Clarify the logic in splitContainsAffix

* Actually use multi-byte delimiters in BenchmarkSplitContains

* Revert "Actually use multi-byte delimiters in BenchmarkSplitContains"

This reverts commit 595bb85ba9.

* Revert "Optimize multibyte delimiters too"

This reverts commit f285928e99.

* Add some tests with overlap of target and delimiter

* Clarify the return value of the AST optimization visitors

* Add unit test just for the new string splitting

* Add some broken utf8 coverage too
 2026-05-14 21:34:38 +00:00
Hugo Shaka d17de6f9e2 Scope support in embedded tbot (#66750) 
* Support scopes in tbot's unstable creds service

* Support scopes for embedded bots
 2026-05-14 19:38:48 +00:00
Noah Stride 1894178df3 Wildcard support for kubernetes join method (#66520) 
* Add protos

* implement validation and matching support

* generated integrations stuff

* De Morgan, and his faithful followers, have once again defeated me in battle

* Udpate tests in lib/kube/token

* Extend join_kubernetes_test.go

* Fix missing param

* Extend validation tests

* Fix minor nits

* qF1001: CoUld aPpLY de MORgan'S LaW (stAticCHEck)
 2026-05-13 08:47:24 +00:00
Hugo Shaka 7eb9914edc Revert "restore old oauth logic for seamless transition" (#66483) 
This reverts commit 83b05c8ecb.
 2026-05-12 16:28:05 +00:00
williamong-tel 947cb73f0c add enhanced session recording and session recording mode for scoped roles (#65996) 2026-05-11 22:37:12 +00:00
dependabot[bot]andAlan Parra 64fb9e61f3 Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 (#66622) 
* Bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0

Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.18.0 to 5.19.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](https://github.com/go-git/go-git/compare/v5.18.0...v5.19.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Tidy modules

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alan Parra <alan.parra@goteleport.com>
 2026-05-11 22:04:53 +00:00
Kevin 61a403fab9 Remove unused parameter from access plugin NewApp (#66539) 2026-05-11 18:25:26 +00:00
Gavin Frazar 68c0045e09 Support rds matcher in teleport/discovery/aws (#66600) 2026-05-11 15:52:28 +00:00
alex hemard 88e956375d [docs] Azure Discovery with Terraform docs (#66326) 2026-05-11 14:20:38 +00:00
dependabot[bot]andTiago Silva 04b753ee0c Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 (#66594) 
* Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0

Bumps [github.com/in-toto/in-toto-golang](https://github.com/in-toto/in-toto-golang) from 0.9.0 to 0.11.0.
- [Release notes](https://github.com/in-toto/in-toto-golang/releases)
- [Changelog](https://github.com/in-toto/in-toto-golang/blob/master/CHANGELOG.md)
- [Commits](https://github.com/in-toto/in-toto-golang/compare/v0.9.0...v0.11.0)

---
updated-dependencies:
- dependency-name: github.com/in-toto/in-toto-golang
  dependency-version: 0.11.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* go mod tidy all

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>
 2026-05-11 11:55:52 +00:00
teleport-renovate[bot] 42a4eaafee Update Go toolchain version to v1.25.10 (#66568) 
Co-authored-by: teleport-renovate[bot] <275214890+teleport-renovate[bot]@users.noreply.github.com>
 2026-05-08 22:48:49 +00:00
Pavel 5360b7790a fix vnet_config terraform schema not applying exclude_fields and computed_fields (#66280) 
* correct field selector casing in VnetConfig terraform yaml

* move metadata.namespace and metadata.revision to computed_fields

* move metadata.revision to exclude_fields

* fix singular_resource template not copying server response in Update for plain-struct resources
 2026-05-08 12:32:11 +00:00
alex hemard 27e15a2050 random_id and http data source respect var.create (#66497) 2026-05-07 22:47:09 +00:00
Kevin 4dcfcc608f Add RBAC rule review_requests.submit_for_users (#66254) 2026-05-07 20:49:43 +00:00
Adam Pickering e2dadc573e Remove redundant database configuration references in docs (#66447) 
* Remove redundant database configuration references

This:
1. Adds documentation for the mysql_server_version field of proxy_service
   to the general config reference and improves formatting for a couple
   of fields there.
2. Removes database config/resource references that are redundant due to
   being covered by auto-generated docs or the more centralized teleport
   config docs.

* Update docs redirects

* Update internal links pointing to deleted pages

* Update DatabaseSpecV3.Protocol comment with allowed database protocol types

- This PR is removing the old `db` resource reference.
- The new `db` resource reference is generated from the DatabaseV3
  protobuf type.
- The old `db` resource reference defined the allowed values of the
  protocol field, whereas this information is not in the `DatabaseV3` type.
- docs/pages/identity-security/session-summaries.mdx links to the `db`
  resource reference, using it as a source of information on which values
  are allowed for the protocol field.

Therefore, we must update the DatabaseV3 protobuf type with information
on which values are allowed for the protocol field.
 2026-05-07 17:44:48 +00:00
Ryan Clark 3c4f1617ec Add metadata/thumbnail generation for desktop recordings (#65381) 
* Add metadata/thumbnail generation for desktop recordings

* Rename isPTYSession to metadataParamsForSessionEnd

* go mod tidy

* Disable the processor if RDP decoder is not available

* Reuse png.Encoder and buffer instead of creating new per screenshot

* Add clarifying comment about returning nil, nil when no decoder

* Add Windows desktop end events

* Set the session start time from end event if we don't already have it

* Break import cycle by extracting MFA JSON types to lib/client/mfatypes

* pnpm format

* go mod tidy all

* Remove flakey test that's covered through other paths

* Use a different interval for desktop sessions, make frames smaller than thumbnail

* Set correct flags when resuming mid-upload

* go.sum

* Handle desktop events in session post processor

* Add a semaphore to desktop recording processing

* Populate metadata from end event if start event not present

* Formatting

* Pass session start time to the metadata processor

* Reduce image sizes in tests
 2026-05-07 11:23:04 +00:00
Dan Upton daccc169a5 Fix untidy SPIFFE modules (#66512) 2026-05-07 10:35:16 +00:00
charlestp 5b1fa95e8e Update discovery terraform version requirement to 'next version' 18.8.0 (#66480) 2026-05-06 17:44:32 +00:00