The Integrations Service is not used in ServerWithRoles.
It is only used in `lib/auth.NewGRPCServer`
This PR removes this service instance in order to remove dead code.
* Fix JIRA issue type
During set up we ask for the Jira Issue Type, but then we always send
the `Task` type.
This PR changes the field's value to match the configured one.
* add test
This PR updates the parsers for the role
`spec.allow.request.thresholds.filter` and `spec.allow.review.where`
expression fields to support a new function `regexp.match(list, re)`.
It follows the typical teleport style following from role templates,
`where` expressions, login rules, and label expressions:
- `list` can be a `[]string` or a `string` (a single string is treated
as a list of length 1).
- `re` can be a glob pattern like `example-*` or a proper regex like
`^example-.*$` when surrounded by `^$`.
Some examples are included in the docs and tests.
I have switched from using `NewJSONBoolParser` to new dedicated parsers
based on `typical`. These should have better performance in terms of
speed and memory, be easier to extend in the future, and provide better
error messages when users write invalid expressions.
These were the only uses of `NewJSONBoolParser`, so it has been removed.
Changelog: add `regexp.match` to access request `filter` and `where`
expressions
* Wire context.Context into `auth/register.go`
* Thread `context.Context` through `auth.Register` and add tracing
* Unwrap error before recording it in the span
* @ requester in access requests
* Add NotifyUser to direct message user on request update
* resolve comments
* Update test to make sure message is sent
* Support Azure CLI Access on AKS with workload identity
* fix lint and properly pass along a logger
* fix typos
* reverse error check and fix typo
* fix terraform go.mod
* fix event handler go.mod
* Record passwordless username in the mfa_auth_challenge.validate event
* Correctly render mfa_auth_challenge.create events without an user
* Update snapshots
* Lint Terraform and Event-Handler
* lint terraform
* add Makefile lint targets for TF and event-handler
* address feedback
* Update integrations/event-handler/Makefile
Co-authored-by: Alan Parra <alan.parra@goteleport.com>
---------
Co-authored-by: Alan Parra <alan.parra@goteleport.com>
* Updates commit-hash to IronRDP fix/resilient-blobtype HEAD
* Updates commit-hash to IronRDP fix/resilient-blobtype HEAD
* Updates to latest IronRDP hash. Note that this hash is of a still-open PR (https://github.com/Devolutions/IronRDP/pull/436) and thus the IronRDP hash should be frozen until those changes are merged and the hash updated to IronRDP latest master
* Current hash corresponds to IronRDP branch (should be changed before merging).
* Updates ScardBackend message handling code to account for ascii variants
* Return a timeout when we receive a non-infinite timeout status change call
Includes minor refactor to clean up the code a bit.
* updates to latest IronRDP master hash
See #40432
Add a vale linter to catch instances of `Teleport Cloud` and `Teleport
Enterprise Cloud`. We are now referring to a single commercial edition,
Teleport Enterprise, and describing the hosting type separately from the
name of the edition.
This is a legacy convention for describing Teleport features. This
change ports the linter for `[Resource] Access` usage from
`gravitational/docs` to a vale style (we'll need to remove the linter
from `gravitational/docs` separately). It also excludes "Database Access
Controls" from the linter, since Database Access Controls is a current
Teleport feature.
* DiscoveryService: exclusive worker per Discovery Group
This PR ensures only one DiscoveryService is running per DiscoveryGroup.
It does so using a SemaphoreLock.
This should prevent any duplicate API calls and also prevent duplicate
resources on Teleport side.
* improve eice server name and releaseGroupLockFn init
* review pt2
* improve error handling
* re-organize lock acquire
* improve eice node name handling
* simplify lock on discovery group
* Remove lock logic and rely on node name to prevent dups
* improve test comment
* change comment about skipping nodes
* Mentioned in the documentation that we ignore "kube-system" and "kube-public" namespaces for kube app discovery.
* Use admonition
Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
* Rerender kube agent docs
---------
Co-authored-by: Hugo Shaka <hugo.hervieux@goteleport.com>
* Convert recursive listing to use Proxy gRPC API
Removes deprecated usage of ProxyClient in getClusterClients used
for tsh ls -R and tsh db ls -R.
* Remove unsued helper functions
* Replace removed test
* Remove unused db listing function
* convert tsh apps ls -R and tsh kube ls -R
* remove unused function and tweak IsExpired
* create common testcase for listing resources
This PR adds a special group (last one) to match the `terraform` and
`event-handler` integrations.
These two integrations aren't imported by teleport codebase but they
import teleport packages. The issue arrises from the fact that they have
their own module namespace. In order to distinguish their module
namespace, this PR proposes moving them into a new (last) import group
and keep Teleport into a separate group. Unfortunately, at the time of
writing `gci` doesn't support skip directories which causes problems for
our `lint` CI step as it will fail.
This results in the following structure for files within the two
integrations:
- standard
- default
- teleport
- specific integration
Signed-off-by: Tiago Silva <tiago.silva@goteleport.com>
Steven Martin