opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-11-01 21:52:02 +08:00
Code Issues Packages Projects Releases Wiki Activity
22,161 Commits 9,614 Branches 7,118 Tags
78c19bd65cecfc53d3946f56e4dfdab2ab2ff03e
Commit Graph
974 Commits
Author SHA1 Message Date
Noah Stride ee6e527eaf WMI: Allow max TTL for X509 and JWT SVIDs to be configured (#53787) 
* Add maximum_ttl fields to the WorkloadIdentity resource

* Update issuer service to respect configurable max TTLs

* Add tests for TTL specification

* Add validation logic & tests

* Update terraform provider

* Fix tbot max ttl limitations

* Clarify name of `ignoreMaximumTTL`

* Introduce `defaultTTL` constant

* Fix generation of jwt

* Update operator resources
 2025-04-09 17:28:51 +00:00
Noah Stride 47ec6d7222 Operator support for WorkloadIdentity resource (#53484) 
* Generate CRDs

* Update snapshots

* Add apis impl for WorkloadIdentity

* Add WorkloadIdentityReconciler

* Add test for WorkloadIdentityReconciler

* Update RBAC

* Update to include version in kind

* Fix license header

* Fix handling of well-known Struct type

* Ignore revsiion
 2025-04-09 14:18:31 +00:00
teleport-post-release-automation[bot] 1509493028 [auto] Update AMI IDs for 17.4.3 (#53841) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-04-09 03:21:02 +00:00
Matt Smith 82ef2fab6f Temporarily force pass tflint (#53600) 
* Temporarily force pass tflint

* Use flag instead of config file

* Ignore problematic module

* Fix loading issues and ignore modules

* Newline
 2025-04-07 18:18:13 +00:00
teleport-post-release-automation[bot] a3c7a32f1e [auto] Update AMI IDs for 17.4.2 (#53651) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-04-02 08:48:41 +00:00
Noah Stride 63e269a756 Operator support for Bot resource (#53453) 
* Add `Bot` manifests

* Update protos

* Add Bot API resource impl

* Add reconciler

* Fix bot CRD "versions" name

* Fix Unmarshal/Marshal panic for 153 resources

* Fix update test

* Mispell Marshalling

* Generate docs page

* Update role.yaml

* Add TeleportBot to resource list

* Update contributing

* Try to update the versions per RFD160

* Update k8s rbac for new resource name

* Use proto binary encoding for Marshal/Unmarshal

* Clear out unversioned crd

* More efficient deepcopyinto

* Fix license

* Add unmarshal options for protojson

* Update golden

* Fix RBAC
 2025-04-01 15:31:48 +00:00
rosstimothy 47f4247dfb Bump golang.org/x/net to v0.38.0 (#53596) 
The update addresses CVE-2025-22872. All modules importing an older
version of x/net were updated.
 2025-03-31 16:05:46 +00:00
teleport-post-release-automation[bot] 13b2598481 [auto] Update AMI IDs for 17.4.1 (#53569) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-03-29 23:22:14 +00:00
Cam Hutchison de3e8a34a7 [auto] Update AMI IDs for 17.4.0 (#53519) 2025-03-28 11:17:55 +00:00
Gavin Frazar 8d38eac6ce [docs] Fix role reference request_access docs (#53471) 
* Fix request_access godoc

* Update terraform docs

* Update operator CRD docs
 2025-03-26 22:43:56 +00:00
Noah Stride 7cbb46d2ed Support configuring StaticJWKS for the GitLab join method (#53386) 
* Update protobuf

* Implement and test ValidateTokenWithJWKS

* Update join logic to use new method for static jwks

* Update Terraform Provider

* Update operator docs/files

* Update goldenfile
 2025-03-25 18:03:09 +00:00
Hugo ShakaandJoao Ubaldo 8c8b3832c9 [buddy] helm: add support for secondFactors (#53274) 
* Helm: add support for multiple second factors

* Helm: better handle webauthn

* Helm: add tests

* Helm: update contributing reference link

* Helm: add doc

* Helm: update default value

* helm: deprecate secondFactor and user secondFactors by default

---------

Co-authored-by: Joao Ubaldo <me@joaoubaldo.com>
 2025-03-23 11:00:28 +00:00
Hugo Shaka 4fad952d20 helm: add topology spread constraints (#53276) 2025-03-21 14:50:43 +00:00
backport-bot-workflows[bot]andteleport-post-release-automation[bot] 253a36a96e [auto] Update AMI IDs for 17.3.4 (#53235) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-03-20 21:50:06 +00:00
teleport-post-release-automation[bot]andZac Bergquist f6793157ba [auto] Update AMI IDs for 17.3.3 (#52872) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
 2025-03-07 15:21:52 +00:00
Alan Parra c2335808cf chore: Bump golang.org/x/net to v0.37.0 (#52845) 2025-03-06 14:37:27 +00:00
Hugo Shaka 0fdfd4dd36 Remove script deprecated 5 years ago (#52814) 2025-03-05 18:57:45 +00:00
teleport-post-release-automation[bot] a18191cf9a [auto] Update AMI IDs for 17.3.2 (#52782) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-03-05 05:35:08 +00:00
Paul Gottschling 0fbbeff50c Replace Notices with Docusaurus syntax (#52634) 
Use Docusaurus syntax for admonitions so the docs engine does not need
to replace these. This is one step toward removing the
`remark-update-tags` plugin. See: gravitational/docs-website#94

Relevant commands are included below to make reproducing this work
easier.

1. Replace all `Notice` tags with `Admonition` tags.

2. Add `type="info"` if an Admonition is missing a type.

   To find instances:

   ```
   find docs/pages -name "*.mdx" -exec awk '
   BEGIN{a=0}
   a==0 && /<Admonition/{ a = 1 }
    a==1 && /type/{t = 1}
    a==1 && />/{ a = 0; if(t == 0) print FILENAME ":" FNR }' {} \;
   ```

3. Replace `type="notice"` with `type="note"`.

   To find instances:

   ```
   find docs/pages -name "*.mdx" -exec awk '
   BEGIN{a=0}
   a==0 && /<Admonition/{ a = 1 }
    a==1 && /type="notice"/{t = 1}
    a==1 && />/{ a = 0; if(t == 1) print FILENAME ":" FNR }' {} \;
   ```
 2025-03-04 15:51:27 +00:00
teleport-post-release-automation[bot] 8d0b22f75d [auto] Update AMI IDs for 17.3.1 (#52723) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-03-04 04:19:32 +00:00
Hugo Shaka 6cfeacb547 Fix RPM linking logic (#52703) 2025-03-03 17:40:27 +00:00
Hugo Shaka 61e58e9d82 helm: Support tuning readiness probe (#52535) 
* helm: support setting the readiness in teleport-cluster

* update snapshots

* fix typo
 2025-02-26 22:34:25 +00:00
teleport-post-release-automation[bot] cf2a74055b [auto] Update AMI IDs for 17.2.9 (#52491) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-02-25 22:21:47 +00:00
Alan Parra 97fa0704c3 chore: Bump /x/crypto and /x/oauth2 (#52436) 
* chore: Bump /x/crypto and /x/oauth2

* Remove toolchain directives
 2025-02-24 20:24:50 +00:00
teleport-post-release-automation[bot] 1abd94b707 [auto] Update AMI IDs for 17.2.8 (#52341) 
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
 2025-02-20 20:05:44 +00:00
teleport-post-release-automation[bot]GitHubCam Hutchison
 		667efde4e7 [auto] Update AMI IDs for 17.2.7 (#52169) 
Co-authored-by: GitHub <noreply@github.com>
Co-authored-by: Cam Hutchison <camh@goteleport.com>
 2025-02-14 21:56:45 +00:00
marie ecfce7ea23 docs: correcting links in examples directory (#52108) 2025-02-13 09:01:26 +00:00
Hugo ShakaandmaximumG d61d6bc46d feat(tbot): K8S Role creation is optional (#51919) 
Fixes #51181.

K8S `Role` & `RoleBinding` are created by default. Their creation does not depends on the `ServiceAccount` creation anymore.

Co-authored-by: maximumG <maxime.gerges@backmarket.com>
 2025-02-07 00:06:55 +00:00
Noah Stride 62c28bb692 tbot Helm Chart: Add ability to configure securityContext (#51817) 
* Add ability to configure securityContext of tbot pods

* Newline at end of file
 2025-02-05 09:09:57 +00:00
rosstimothy 1edb69677b Convert examples/teleport-usage to aws-sdk-go-v2 (#51677) 
* Convert examples/teleport-usage to aws-sdk-go-v2

* fix: apply fips to global config
 2025-01-31 11:34:17 +00:00
Andrew Burke a67d70b436 OCI join - add proto and client (#51444) 
This change adds protos, the client, and a bunch of boilerplate
for the Oracle join method.
 2025-01-29 20:11:16 +00:00
Zac Bergquist d71293f964 Replace usages of x/exp/maps with stdlib maps package (#51448) 2025-01-28 14:54:40 +00:00
Steven Martin f6907d2bc1 Fix spelling in helm charts (#51544) 2025-01-28 14:11:59 +00:00
teleport-post-release-automation[bot]andGitHub b4382d0dcb [auto] Update AMI IDs for 17.2.0 (#51334) 
Co-authored-by: GitHub <noreply@github.com>
 2025-01-22 04:57:15 +00:00
Hugo ShakaandTiago Silva 1b76f9743e kube-agent-update: Use the RFD-184 webapi proxy update protocol by default when possible (#50464) 
* kube-agent-update: Use the RFD-184 webapi proxy update protocol by default when possible

* Update integrations/kube-agent-updater/cmd/teleport-kube-agent-updater/main.go

Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>

* log update group

---------

Co-authored-by: Tiago Silva <tiago.silva@goteleport.com>
 2025-01-17 22:35:10 +00:00
Marco Dinis 8bc4b5322f Docs: remove mention to Teleport 6 (#51168) 2025-01-17 16:22:34 +00:00
teleport-post-release-automation[bot]andGitHub 412bf4f087 [auto] Update AMI IDs for 17.1.6 (#51010) 
Co-authored-by: GitHub <noreply@github.com>
 2025-01-14 10:53:41 +00:00
Brian Joerger ce30037005 Add SSO MFA docs (#50533) 
* Add SSO MFA docs.

* Address comments from zmb3.

* Fix links; minor style fix.

* Address comments.

* Try removing leading / in example links.

* Address Nic's comments.
 2025-01-13 20:13:12 +00:00
Bernard Kim 646329da7d operator: Support trusted_cluster resources (#49920) 
* Add UpsertTrustedClusterV2 rpc

This supersedes UpsertTrustedCluster rpc. V2 performs resource name
validation.

* Replace confusing UpsertValidationTrustedCluster name

* Use UpsertTrustedClusterV2 in tests

* Address feedback

- Remove unnecessary ping
- Update error messages
- Use skipNameValidation consts
- Validate cluster name before establishing trust
- Do not reveal cluster name in error message
- Use BadParameter instead of CompareFailed

* Use webclient.Find

* Fix test/lint

* Allow label updates

* Fix test

* Update CRDs

1. Run `make manifests`.
2. Run `make -C crdgen update-protos`.
3. Run `make -C crdgen update-snapshot`.

* Implement trusted_cluster CRD

* Update docs

* Support secret lookup

* Update secret lookup docs

* Fix error handling

* Use V2

* Implement CreateTrustedClusterV2 and UpdateTrustedClusterV2

* Address feedback

* Minor fixes

* Use Create/Update instead of Upsert

* Update crdgen

* Update trusted_cluster tests

* Move V2 RPCs to the trust service

* crdgen

* Remove V2 suffix

* 2024 -> 2025

* Use slog
 2025-01-13 17:21:09 +00:00
Paul Gottschling 4a2d8916d0 Remove v13 mentions in the docs (#50831) 
* Remove v13 mentions in the docs

Our policy is to remove mentions of the version prior to the most recent
deprecated version.

This change includes mentions of v13 in Helm chart values file comments.

* Clarify distroless images in Helm values

Responds to hugoShaka feedback.
 2025-01-08 19:37:21 +00:00
rosstimothy 77eef6055a Convert examples/dynamoathenamigration to use slog (#50802) 2025-01-07 15:44:32 +00:00
teleport-post-release-automation[bot]andGitHub 8b21221e70 [auto] Update AMI IDs for 17.1.4 (#50811) 
Co-authored-by: GitHub <noreply@github.com>
 2025-01-07 09:27:04 +00:00
teleport-post-release-automation[bot]andGitHub 86e558b7ba [auto] Update AMI IDs for 17.1.3 (#50714) 
Co-authored-by: GitHub <noreply@github.com>
 2025-01-06 12:27:10 +00:00
Cam Hutchison 909cc20a5d Update master for v18 (#47988) 
The v17 release branch has been made, so update master so that it refers
to v18.
 2024-12-31 15:48:49 +00:00
teleport-post-release-automation[bot]andGitHub 8ae5de8015 [auto] Update AMI IDs for 17.1.2 (#50633) 
Co-authored-by: GitHub <noreply@github.com>
 2024-12-30 21:36:35 +00:00
Hugo Shaka a399f77517 fixes an config indentation bug in the tbot chart (#50518) 2024-12-20 20:56:05 +00:00
teleport-post-release-automation[bot]andGitHub cc757ce987 [auto] Update AMI IDs for 17.1.1 (#50508) 
Co-authored-by: GitHub <noreply@github.com>
 2024-12-20 18:52:00 +00:00
teleport-post-release-automation[bot]andGitHub e5bf2cea04 [auto] Update AMI IDs for 17.1.0 (#50467) 
Co-authored-by: GitHub <noreply@github.com>
 2024-12-20 03:37:28 +00:00
Alan Parra a1881e9cad chore: Bump golang.org/x/net to v0.33.0 (#50396) 2024-12-19 13:48:05 +00:00
Erik Tate e67a13e885 replacing documentation references to port_forwarding with ssh_port_forwarding and adding some additional context to the rbac reference (#50361) 2024-12-18 22:58:39 +00:00