Commit Graph
18 Commits
Author SHA1 Message Date
rosstimothy 47f4247dfb Bump golang.org/x/net to v0.38.0 (#53596)
The update addresses CVE-2025-22872. All modules importing an older
version of x/net were updated.
2025-03-31 16:05:46 +00:00
Alan Parra c2335808cf chore: Bump golang.org/x/net to v0.37.0 (#52845) 2025-03-06 14:37:27 +00:00
Alan Parra 97fa0704c3 chore: Bump /x/crypto and /x/oauth2 (#52436)
* chore: Bump /x/crypto and /x/oauth2

* Remove toolchain directives
2025-02-24 20:24:50 +00:00
Alan Parra a1881e9cad chore: Bump golang.org/x/net to v0.33.0 (#50396) 2024-12-19 13:48:05 +00:00
Alan Parra 0870512dba chore: Bump golang.org/x/crypto on examples/ (#50160) 2024-12-12 17:42:12 +00:00
Alan Parra dd592a06b8 chore: Bump /x/net and docker/docker in all modules (#40694)
* chore: Bump /x/net and docker/docker in all modules

* Fix breakages on examples/service-discovery-api-client/
2024-04-19 15:30:02 +00:00
Mike Jensen 040ded2b79 Update google.golang.org/protobuf to v1.33.0 (#38995)
* Update google.golang.org/protobuf to v1.33.0

This updates all instances of google.golang.org/protobuf to address CVE-2024-24786.

* Make grpc after update
2024-03-05 22:48:09 +00:00
rosstimothy dfbf2e06ee Fix builds for all examples that consume teleport/api (#38468)
Updates the api module used in examples to a more recent commit
to pull in a newer version of otel to resolve build problems.

```
cannot use &TracerProvider{} (value of type *TracerProvider) as "go.opentelemetry.io/otel/trace".TracerProvider value in variable declaration: *TracerProvider does not implement "go.opentelemetry.io/otel/trace".TracerProvider (missing method tracerProvider)
 cannot use t (variable of type *tracer) as "go.opentelemetry.io/otel/trace".Tracer value in return statement: *tracer does not implement "go.opentelemetry.io/otel/trace".Tracer (missing method tracer)
```
2024-02-21 01:11:28 +00:00
Mike Jensen 06f5501c96 Update golang/x/crypto to 0.17.0 (#35858)
This updates crypto across all go.mod files in `teleport` to address CVE-2023-48795.
2023-12-18 20:06:25 +00:00
dependabot[bot] e9e4d98962 Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (#34508)
Bumps [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.45.0 to 0.46.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.45.0...zpages/v0.46.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-13 14:29:23 +00:00
Mike Jensen 3d3754893e Select examples api dependency update (#33595)
This updates `api` in `access-plugin-minimal`, `api-sync-roles`, `desktop-registration` and `service-discovery-api-client`.  These four examples are being updated because of their dependency on OpenTelemetry and Crewjam which are both being pulled in from the parent `api` dependency.
2023-10-17 19:37:34 +00:00
Mike Jensen 30211ac889 Examples OpenTelemetry update (#33579)
Update OpenTelemetry in examples to ensure coverage against CVE-2023-45142.
2023-10-17 18:05:06 +00:00
Mike Jensen cd34f3b5f8 Update remaining google.golang.org/grpc to v1.57.1 (#33486)
This are primarily examples, but we still want to update to ensure coverage against CVE-2023-44487.
2023-10-16 15:08:48 +00:00
dependabot[bot] 874c9a060e Bump golang.org/x/net from 0.8.0 to 0.17.0 in /examples/api-sync-roles (#33343)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.8.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 20:05:45 +00:00
Mike Jensenanddependabot[bot] a410acef01 Dependency updates for examples (#26947)
* Bump golang.org/x/net in /examples/desktop-registration

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.5.0 to 0.7.0.
- [Commits](https://github.com/golang/net/compare/v0.5.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go in /examples/teleport-usage

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.224 to 1.44.269.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG_PENDING.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.224...v1.44.269)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump google.golang.org/grpc in /examples/service-discovery-api-client

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.53.0 to 1.55.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.53.0...v1.55.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/google/uuid from 1.1.2 to 1.3.0 in /examples/go-client

Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.1.2 to 1.3.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Commits](https://github.com/google/uuid/compare/v1.1.2...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump google.golang.org/grpc in /examples/api-sync-roles

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.53.0 to 1.55.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.53.0...v1.55.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/stretchr/testify in /examples/teleport-usage

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/docker/docker in /examples/service-discovery-api-client

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 23.0.6+incompatible to 24.0.1+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v23.0.6...v24.0.1)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump k8s.io/apimachinery in /examples/api-sync-roles

Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.26.3 to 0.27.2.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.26.3...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump k8s.io/client-go from 0.26.3 to 0.27.2 in /examples/api-sync-roles

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.26.3 to 0.27.2.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.26.3...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-30 22:26:10 +00:00
Paul Gottschling 54c7bc82fd Fix example API client imports (#24359)
This is the result of `make fix-imports`.
2023-04-11 13:20:31 +00:00
dependabot[bot] 91b0f61942 Bump github.com/crewjam/saml in /examples/api-sync-roles (#23942)
Bumps [github.com/crewjam/saml](https://github.com/crewjam/saml) from 0.4.12 to 0.4.13.
- [Release notes](https://github.com/crewjam/saml/releases)
- [Commits](https://github.com/crewjam/saml/compare/v0.4.12...v0.4.13)

---
updated-dependencies:
- dependency-name: github.com/crewjam/saml
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-03 15:43:33 +00:00
Paul Gottschling e9f76c7c4c Add a guide to creating Teleport roles via the API (#23204)
* Add a guide to creating Teleport roles via the API

See #19716

This guide uses a small demo application to show how to create Teleport
roles based on an external RBAC system. The demo revolves around a local
`minikube` cluster. I chose this approach because Teleport works well
with Kubernetes RBAC, and Kubernetes RBAC resources are pretty
straightforward to set up locally.

* Based the guide on a program in the examples dir

* Respond to zmb3 PR feedback

* Run make fix-license

* Respond to PR feedback

* Respond to alexfornuto feedback
2023-03-31 22:36:00 +00:00