* Use zitadel library for oidce token validation logic.
* Add generic ValidateToken - only functional change is that the 15s provider timeout is used for all providers.
* Use oidc.ValidateToken for azure.
* Use zitadel to check discovery for tctl sso configure.
* Update .golangci.yml.
* go mod tidy.
* Address linter/go.mod comments.
* Add GetSubject.
* Fix tests.
* Re-embed jwt.Claims for Azure; Fix tests.
* Use oidc.TokenClaims as a superset of jwt.Claims for azure claims.
* Address comments.
* Persist Join Attributes in X509 Cert
* Use proto names when encoding
* Fix kube tests
* Fix other kube tests
* Fix interface nilness issue
* Add some tests to the TLSCA package and issuer
* Add more E2E style test that covers join attributes and workload id
* Explain test better
* Add JoinAttrs test for bots
* Remove methods no longer necesarry
* Fix imports
* Fix deprecation version
* Add comment explaining why we return even on failure
* Add GoDoc
* Fix logger
* Use auth server logger
* Remove unneccessary import
* Add fields for to-be-supported token claims
* Modify validation to include new field
* Add comparisons for new fields to joining logic
* Add support for globby matching for sub, ref, namespace_path and project_path
* Document which fields support globby matching
* Add tests for join rule engine changes
* Regenerate operator CRDs
* Add docs for new fields
* Correct punctuation in error message
Co-authored-by: Marco André Dinis <marco.dinis@goteleport.com>
* Correctly use GoDoc-esque comments
* Address docs comments
* Reuse glob matching code
* Correct type of RunnerID field
---------
Co-authored-by: Marco André Dinis <marco.dinis@goteleport.com>
* Skeleton out docs for GitLab joining
* Adjust description of guide
* Add more GitLab docs
* Explain the possible constraints
* Add final example of GitLab CI
* Correct token name
* Further clarify a few parts of the documentation
* Correct example of project_path constraint
* Add more specific link to GitLab docs
* Update docs/pages/machine-id/guides/gitlab.mdx
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
* Update docs/pages/machine-id/guides/github-actions.mdx
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
* Update docs/pages/machine-id/guides/gitlab.mdx
Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
* add new guide to navbar
* Update docs/pages/machine-id/guides/gitlab.mdx
Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
* Update docs/pages/machine-id/guides/github-actions.mdx
Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
* Update docs/pages/machine-id/guides/gitlab.mdx
Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
* Update docs/pages/machine-id/guides/gitlab.mdx
Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
* Update docs/pages/machine-id/guides/gitlab.mdx
Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
* More concise/precise language in bot creation
* Add further explanation of fields
* Update docs/pages/machine-id/guides/gitlab.mdx
Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
* Add reference page for gitlab joining
* Fix link
* line break adjustments
* note bot role is built in
* Minor spag correction
---------
Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>
Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
* Add type for GitLab ProvisionToken
* Add default behaviour for domain
* Add IDTokenClaims for GitLab
* Add gitlab token source and token validator
* Thread GitLab support through auth and tbot packages
* Adjust cluster name fetching in token validator
* Initialize GitLab token validator in auth
* Improve comment on `sub`
* Working GitLab CI delegated joining
* Add additional token rule fields
* Add checking for new configuration fields
* add additional test cases for validation of gitlab config struct
* Add TestAuth_RegisterUsingToken_GitLab
* Add tests for IDTokenSource
* Fix imports
* Add tests for GitLab Token Validator
* Fix some comments that were incomplete
* Add license headers
Brian Joerger