6 Commits

Include renames

Author	SHA1	Message	Date
Tiago Silva	40861809a6	Add RoleV6 resource type (#19324) ... This PR includes a new Role resource version that is compatible with V5 spec. The new resource introduces the `kubernetes_resources` definition that allows operators to limit the Kubernetes resources that each member can access. The `kubernetes_resources` entries must follow the following format: `{"kind":"<kind>", "namespace":"<namespace>","name":"<pod>"}`. Currently, it only supports objects of `kind` `pod`. Valid examples `<namespace>/<name>: - `*/*`: matches all pods in all namespaces. - `default/*`: matches all pods in the `default` namespace. - `*/nginx-*`: matches every pod prefixed with `nginx-` in every namespace. For older resource versions - V5, V4, V3 - `kubernetes_resources` is automatically populated with `{"kind":"pod","namespace":"*","name":"*"}` to keep compatibility. For the newest version, it's mandatory to define its value otherwise access to pods will be denied. Part of #18434	2023-01-05 09:58:12 +00:00
Yassine Bounekhla	09633dd47f	Remove license feature flags for Moderated Sessions, Resource Access Requests, Machine ID (#16585)	2022-09-30 21:46:25 +00:00
Ryan Clark	806a568ada	Introduce config v3, add auth_server and proxy_server, remove auth_addresses (#15761)	2022-09-28 15:30:15 +00:00
rosstimothy	ebfbfd496e	Use testauthority instead of native to generate keys in tests (#16486) ... * use test authority * use testauthority for InitConfig RSAKeyPairSource * add named returns to test authority	2022-09-21 20:53:09 +00:00
Noah StrideandPaul Gottschling	7c904714e9	Machine ID support for Logins trait (#15117) ... * Support user traits in impersonated role certificates * Add param to tctl bots add for specifying logins * Update comment on desiredAccessInfoForRoleRequest to be mroe accurate * Update docs for --logins support with Machine ID * Rearrange bot tests and name them more in-line with standards * Add test coverage for Server.createBot * Test role impersonation preserves user traits * pass traits directly into desiredAccessInfoForRoleRequests * Drop underscores from test names * Remove unnecessary initialization of traits * Address PR comments * Update docs/pages/machine-id/getting-started.mdx Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> * Update docs/pages/machine-id/getting-started.mdx Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> * Update docs/pages/machine-id/getting-started.mdx Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>	2022-08-12 12:06:38 +00:00
Tim Buckley	207332d170	Add Machine ID enterprise license enforcement (#13914) ... * Add Machine ID enterprise license enforcement This adds two checks to Machine ID for license enforcement: one on initial bot create, and another on join. * Use modules.SetTestModules(); fix failing test	2022-06-29 16:27:18 +00:00