2 Commits

Include renames

Author	SHA1	Message	Date
Alan Parra	8ef8324b8c	Enable role-based device authz for DB, k8s and SSH (#20640) ... * Expose device verification methods in lib/devicetrust/authz * Set device fields in auth.Context.GetAccessState * Enable role-based device verification for SSH * Enable role-based device verification for DBs * Add TODO for better SSH error messages * Do not override device error on lib/kube/proxy * Run gci	2023-01-27 21:11:01 +00:00
Alan Parra	ecf9e5c7d1	Enforce device extensions for SSH access (#19574) ... Add device-aware authorization for SSH access, including both long-lived and single-use certificates. If the device trust mode is set to "required", then the presence of the corresponding extensions is enforced. (Requires Teleport Enterprise.) Adds logic related to TLS validation and single-use certificates as well, where appropriate. TLS device-aware validation is not wired into Teleport yet, but will be in follow up PRs. gravitational/teleport.e#514	2022-12-21 22:54:13 +00:00