Commit Graph
2 Commits
Author SHA1 Message Date
Vitor Enes f30467eee8 Allow invalid namespaces in role templates (#21551)
This commit reverts the namespace validation added in #19696.
The new namespace validation is a breaking change that resulted in users
being locked if roles contained invalid namespaces.
2023-02-09 19:14:49 +00:00
Vitor Enes d6ffe82aaf Support multiple transformations in role templates (#19696)
Before this commit, only a single transformation like `email.local` or
`regexp.replace` was allowed in role templates.

With this commit now users can write:
- `email.local(regexp.replace(external.email, "_", "-"))`
- `regexp.replace(email.local(regexp.replace(external.email, "_", "-")), "dev", "admin")`

This commit also allows the above expressions to not contain any
variable, i.e., it allows constant expressions like
`email.local("vitor@goteleport.com")`.
2023-01-17 15:24:50 +00:00