* fix(player): use skip idle flag and adjust max value
* test(player): increase timeout
* refactor(player): use time.Duration instead of float64 for timings
* refactor(player): store duration values in nanoseconds
* [kube] use local image for kubernetes integration tests
This PR replaces the use of the `nginx:latest` Docker image in Kubernetes integration tests with a custom-built image based on `alpine:3.20.3`. This custom image includes a shell for `kubectl exec` integration tests and a compiled binary to act as an HTTP server.
This change addresses recent issues where test workflows failed due to problems downloading the `nginx` image.
* add information about the image
* source files from alpine cdn
* copy files from alpine
* Update fixtures/alpine/README.md
Co-authored-by: Alan Parra <alan.parra@goteleport.com>
* Update fixtures/alpine/README.md
Co-authored-by: Alan Parra <alan.parra@goteleport.com>
* source files from alpine cdn (again)
---------
Co-authored-by: Alan Parra <alan.parra@goteleport.com>
@camscale investigated and:
> wasm-pack 0.13.1 uses wasm-bindgen 0.2.93 and it downloads the binaries for that from the repo's release page.
> The ARM64 binaries are linked against glibc 2.34, but our buildbox-node is debian bullseye which is glibc 2.31.
> No problems on AMD64 as the wasm-bindgen binary is statically linked for that architecture.
>
> This means we need to bump the base image for buildbox-node to use bookworm, which will increase the minimum requirements for Teleport Connect.
I ran a test build with the downgraded `wasm-pack` and it solved
wasm-related build errors. So this is a revert to make the builds green
again.
Running markdown-lint in the Docusaurus site flags some issues that the
gravitational/docs markdown-lint configuration doesn't catch. This
change resolves these issues, fixing indentation and list item spacing.
* Add proto definitions for MsTeams no code integration
* Add access monitoring rule and hosted support to msteams plugin
* Fix linting
* Fix go sum mismatch caused by msteams dependency
* Fix linting in access monitoring rules
* Align ClusterLogin story with actual dialog presentation
* Add stories for LocalError and SsoError
* Share setup code between ClusterLogin and ClusterLoginReason
* Use named Indicator export in design/index.ts
* Align ClusterAdd story with actual presentation
* Clean up spacing within ClusterConnect
* Remove type assertions from storyHelpers.tsx
* Remove bottom margin from login disabled alert
- Recursively check for accesslist membership
- Allow adding/removing/listing included access lists in acl commands
- Add a recursive test
- Use dynamic access lists structure from RFD
- Resolve proto changes
- Exclude 'list' members from Access List memberCount
- Calc Access List member count with members of type 'list' excluded,
return seperately to front end
- Update examples/integrations
- Update crd docs
- Update tf docs
- Perform calculation of inherited roles/traits to AccessList service in
order to utilize cache and minimize number of requests.
- Grant Okta integration RO for Access Lists
- Update AccessListMember-* events
- Include count for inherited grants
- Include MembershipKind of affected member(s)
- Emit inherited grants / members' MembershipKind for AccessListMember-*
events
- Update notified owners for Access Requests
- Ensure dynamic owners are notified for Access Requests
- Ensure dynamic owners are notified via Slack integration
- Optionally pass an AbortSignal to `fetchAccessLists` in Web UI
- Replace usages of `services.IsAccessListOwner/IsAccessListMember` with
equivelant funcs from `Hierarchy`
- Remove final references to AccessListMembershipChecker
- Don't allow ACL deletion when member/owner in other lists
- Guard Access List deletion behind membership/ownership checks for List
- Expose Hierarchy func to recursively get all members
- Tidy UserLoginStateGenerator logic involving ACL Membership/Ownership
Co-authored-by: Maxim Dietz <maxim.dietz@goteleport.com>
Bumps the go group in /integrations/event-handler with 2 updates: [github.com/alecthomas/kong](https://github.com/alecthomas/kong) and [golang.org/x/time](https://github.com/golang/time).
Updates `github.com/alecthomas/kong` from 1.2.1 to 1.3.0
- [Commits](https://github.com/alecthomas/kong/compare/v1.2.1...v1.3.0)
Updates `golang.org/x/time` from 0.6.0 to 0.7.0
- [Commits](https://github.com/golang/time/compare/v0.6.0...v0.7.0)
---
updated-dependencies:
- dependency-name: github.com/alecthomas/kong
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
- dependency-name: golang.org/x/time
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Most of our tests override cfg.DataDir, but auth's storage config
still uses a hard-coded /var/lib/teleport for backend state.
Instead of fixing this in a bunch of tests, we stop defaulting to
/var/lib/teleport and set the storage dir only after we know what
the configured data dir is.
During the EKS Enrollment in the Discover wizard, when listing clusters,
check for pre-reqs when showing available clusters.
1. When in Cloud, only allow enrollment if the cluster has a Public
Endpoint for configuration.
1. Only show clusters which have the API authentication mode enabled
(either API only or API_AND_CONFIG_MAP).
* Discover EKS: handle 'CONFIG_MAP' authentication mode gracefully
EKS Cluster Access Config's Authentication mode can be set to one of:
- API
- API_AND_CONFIG_MAP
- CONFIG_MAP
Teleport requires either API or API_AND_CONFIG_MAP to install the helm
chart.
This PR checks this value before trying to install the helm chart.
This way the user is presented with a better error message.
* use vars coming from ekstypes
* new aws-sdk-go-v2 deps:
- github.com/aws/aws-sdk-go-v2/service/organizations
- github.com/aws/aws-sdk-go-v2/service/identitystore
- github.com/aws/aws-sdk-go-v2/service/ssoadmin
* re-do go get and go mod tidy
* group aws-sdk-go-v2 deps
* temp:update e-ref
* udpate e-imports
* e_imports.go 2
* re-re-re go mod tidy inside integrations
---------
Co-authored-by: Marek Smoliński <marek@goteleport.com>
* WebShared: Update how request checkout handles kube resource related errors
* Fix bug where after create/cancel, specifiable fields were retained
* Remove single toggler for kube resources
* Address CR
* AWS IC SDK
* awsoidc credprovider package
* go mod tidy on integrations
* place aws-sdk-v2 imports together
---------
Co-authored-by: Marek Smoliński <marek@goteleport.com>
Alan Parra