Dan Upton 9f160cbe6f Add support for delegation to tbot's relevant services (#64900) ...

* Add support for delegation to `tbot`'s relevant services

* Explicitly prevent use of delegation with leaf clusters

* Make `WithRoles` and `WithDelegation` mutually-exclusive

* Make `delegation_session_id` and `roles` mutually-exclusive in tbot config

* Use nil-tolerant proto getter functions

* Move delegation cert generation into separate method

* Stop delegation service from returning CA certificates

Per @strideynet's request, to avoid replicating existing bad patterns around
conflating the user and host CAs.

* Fix tbot OpenSSH output in delegation sessions

2026-04-17 10:24:15 +00:00

..

full.golden

Add support for delegation to tbot's relevant services (#64900)

2026-04-17 10:24:15 +00:00