Maxim 34a1ebbeef [Access Requests] Tolerate unknown constraint kinds when decoding ResourceAccessIDs (#68785) ...

* feat: tolerate unknown resource constraint kinds

Certs carrying constraint kinds unknown to the current build previously
failed the whole identity decode, and stored access requests carrying
them failed reads outright. Unknown content now degrades to a non-nil
Constraints with nil Details. Enforcement denies only the affected
resource, re-encoding preserves the marker, and stored requests stay
readable. Creation and storage writes remain strict, keeping the marker
from overwriting newer constraint content in the backend.

* refac: Address review feedback

2026-07-31 21:08:00 +00:00

..

encoding_helpers.go

transition ssh enforcement to sshca.Identity (#51468)

2025-02-04 18:01:53 +00:00

identity_test.go

[Access Requests] Tolerate unknown constraint kinds when decoding ResourceAccessIDs (#68785)

2026-07-31 21:08:00 +00:00

identity.go

Encode Bot Scope into TLS/SSH identity (#68385)

2026-07-06 17:27:36 +00:00

sshca.go

fixing issues with determining primary system role, disabling health (#67680)

2026-06-16 17:18:09 +00:00