Lisa Kim b0b6b8b663 Move tctl acl command into its own directory (#67334) ...

* Move tctl acl command into its own directory

Create a accesslist preset file to be referenced later
in future acl commands

* Remakes the original acl_command.go file

This is so that during merging, the enterprise build doesn't break
This file will be removed once all merging is complete.

2026-06-04 01:06:03 +00:00

..

accessgraph

[sec_scan][24] extract AuthorizedKey's comment and type (#44643)

2024-07-29 19:33:29 +00:00

accesslist

Move tctl acl command into its own directory (#67334)

2026-06-04 01:06:03 +00:00

accessmonitoringrule

Add initial access monitoring rule resource (#36745)

2024-03-08 15:46:00 +00:00

appauthconfig

Add app auth config backend service (#61688)

2025-12-03 23:09:01 +00:00

autoupdate

MWI: Generate AutoUpdateBotInstanceReport resource (#59738)

2025-10-07 14:32:36 +00:00

backendinfo

Fix major version check for stateless environment (#52837)

2025-05-05 22:51:24 +00:00

clusterconfig

Add DemoMode and Status to AccessGraphSettings (#53371)

2025-04-01 15:27:40 +00:00

common

Add AWS Roles Anywhere as valid origin label (#55214)

2025-05-29 07:31:55 +00:00

compare

Uniform equal function names to IsEqual (#40441)

2024-04-19 09:22:43 +00:00

discoveryconfig

Add summary per Server in DiscoveryConfig Status. (#65233)

2026-04-23 17:35:36 +00:00

events

feat: add scope info to event user metadata (#67343)

2026-06-03 00:18:29 +00:00

externalauditstorage

Fix gRPC -> Teleport types message conversion (#56124)

2025-06-30 08:46:27 +00:00

grpcclientconfig

auth: add grpc service config discovery api (#62937)

2026-02-17 16:17:50 +00:00

header

Fix gRPC -> Teleport types message conversion (#56124)

2025-06-30 08:46:27 +00:00

healthcheckconfig

Add health check config service (#53438)

2025-03-28 18:56:29 +00:00

installers

[buddy] Install jq if Teleport binary was installed (#53983)

2025-04-14 15:51:14 +00:00

kubewaitingcontainer

Introduce patch_type to KubernetesWaitingContainer (#39738)

2024-03-22 19:35:46 +00:00

label

Implement persistence for db_object_import_rule resource (#37806)

2024-02-22 03:54:27 +00:00

samlsp

add Microsoft Entra ID SAML service provider preset (#53676)

2025-04-08 15:18:24 +00:00

secreports

Fix gRPC -> Teleport types message conversion (#56124)

2025-06-30 08:46:27 +00:00

summarizer

sessionsearch[2]: implement RetrievalModel CRUD backend service (#64558)

2026-04-13 11:13:11 +00:00

trait

Extend user_login_state with SAML connector info and grants (#58581)

2025-12-10 17:20:55 +00:00

userloginstate

Extend user_login_state with SAML connector info and grants (#58581)

2025-12-10 17:20:55 +00:00

userprovisioning

Add StaticHostUserV2 (#46038)

2024-09-04 21:16:11 +00:00

usertasks

Add join failure handling for ec2 using readyz health check (#64296)

2026-04-20 14:59:21 +00:00

vnet

Add vnet_config support for terraform (#62592)

2026-03-02 18:28:08 +00:00

webauthn

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

wrappers

fix: populate user_roles and user_traits for ssh sessions (#58794)

2025-09-05 14:28:08 +00:00

access_request_test.go

Expose IsEqual for AccessRequests (#64141)

2026-04-09 21:30:50 +00:00

access_request.go

Make resolved access requests immutable (#66736)

2026-05-28 14:11:41 +00:00

accountrecovery.go

…

app_test.go

Add TLS options to app spec (#65995)

2026-05-05 15:50:04 +00:00

app.go

App service use upstream TLS options (#66454)

2026-05-27 13:41:28 +00:00

appserver_test.go

AWS OIDC: add aws account id as label to AWS App (#49693)

2024-12-06 08:43:03 +00:00

appserver.go

Expose IsEqual for more resource types (#64520)

2026-03-11 17:54:10 +00:00

assertion_info_test.go

…

assertion_info.go

…

audit.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

authentication_authpreference_test.go

[Browser MFA] Rename browser mfa config name (#64980)

2026-03-26 08:58:33 +00:00

authentication_mfadevice_test.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704)

2024-10-16 22:24:07 +00:00

authentication_test.go

Add second_factors (#47233)

2024-10-11 00:02:39 +00:00

authentication.go

[Browser MFA] Rename browser mfa config name (#64980)

2026-03-26 08:58:33 +00:00

authority_test.go

verify cluster name of TLS peer certificates (#52128)

2025-02-13 21:25:52 +00:00

authority.go

Stop comparing CertAuthorityV2 with go-cmp (#64135)

2026-02-27 23:24:02 +00:00

cert_authority_override_test.go

Implement SubCAServiceGetter in lib/auth/authclient.ClientI (#65759)

2026-04-16 13:40:52 +00:00

cert_authority_override.go

Implement SubCAServiceGetter in lib/auth/authclient.ClientI (#65759)

2026-04-16 13:40:52 +00:00

clone_test.go

Access Requests: Add Resource-Scoped Constraints (#60123)

2026-01-27 14:51:52 +00:00

cluster_alert_test.go

Add a link text label to the ClusterAlert resource (#45972)

2024-09-05 10:24:39 +00:00

cluster_alert.go

Add a link text label to the ClusterAlert resource (#45972)

2024-09-05 10:24:39 +00:00

clustername.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

connection_diagnostic.go

…

constants.go

Prevent users from creating apps for the beam app service (#66937)

2026-05-22 17:26:19 +00:00

database_permissions_test.go

…

database_permissions.go

Bump golangci-lint to v2 (#54410)

2025-05-07 22:14:51 +00:00

database_test.go

Append project ID-based suffix for GCP Postgres databases (#58940)

2025-09-23 13:32:09 +00:00

database.go

feat: add VNetDNSName to DatabaseStatusV3 and implement hashing logic (#65903)

2026-04-27 14:23:07 +00:00

databaseserver_test.go

Fix an issue tsh db ls shows one entry per db server instead of db name (#40784)

2024-04-22 20:21:40 +00:00

databaseserver.go

adding scope validation to SSH heartbeats (#60524)

2025-11-10 22:02:57 +00:00

databaseservice.go

Convert cache list resources implementation to store items in memory (#53355)

2025-04-28 19:01:22 +00:00

derived.gen.go

Add processing status to Okta assignment targets (#67303)

2026-06-03 08:08:38 +00:00

desktop_test.go

…

desktop.go

Prevent the LDAP reconciler from picking up dynamic desktops (#66609)

2026-05-14 02:31:49 +00:00

device_test.go

Use the DeviceCollectedData.os_login_user field (#63389)

2026-02-03 14:19:37 +00:00

device.go

Update protos to enable syncing iOS/iPadOS devices through MDM integrations (#65834)

2026-06-02 13:08:26 +00:00

device.pb.go

Add the DeviceCollectedData.os_login_user field (#63341)

2026-02-03 13:47:28 +00:00

duration_test.go

…

duration.go

Fix AWS IID TTL type in scoped tokens (#64026)

2026-02-20 20:08:09 +00:00

events_test.go

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

events.go

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

extension.go

…

fuzz_test.go

Fix AWS IID TTL type in scoped tokens (#64026)

2026-02-20 20:08:09 +00:00

github_test.go

[chore] clean up DELETE IN 18 comments (#55118)

2025-05-24 17:30:24 +00:00

github.go

implement identifier first login backend (#55932)

2025-07-02 17:58:39 +00:00

headlessauthn.go

…

installer.go

Convert installers, web tokens and ui config to new cache collections (#54497)

2025-05-06 13:36:02 +00:00

instance_test.go

Display update group in tctl inventory (#54324)

2025-05-05 20:39:27 +00:00

instance.go

Display update group in tctl inventory (#54324)

2025-05-05 20:39:27 +00:00

integration_awsoidc.go

…

integration_github_test.go

GitHub proxy: web apis for enrolment (#51423)

2025-02-03 19:12:08 +00:00

integration_github.go

GitHub proxy: web apis for enrolment (#51423)

2025-02-03 19:12:08 +00:00

integration_test.go

Support IntegrationV1 in terraform provider (#61764)

2025-12-02 00:16:04 +00:00

integration.go

Integration brief summaries returned by web listIntegrations. Updated integrations list issues and details to use the new fields (#62777)

2026-01-22 22:27:50 +00:00

jamf_duration.go

Fix Jamf plugin duration serialization (#65944)

2026-04-24 15:10:15 +00:00

jamf_test.go

Update protos to enable syncing iOS/iPadOS devices through MDM integrations (#65834)

2026-06-02 13:08:26 +00:00

jamf.go

Update protos to enable syncing iOS/iPadOS devices through MDM integrations (#65834)

2026-06-02 13:08:26 +00:00

jwt.go

Add support to sign MCP egress JWT with OIDC CA (#62043)

2026-01-02 15:16:23 +00:00

kubernetes_server_test.go

Fix some lint issues (#38913)

2024-03-07 18:04:51 +00:00

kubernetes_server.go

Fixing scope propagation and heartbeat enforcement for kube service (#65894)

2026-04-24 00:36:08 +00:00

kubernetes_test.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

kubernetes.go

Fixing scope propagation and heartbeat enforcement for kube service (#65894)

2026-04-24 00:36:08 +00:00

license_test.go

…

license.go

Fix license stringification (#46415)

2024-09-10 13:05:48 +00:00

lock_test.go

refactor lib/srv to adopt pdp-style patterns (#54081)

2025-05-06 16:37:03 +00:00

lock.go

Add locks support for Linux desktop (#65761)

2026-04-29 08:50:19 +00:00

maintenance_test.go

Fix CMC weekdays bug (#54076)

2025-04-16 19:25:34 +00:00

maintenance.go

Fix CMC weekdays bug (#54076)

2025-04-16 19:25:34 +00:00

matchers_accessgraph.go

Remove services.CompareResources (#65151)

2026-04-16 20:10:09 +00:00

matchers_aws_test.go

Refactor teleport/discovery/aws module to support eks (#65002)

2026-04-03 21:02:11 +00:00

matchers_aws.go

Support region wildcard in discovery EKS matchers. (#66036)

2026-04-24 18:14:50 +00:00

matchers_azure_test.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers_azure.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers_gcp_test.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers_gcp.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers_kube_test.go

…

matchers_kube.go

…

matchers_test.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

metadata.pb.go

TDPB Message Definitions (#62100)

2025-12-31 16:59:49 +00:00

mfa_device.pb.go

[Browser MFA] Add Browser MFA to challenge request flow (#63936)

2026-03-26 12:24:12 +00:00

mfa_test.go

Stop comparing Users with go-cmp (#64127)

2026-03-12 20:45:35 +00:00

mfa.go

Stop comparing Users with go-cmp (#64127)

2026-03-12 20:45:35 +00:00

msgraph_test.go

Split MS Graph endpoint validation into separate functions (#66315)

2026-04-30 15:07:24 +00:00

msgraph.go

Split MS Graph endpoint validation into separate functions (#66315)

2026-04-30 15:07:24 +00:00

namespace.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

networking_test.go

Allow a custom SSH dial timeout to be set cluster wide (#45507)

2024-08-20 13:11:46 +00:00

networking.go

Allow a custom SSH dial timeout to be set cluster wide (#45507)

2024-08-20 13:11:46 +00:00

oidc_external_test.go

OIDC: validate the client_secret field (#46041)

2024-10-16 19:25:59 +00:00

oidc_external.go

…

oidc_test.go

Restrict the maximum length of an auth connector name (#63923)

2026-03-31 23:42:35 +00:00

oidc.go

Add APIs for handling Entra ID groups overage on SAML connectors (#65653)

2026-04-21 13:32:53 +00:00

okta_test.go

Add processing status to Okta assignment targets (#67303)

2026-06-03 08:08:38 +00:00

okta.go

Add processing status to Okta assignment targets (#67303)

2026-06-03 08:08:38 +00:00

order.go

…

plugin_data.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

plugin_static_credentials.go

Adds protobuf description of a service for updating Plugins' static credentials. (#57690)

2025-08-26 11:42:22 +00:00

plugin_test.go

entra plugin sync intervals (#66229)

2026-05-07 02:32:49 +00:00

plugin.go

entra plugin sync intervals (#66229)

2026-05-07 02:32:49 +00:00

presence.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

provisioning_test.go

Add support for filtering by Organizational Units in IAM Join (implementation) (#66242)

2026-05-28 15:18:10 +00:00

provisioning.go

Add support for filtering by Organizational Units in IAM Join (implementation) (#66242)

2026-05-28 15:18:10 +00:00

proxied_service.go

…

register.go

…

remotecluster.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

resource_153_test.go

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

resource_153.go

Migrate MFA service from v1 to v2 (#66820)

2026-05-22 18:49:20 +00:00

resource_constraints.go

types: Add types for SSH Node Resource Constraints (#64287)

2026-03-06 21:13:43 +00:00

resource_ids_test.go

Access Requests: New Types for Resource-Scoped Constraints (#61168)

2026-01-26 23:41:53 +00:00

resource_ids.go

Access Requests: Add Resource-Scoped Constraints (#60123)

2026-01-27 14:51:52 +00:00

resource_test.go

delete unused app_server_or_saml_idp_sp type and its usage (#54473)

2025-05-06 22:00:47 +00:00

resource.go

Add LLM inference endpoint configuration (#65688)

2026-04-16 21:58:45 +00:00

resources.pb.go

types: Add types for SSH Node Resource Constraints (#64287)

2026-03-06 21:13:43 +00:00

restrictions.go

Convert network restrictions to new cache mechanism (#54504)

2025-05-09 14:04:18 +00:00

role_test.go

Add web_terminal_copy_mode role option (#66597)

2026-05-28 19:58:49 +00:00

role.go

Add web_terminal_copy_mode role option (#66597)

2026-05-28 19:58:49 +00:00

saml_idp_service_provider_test.go

aws identity center plugin config dependency (#47844)

2024-10-23 18:28:23 +00:00

saml_idp_service_provider.go

delete unused app_server_or_saml_idp_sp type and its usage (#54473)

2025-05-06 22:00:47 +00:00

saml_test.go

Add APIs for handling Entra ID groups overage on SAML connectors (#65653)

2026-04-21 13:32:53 +00:00

saml.go

Add APIs for handling Entra ID groups overage on SAML connectors (#65653)

2026-04-21 13:32:53 +00:00

second_factor_test.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

second_factor.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

semaphore.go

[api] Add ListSemaphores (#60672)

2025-10-29 11:37:59 +00:00

server_info_test.go

EC2 Auto-Discovery: EICE support (#35504)

2024-03-26 16:16:20 +00:00

server_info.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

server_test.go

adding immutable labels to scoped tokens and host certificates (#62941)

2026-02-06 20:57:03 +00:00

server.go

adding immutable labels to scoped tokens and host certificates (#62941)

2026-02-06 20:57:03 +00:00

session_test.go

Fix Access Graph API sessions expiring at bearer-token TTL instead of session TTL (#66019)

2026-04-23 17:35:58 +00:00

session_tracker_test.go

fix: session trackers participants inconsistencies (#58853)

2025-09-08 16:07:11 +00:00

session_tracker.go

fix: session trackers participants inconsistencies (#58853)

2025-09-08 16:07:11 +00:00

session.go

Fix Access Graph API sessions expiring at bearer-token TTL instead of session TTL (#66019)

2026-04-23 17:35:58 +00:00

sessionrecording_test.go

adding manual key management config (#56920)

2025-08-05 21:21:10 +00:00

sessionrecording.go

Add missing handling for recording encryption configs and keys (#57279)

2025-08-13 15:14:20 +00:00

signaturealgorithmsuite.go

refactor new join flow (#59331)

2025-09-30 16:33:35 +00:00

sortby_test.go

…

sortby.go

Use new access request filters in webUI (#39625)

2024-03-27 18:21:55 +00:00

statictokens.go

Add support for in memory caching (#52210)

2025-04-10 21:18:24 +00:00

system_role_test.go

prevent unauthorized uploads via encrypted recordings service (#66081)

2026-04-27 09:40:39 +00:00

system_role.go

prevent unauthorized uploads via encrypted recordings service (#66081)

2026-04-27 09:40:39 +00:00

target_health_test.go

Aggregate health status in unified resource cache (#54868)

2025-06-04 21:54:30 +00:00

target_health.go

Refactor healthcheck for Kubernetes extensibility with HealthChecker interface (#59396)

2025-09-24 21:31:07 +00:00

traits.go

…

trust_test.go

Make use of the newly-introduced WindowsCA (#63035)

2026-01-22 18:12:54 +00:00

trust.go

Add AppClient CA (#66273)

2026-04-30 19:05:23 +00:00

trusted_device_requirement.pb.go

Show device trust status in Connect (#49508)

2024-11-29 10:11:30 +00:00

trustedcluster.go

Add UpsertTrustedClusterV2 RPC (#49789)

2024-12-21 04:24:29 +00:00

tunnel_strategy_test.go

…

tunnel_strategy.go

…

tunnel.go

Convert resource to use in memory cache collections (#54322)

2025-04-29 11:58:54 +00:00

tunnelconn.go

Update (*TunnelConnectionV2) Clone to do a full copy (#54661)

2025-05-09 13:03:10 +00:00

types.pb.go

Add processing status to Okta assignment targets (#67303)

2026-06-03 08:08:38 +00:00

ui_config.go

terraform: Add ui_config resource to terraform provider (#65201)

2026-04-15 18:26:35 +00:00

user_display.go

Add User Display Helpers to the API User Type (#67100)

2026-05-29 16:32:17 +00:00

user_test.go

Add User Display Helpers to the API User Type (#67100)

2026-05-29 16:32:17 +00:00

user.go

Add User Display Helpers to the API User Type (#67100)

2026-05-29 16:32:17 +00:00

usergroup_test.go

…

usergroup.go

Expose IsEqual for more resource types (#64520)

2026-03-11 17:54:10 +00:00

usertoken.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

usertokensecrets.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

validated_mfa_challenge_filter_test.go

Add ValidatedMFAChallenge filter to event matcher (#65396)

2026-04-08 16:03:37 +00:00

validated_mfa_challenge_filter.go

Add ValidatedMFAChallenge filter to event matcher (#65396)

2026-04-08 16:03:37 +00:00

watch_status.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00