Noah StrideandDan Upton 0fb8f91c29 Workload Identity Revocations Signing (#52353) ...

* Add initial implementation of CRL signing

* Clarify

* Add basic support for streaming signed CRL to `tctl`

* Add log messages

* Start adding CRL support to tbot

* Wire in CRL support to workload-identity-x509

* Wire up crlCache to dependent services

* Fix missing cluster name injectiont

* Run the background goroutine

* FIx notification mechanism

* Add CRL assertions to TestBotWorkloadIdentityX509

* Add appropriate backoff to RevocationService

* Start work on TestRevocationService_CRL

* Change comparison in test

* Finish TestRevocationService_CRL

* Add CRL assertion to TestBotWorkloadIdentityAPI

* Fix linter complaint

* Update lib/tbot/service_workload_identity_api_test.go

Co-authored-by: Dan Upton <daniel.upton@goteleport.com>

* Update lib/tbot/service_workload_identity_api_test.go

Co-authored-by: Dan Upton <daniel.upton@goteleport.com>

* Rename KeyStorer

* Trigger CRL signing every ten minutes

* ADd SVIDCRLPemPath to Describe

---------

Co-authored-by: Dan Upton <daniel.upton@goteleport.com>

2025-02-26 11:03:01 +00:00

..

accesslists

Make accesslist.GetAncestorsFor() public (#48784)

2024-11-12 22:51:59 +00:00

agentless

transition ssh enforcement to sshca.Identity (#51468)

2025-02-04 18:01:53 +00:00

asciitable

feat: interactive tctl auth rotate (#49171)

2024-12-05 23:39:23 +00:00

auditd

…

auth

Workload Identity Revocations Signing (#52353)

2025-02-26 11:03:01 +00:00

authz

transition ssh enforcement to sshca.Identity (#51468)

2025-02-04 18:01:53 +00:00

automaticupgrades

Use new autoupdate APIs in discovery service (#51758)

2025-02-06 23:59:21 +00:00

autoupdate

Add re-executed from version to version command output (#52409)

2025-02-24 22:39:25 +00:00

aws/identitycenter

Move Identity Center validation tools to OSS (#52239)

2025-02-19 02:48:35 +00:00

backend

Add iteration support to etcd (#52199)

2025-02-25 17:55:41 +00:00

benchmark

transition ssh enforcement to sshca.Identity (#51468)

2025-02-04 18:01:53 +00:00

bitbucket

Encode Join Attributes in Bot Certificates (#49426)

2025-01-08 09:59:15 +00:00

bpf

Convert lib/bpf to use slog (#50313)

2024-12-17 13:30:55 +00:00

cache

WebAPI: Add state as filter for UserTasks listing endpoint (#52191)

2025-02-20 09:24:06 +00:00

cgroup

…

circleci

Encode Join Attributes in Bot Certificates (#49426)

2025-01-08 09:59:15 +00:00

client

Prevent keystore cleanup to remove bin directory (#52331)

2025-02-20 05:14:58 +00:00

cloud

Import Oracle Cloud tags (#52283)

2025-02-24 18:51:41 +00:00

config

Fix issue applying the --listen-ip flag (#51850)

2025-02-04 22:19:45 +00:00

configurators

Apply the _DISABLE_AWS_FIPS setting to iam and stscreds (#52065)

2025-02-12 20:12:44 +00:00

connectmycomputer

…

cryptosuites

GitHub proxy part 6: proxing Git using SSH transport (#49980)

2025-01-14 21:48:04 +00:00

darwin

…

decision

Limit decision service evaluation to local admins (#51083)

2025-02-04 18:11:57 +00:00

defaults

Add WebSocket handler for WebUI database sessions (#49749)

2024-12-14 02:16:29 +00:00

devicetrust

[vnet] add vnet-(un)install-service commands for Windows (#52164)

2025-02-20 18:37:37 +00:00

events

Identity center resource sync event definition and UI formatter (#52059)

2025-02-19 19:25:27 +00:00

expression

fix: support set.add on nil sets in traits expression parser (#49385)

2024-11-25 18:12:54 +00:00

fixtures

fix panic in CheckSAMLEntityDescriptor (#51583)

2025-01-29 17:49:57 +00:00

gcp

Encode Join Attributes in Bot Certificates (#49426)

2025-01-08 09:59:15 +00:00

githubactions

Encode Join Attributes in Bot Certificates (#49426)

2025-01-08 09:59:15 +00:00

gitlab

Encode Join Attributes in Bot Certificates (#49426)

2025-01-08 09:59:15 +00:00

httplib

Create v2 web api endpoints and required related changes (#50472)

2025-01-09 19:58:52 +00:00

integrations

Apply the _DISABLE_AWS_FIPS setting to iam and stscreds (#52065)

2025-02-12 20:12:44 +00:00

inventory

Test that SSH keepalives increase the expiry time (#50503)

2025-01-07 15:19:09 +00:00

joinserver

OCI join - add proto and client (#51444)

2025-01-29 20:11:16 +00:00

jwt

Workload Identity: Add minimally viable implementation of IssueWorkloadIdentity RPC (#49943)

2024-12-18 11:30:18 +00:00

kube

Reduce resource consumption when generating Kubernetes certificates (#52109)

2025-02-13 19:27:19 +00:00

labels

Import Oracle Cloud tags (#52283)

2025-02-24 18:51:41 +00:00

limiter

…

linux

…

loginrule

…

loglimit

Convert lib/multiplexer to use slog (#50156)

2024-12-16 19:37:26 +00:00

modules

Fix TELEPORT_ALLOW_NO_SECOND_FACTOR (#51676)

2025-01-31 22:36:29 +00:00

msgraph

Fix violations of non-constant format strings linter (#51812)

2025-02-04 16:43:35 +00:00

multiplexer

chore: Bump google.golang.org/protobuf to v1.36.5 (#51916)

2025-02-06 14:23:06 +00:00

observability

Remove unused aws-sdk-go S3 metrics wrapper (#51674)

2025-01-30 23:42:28 +00:00

openssh

…

pam

Fix violations of non-constant format strings linter (#51812)

2025-02-04 16:43:35 +00:00

player

Replace usages of x/exp/maps with stdlib maps package (#51448)

2025-01-28 14:54:40 +00:00

plugin

…

proxy

Use loadBalancingConfig instead of loadBalancingPolicy (#51428)

2025-01-24 13:58:13 +00:00

puttyhosts

Fix outdated docs URLs (#50923)

2025-01-16 18:17:35 +00:00

release

…

resourceusage

Convert lib/resourceusage to use slog (#50311)

2024-12-17 13:30:33 +00:00

resumption

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

reversetunnel

transition ssh enforcement to sshca.Identity (#51468)

2025-02-04 18:01:53 +00:00

reversetunnelclient

GitHub proxy part 6: proxing Git using SSH transport (#49980)

2025-01-14 21:48:04 +00:00

secret

…

secretsscanner

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

service

Import Oracle Cloud tags (#52283)

2025-02-24 18:51:41 +00:00

services

Tweak sortcache.SortCache API (#52414)

2025-02-25 17:56:54 +00:00

session

…

shell

Convert lib/shell to use slog (#50306)

2024-12-17 13:30:16 +00:00

spacelift

Encode Join Attributes in Bot Certificates (#49426)

2025-01-08 09:59:15 +00:00

srv

Add support for RDS-hosted Oracle and update related RDS handling (#52374)

2025-02-25 13:23:37 +00:00

sshca

GitHub proxy: emit rbac failure event and add prometheus counters (#51878)

2025-02-21 16:15:44 +00:00

sshutils

Prevent reauthentication for tilde prefix expansion errors (#51464)

2025-01-29 22:48:01 +00:00

system

Convert lib/system to use slog (#50300)

2024-12-17 13:27:21 +00:00

tbot

Workload Identity Revocations Signing (#52353)

2025-02-26 11:03:01 +00:00

teleagent

Convert lib/teleagent to use slog (#50303)

2024-12-17 13:48:06 +00:00

teleterm

VNet diag report: Add protos and tshd implementation (#52066)

2025-02-19 12:10:32 +00:00

terraformcloud

Encode Join Attributes in Bot Certificates (#49426)

2025-01-08 09:59:15 +00:00

tlsca

Fix violations of non-constant format strings linter (#51812)

2025-02-04 16:43:35 +00:00

tpm

Encode Join Attributes in Bot Certificates (#49426)

2025-01-08 09:59:15 +00:00

uds

…

ui

…

usagereporter

record saml_idp_sessions event (#52202)

2025-02-26 03:31:15 +00:00

usertasks

UserTasks: add title per issue type (#52435)

2025-02-25 17:25:35 +00:00

utils

Fix Windows permission error with self remove (#52316)

2025-02-25 22:34:07 +00:00

versioncontrol

Fix incorrect docs URLs (#51847)

2025-02-05 19:12:09 +00:00

vnet

[vnet] add vnet-(un)install-service commands for Windows (#52164)

2025-02-20 18:37:37 +00:00

web

Create v2 web api endpoint for deleting integration with cleanup (#52286)

2025-02-25 18:30:07 +00:00

windowsexec

Convert lib/windowsexec to use slog (#50307)

2024-12-17 04:47:52 +00:00

runtimeflags.go

…