Nic Klaassen ec046e1a0e feat: add regexp.match to access request filter and where expressions (#40568) ...

This PR updates the parsers for the role
`spec.allow.request.thresholds.filter` and `spec.allow.review.where`
expression fields to support a new function `regexp.match(list, re)`.

It follows the typical teleport style following from role templates,
`where` expressions, login rules, and label expressions:
- `list` can be a `[]string` or a `string` (a single string is treated
  as a list of length 1).
- `re` can be a glob pattern like `example-*` or a proper regex like
  `^example-.*$` when surrounded by `^$`.

Some examples are included in the docs and tests.

I have switched from using `NewJSONBoolParser` to new dedicated parsers
based on `typical`. These should have better performance in terms of
speed and memory, be easier to extend in the future, and provide better
error messages when users write invalid expressions.

These were the only uses of `NewJSONBoolParser`, so it has been removed.

Changelog: add `regexp.match` to access request `filter` and `where`
expressions

2024-04-18 00:17:02 +00:00

..

local

Add access monitoring rules cache and tctl interactions (#40218)

2024-04-17 13:05:01 +00:00

simple

Add conditional update methods for AccessList and AccessListMembers (#40036)

2024-04-02 16:52:55 +00:00

suite

port core CA ops to use revisions/atomics (#39845)

2024-04-10 21:15:09 +00:00

access_checker_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

access_checker.go

Implement granular db permissions for Postgres (RFD 151) (#37808)

2024-03-04 19:28:22 +00:00

access_list_test.go

Removes the entire notion of a DynamicAccessList from Teleport (#39222)

2024-03-14 07:51:11 +00:00

access_list.go

Add conditional update methods for AccessList and AccessListMembers (#40036)

2024-04-02 16:52:55 +00:00

access_monitoring_rules.go

Add access monitoring rules services and backend (#39143)

2024-04-02 15:51:17 +00:00

access_request_cache_test.go

Use new access request filters in webUI (#39625)

2024-03-27 18:21:55 +00:00

access_request_cache.go

Use new access request filters in webUI (#39625)

2024-03-27 18:21:55 +00:00

access_request_test.go

feat: add regexp.match to access request filter and where expressions (#40568)

2024-04-18 00:17:02 +00:00

access_request.go

feat: add regexp.match to access request filter and where expressions (#40568)

2024-04-18 00:17:02 +00:00

access_test.go

Add dynamic/ prefix to server info labels (#36219)

2024-01-11 00:57:52 +00:00

access.go

role pagination (#38714)

2024-02-29 18:40:33 +00:00

app_test.go

Add Annotations for TLS Skip Verify and Ignoring Services for Kubernetes App Discovery (#36394)

2024-01-12 11:01:50 +00:00

app.go

Add Annotations for TLS Skip Verify and Ignoring Services for Kubernetes App Discovery (#36394)

2024-01-12 11:01:50 +00:00

assist.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

audit.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

authentication_test.go

Keep track of whether the user has a real password set (#39576)

2024-04-10 10:28:05 +00:00

authentication.go

Remove CheckAndSetDefaults from types.Resource (#35561)

2023-12-08 18:05:38 +00:00

authority_test.go

keygen: removed unused context (#39922)

2024-03-28 22:53:01 +00:00

authority.go

Machine ID: Add Workload Identity Service (#38181)

2024-02-26 11:43:51 +00:00

clustername.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

compare_test.go

Add CompareResources support for custom equals functions. (#38981)

2024-03-07 02:02:11 +00:00

compare.go

Ignore access list status in CompareResources. (#39832)

2024-03-26 17:03:08 +00:00

configuration.go

Convert SetSessionRecordingConfig usages to new Create/Update/Upsert API (#39249)

2024-03-15 19:55:57 +00:00

connection_diagnostic.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

database_test.go

Add vpc-id label to RDS Auto-Discover converter (#35775)

2023-12-19 11:24:14 +00:00

database.go

AWSOIDC: ListDatabases service (#37853)

2024-02-16 09:34:55 +00:00

databaseobject.go

Implement persistence for database_object resource (#39756)

2024-04-03 08:28:11 +00:00

databaseobjectimportrule.go

Change the tctl format for database_object_import_rule resource (#39764)

2024-04-04 11:10:40 +00:00

databaseserver.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

databaseservice_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

databaseservice.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

desktop.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

device_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

device.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

discoveryconfig_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

discoveryconfig.go

DiscoveryConfig: Update status after each run (#40267)

2024-04-10 17:18:58 +00:00

doc.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

embeddings.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

externalauditstorage_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

externalauditstorage.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

fanoutv2_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

fanoutv2.go

deprecate fanoutv1 (#37836)

2024-02-12 17:31:42 +00:00

fuzz_test.go

Improve performance of resource parsing via predicate expressions (#39929)

2024-03-28 17:28:52 +00:00

github_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

github.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

header.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

headlessauthn_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

headlessauthn.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

identity_test.go

Skip validating minimum password length for existing user logins (#36579)

2024-01-12 21:50:33 +00:00

identity.go

Keep track of whether the user has a real password set (#39576)

2024-04-10 10:28:05 +00:00

impersonate_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

impersonate.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

installer.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

integration_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

integration.go

AWS OIDC: Accept custom issuers (#38785)

2024-03-15 18:08:35 +00:00

inventory.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

kubernetes_test.go

Add backend code for enrolling EKS clusters through AWS OIDC integration. (#36594)

2024-01-18 18:07:07 +00:00

kubernetes.go

Add EKS auto discovery for dynamic integration based fetchers. (#38204)

2024-02-29 00:10:39 +00:00

kubewaitingcontainer.go

add kubernetes waiting container backend service and API (#39317)

2024-03-20 16:03:39 +00:00

label_expressions_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

label_expressions.go

Allow typical parsers to optionally support dynamic values (#39765)

2024-03-27 13:07:47 +00:00

license_test.go

Enable the usage&billing page in self-hosted dashboards (#36498)

2024-01-10 15:27:54 +00:00

license.go

Enable the usage&billing page in self-hosted dashboards (#36498)

2024-01-10 15:27:54 +00:00

lock_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

lock.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

map_test.go

deduplicate remote role mappings (#37485)

2024-01-30 18:36:34 +00:00

matchers_test.go

Improve performance of resource parsing via predicate expressions (#39929)

2024-03-28 17:28:52 +00:00

matchers.go

Improve performance of resource parsing via predicate expressions (#39929)

2024-03-28 17:28:52 +00:00

namespace.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

networking.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

notifications_cache_test.go

add notifications to the cache (#39715)

2024-03-30 01:13:15 +00:00

notifications_cache.go

implement notification sortcaches (#39616)

2024-03-27 13:40:05 +00:00

notifications_test.go

add notifications backend service (#38327)

2024-03-01 18:48:55 +00:00

notifications.go

add notifications to the cache (#39715)

2024-03-30 01:13:15 +00:00

oidc_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

oidc.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

okta_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

okta.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

parser_test.go

Add support for exact matching on an element in a delimited label (#40166)

2024-04-03 17:17:37 +00:00

parser.go

feat: add regexp.match to access request filter and where expressions (#40568)

2024-04-18 00:17:02 +00:00

plugin_data.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

plugin_static_credentials_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

plugin_static_credentials.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

plugins_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

plugins.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

presence.go

Migrate RemoteClusters CRUD to gRPC (#38671)

2024-04-02 11:24:33 +00:00

presets_test.go

Except the okta-requester role from standard system resource behavior. (#38765)

2024-02-29 18:50:56 +00:00

presets.go

Add access monitoring rules cache and tctl interactions (#40218)

2024-04-17 13:05:01 +00:00

process_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

process.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

provisioning.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

reconciler_test.go

Make the helpers for old and new style resources return error if neither matches. (#37907)

2024-02-09 14:39:12 +00:00

reconciler.go

Make reconciler use map keys as resource identity (#39547)

2024-03-19 21:12:42 +00:00

remotecluster.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

resource_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

resource.go

Change the tctl format for database_object_import_rule resource (#39764)

2024-04-04 11:10:40 +00:00

restrictions.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

role_test.go

Implement granular db permissions for Postgres (RFD 151) (#37808)

2024-03-04 19:28:22 +00:00

role.go

Improve performance of resource filtering (#39724)

2024-03-25 17:38:49 +00:00

saml_idp_service_provider_test.go

relax client side entity descriptor validation (#36602)

2024-01-12 17:43:29 +00:00

saml_idp_service_provider.go

remove unused GenerateIdPServiceProviderFromFields func (#38555)

2024-02-23 14:11:32 +00:00

saml_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

saml.go

Replace constants from trace with equivalents defined in teleport (#39307)

2024-03-14 13:04:29 +00:00

scim.go

Changes supporting SCIM group/AccessList management in Enterprise (#39331)

2024-03-15 05:00:45 +00:00

secreports_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

secreports.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

semaphore_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

semaphore.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

server_info.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

server_test.go

DiscoveryService: prevent EICE Node duplication (#40220)

2024-04-15 13:24:33 +00:00

server.go

DiscoveryService: prevent EICE Node duplication (#40220)

2024-04-15 13:24:33 +00:00

servers_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

services_test.go

chore: Bump golangci-lint to v1.56.0 (#37854)

2024-02-07 19:54:00 +00:00

services.go

Add access monitoring rules services and backend (#39143)

2024-04-02 15:51:17 +00:00

session.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

sessionrecording.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

sessiontracker.go

Remove CheckAndSetDefaults from types.Resource (#35561)

2023-12-08 18:05:38 +00:00

statictokens.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

status.go

feat: HSM/KMS CA rotation reminders via cluster alerts (#36780)

2024-01-23 14:11:51 +00:00

traits_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

traits.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

trust.go

port core CA ops to use revisions/atomics (#39845)

2024-04-10 21:15:09 +00:00

trustedcluster.go

deduplicate remote role mappings (#37485)

2024-01-30 18:36:34 +00:00

tunnel.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

tunnelconn.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

ui_config.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

unified_resource_test.go

keygen: removed unused context (#39922)

2024-03-28 22:53:01 +00:00

unified_resource.go

Replace constants from trace with equivalents defined in teleport (#39307)

2024-03-14 13:04:29 +00:00

user_login_state_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

user_login_state.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

user_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

user.go

rework ListUsers API (#39626)

2024-03-21 18:29:11 +00:00

useracl_test.go

Add bot resource to user ACL (#35774)

2023-12-22 19:49:39 +00:00

useracl.go

Remove quiet/silent flags from authz checks (#37832)

2024-02-12 21:17:02 +00:00

usergroup_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

usergroup.go

Add helper method to preserve resource identifiers (#35573)

2023-12-14 19:17:53 +00:00

userpreferences.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

usertoken_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

usertoken.go

Remove CheckAndSetDefaults from types.Resource (#35561)

2023-12-08 18:05:38 +00:00

usertokensecrets.go

Remove CheckAndSetDefaults from types.Resource (#35561)

2023-12-08 18:05:38 +00:00

watcher_test.go

Enable errorlint via golangci-lint (#37669)

2024-02-02 15:59:24 +00:00

watcher.go

DiscoveryService: prevent EICE Node duplication (#40220)

2024-04-15 13:24:33 +00:00

wrappers_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00