Carlisia Campos 1fdd39e771 Add visible labels for Azure and GCP VM auto-discovery (#65400) ...

* Add visible labels for Azure and GCP VMs

Auto-discovered Azure and GCP VM nodes now emit user-visible labels
with the teleport.dev/ prefix alongside the existing hidden labels
that use the teleport.internal/ prefix. The new labels appear in the
UI and CLI and can be used in RBAC role definitions and for resource
filtering. Previously only hidden internal-prefix labels were set,
so users had no way to reference them in access policies.

The docs label reference tables are updated to show the new prefix
and an incorrect "Azure AKS" heading in the GCP Kubernetes clusters
section is corrected to "GCP GKE".

* Rename Azure VM label constants for clarity

The visible labels (teleport.dev/ prefix) now use the short canonical
names SubscriptionIDLabel, VMIDLabel, RegionLabel, and the internal
labels (teleport.internal/ prefix) are renamed with an Internal suffix
such as SubscriptionIDLabelInternal and VMIDLabelInternal. Previously
the short names pointed to the internal prefix and the visible variants
carried a "Visible" suffix, which inverted the expected importance
hierarchy. The node filter still matches on internal labels so nodes
that were enrolled before this rename remain discoverable.

2026-04-07 15:11:13 +00:00

..

accessgraph

[sec_scan][24] extract AuthorizedKey's comment and type (#44643)

2024-07-29 19:33:29 +00:00

accesslist

Stop comparing AccessListMembers with go-cmp (#64542)

2026-03-16 18:50:02 +00:00

accessmonitoringrule

Add initial access monitoring rule resource (#36745)

2024-03-08 15:46:00 +00:00

appauthconfig

Add app auth config backend service (#61688)

2025-12-03 23:09:01 +00:00

autoupdate

MWI: Generate AutoUpdateBotInstanceReport resource (#59738)

2025-10-07 14:32:36 +00:00

backendinfo

Fix major version check for stateless environment (#52837)

2025-05-05 22:51:24 +00:00

clusterconfig

Add DemoMode and Status to AccessGraphSettings (#53371)

2025-04-01 15:27:40 +00:00

common

Add AWS Roles Anywhere as valid origin label (#55214)

2025-05-29 07:31:55 +00:00

compare

Uniform equal function names to IsEqual (#40441)

2024-04-19 09:22:43 +00:00

discoveryconfig

Discovery Config Status: add sync and end time per resource type (#64956)

2026-04-02 13:12:31 +00:00

events

[Browser MFA] Add browser MFA path to MFA finish flow (#64523)

2026-03-28 11:36:18 +00:00

externalauditstorage

Fix gRPC -> Teleport types message conversion (#56124)

2025-06-30 08:46:27 +00:00

grpcclientconfig

auth: add grpc service config discovery api (#62937)

2026-02-17 16:17:50 +00:00

header

Fix gRPC -> Teleport types message conversion (#56124)

2025-06-30 08:46:27 +00:00

healthcheckconfig

Add health check config service (#53438)

2025-03-28 18:56:29 +00:00

installers

[buddy] Install jq if Teleport binary was installed (#53983)

2025-04-14 15:51:14 +00:00

kubewaitingcontainer

Introduce patch_type to KubernetesWaitingContainer (#39738)

2024-03-22 19:35:46 +00:00

label

Implement persistence for db_object_import_rule resource (#37806)

2024-02-22 03:54:27 +00:00

samlsp

add Microsoft Entra ID SAML service provider preset (#53676)

2025-04-08 15:18:24 +00:00

secreports

Fix gRPC -> Teleport types message conversion (#56124)

2025-06-30 08:46:27 +00:00

summarizer

Add AWS region validation for Bedrock inference model (#64248)

2026-03-04 20:10:26 +00:00

trait

Extend user_login_state with SAML connector info and grants (#58581)

2025-12-10 17:20:55 +00:00

userloginstate

Extend user_login_state with SAML connector info and grants (#58581)

2025-12-10 17:20:55 +00:00

userprovisioning

Add StaticHostUserV2 (#46038)

2024-09-04 21:16:11 +00:00

usertasks

EC2 auto-discovery: add IAM permission issue types and descriptions (#63909)

2026-02-19 18:39:34 +00:00

vnet

Add vnet_config support for terraform (#62592)

2026-03-02 18:28:08 +00:00

webauthn

feat: Implement the WebAuthn credProps extension (#45252)

2024-08-15 13:28:19 +00:00

wrappers

fix: populate user_roles and user_traits for ssh sessions (#58794)

2025-09-05 14:28:08 +00:00

access_request_test.go

Fix bug causing the expiry service to spin infinite loop (#63615)

2026-02-18 14:35:58 +00:00

access_request.go

Access Requests: Add Resource-Scoped Constraints (#60123)

2026-01-27 14:51:52 +00:00

accountrecovery.go

Fixed additional license format issues (#34726)

2023-11-17 21:14:08 +00:00

app_test.go

[mcp] server handler for streamable HTTP transport (#59499)

2025-09-29 17:42:09 +00:00

app.go

adding immutable labels to scoped tokens and host certificates (#62941)

2026-02-06 20:57:03 +00:00

appserver_test.go

AWS OIDC: add aws account id as label to AWS App (#49693)

2024-12-06 08:43:03 +00:00

appserver.go

Expose IsEqual for more resource types (#64520)

2026-03-11 17:54:10 +00:00

assertion_info_test.go

…

assertion_info.go

…

audit.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

authentication_authpreference_test.go

[Browser MFA] Rename browser mfa config name (#64980)

2026-03-26 08:58:33 +00:00

authentication_mfadevice_test.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704)

2024-10-16 22:24:07 +00:00

authentication_test.go

Add second_factors (#47233)

2024-10-11 00:02:39 +00:00

authentication.go

[Browser MFA] Rename browser mfa config name (#64980)

2026-03-26 08:58:33 +00:00

authority_test.go

verify cluster name of TLS peer certificates (#52128)

2025-02-13 21:25:52 +00:00

authority.go

Stop comparing CertAuthorityV2 with go-cmp (#64135)

2026-02-27 23:24:02 +00:00

clone_test.go

Access Requests: Add Resource-Scoped Constraints (#60123)

2026-01-27 14:51:52 +00:00

cluster_alert_test.go

Add a link text label to the ClusterAlert resource (#45972)

2024-09-05 10:24:39 +00:00

cluster_alert.go

Add a link text label to the ClusterAlert resource (#45972)

2024-09-05 10:24:39 +00:00

clustername.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

connection_diagnostic.go

…

constants.go

Add visible labels for Azure and GCP VM auto-discovery (#65400)

2026-04-07 15:11:13 +00:00

database_permissions_test.go

Add DatabasePermissions field to role (#37797)

2024-02-07 20:03:11 +00:00

database_permissions.go

Bump golangci-lint to v2 (#54410)

2025-05-07 22:14:51 +00:00

database_test.go

Append project ID-based suffix for GCP Postgres databases (#58940)

2025-09-23 13:32:09 +00:00

database.go

adding immutable labels to scoped tokens and host certificates (#62941)

2026-02-06 20:57:03 +00:00

databaseserver_test.go

Fix an issue tsh db ls shows one entry per db server instead of db name (#40784)

2024-04-22 20:21:40 +00:00

databaseserver.go

adding scope validation to SSH heartbeats (#60524)

2025-11-10 22:02:57 +00:00

databaseservice.go

Convert cache list resources implementation to store items in memory (#53355)

2025-04-28 19:01:22 +00:00

derived.gen.go

adding kube support to scoped roles (#65132)

2026-04-02 21:06:53 +00:00

desktop_test.go

Validate desktop names (#31739)

2023-09-12 18:56:31 +00:00

desktop.go

Expose IsEqual for more resource types (#64520)

2026-03-11 17:54:10 +00:00

device_test.go

Use the DeviceCollectedData.os_login_user field (#63389)

2026-02-03 14:19:37 +00:00

device.go

Use the DeviceCollectedData.os_login_user field (#63389)

2026-02-03 14:19:37 +00:00

device.pb.go

Add the DeviceCollectedData.os_login_user field (#63341)

2026-02-03 13:47:28 +00:00

duration_test.go

…

duration.go

Fix AWS IID TTL type in scoped tokens (#64026)

2026-02-20 20:08:09 +00:00

events_test.go

add CA filter for all known CAs to cache configs (#36361)

2024-01-09 18:30:41 +00:00

events.go

add CA filter for all known CAs to cache configs (#36361)

2024-01-09 18:30:41 +00:00

extension.go

Add support for Protobuf Enums into Operator CRDs (#32469)

2023-09-26 13:43:50 +00:00

fuzz_test.go

Fix AWS IID TTL type in scoped tokens (#64026)

2026-02-20 20:08:09 +00:00

github_test.go

[chore] clean up DELETE IN 18 comments (#55118)

2025-05-24 17:30:24 +00:00

github.go

implement identifier first login backend (#55932)

2025-07-02 17:58:39 +00:00

headlessauthn.go

Fix headless authentication matching logic for watcher (#28843)

2023-07-11 20:05:17 +00:00

installer.go

Convert installers, web tokens and ui config to new cache collections (#54497)

2025-05-06 13:36:02 +00:00

instance_test.go

Display update group in tctl inventory (#54324)

2025-05-05 20:39:27 +00:00

instance.go

Display update group in tctl inventory (#54324)

2025-05-05 20:39:27 +00:00

integration_awsoidc.go

AWSOIDC: Compute Proxy's Endpoint for issuing a token (#37253)

2024-01-26 13:35:16 +00:00

integration_github_test.go

GitHub proxy: web apis for enrolment (#51423)

2025-02-03 19:12:08 +00:00

integration_github.go

GitHub proxy: web apis for enrolment (#51423)

2025-02-03 19:12:08 +00:00

integration_test.go

Support IntegrationV1 in terraform provider (#61764)

2025-12-02 00:16:04 +00:00

integration.go

Integration brief summaries returned by web listIntegrations. Updated integrations list issues and details to use the new fields (#62777)

2026-01-22 22:27:50 +00:00

jamf_test.go

remove protobuf fields for storing Jamf username, password, client_id and client_secret (#45957)

2024-08-28 20:04:54 +00:00

jamf.go

disable JamfSpec secrets validation (#45959)

2024-08-28 14:57:39 +00:00

jwt.go

Add support to sign MCP egress JWT with OIDC CA (#62043)

2026-01-02 15:16:23 +00:00

kubernetes_server_test.go

Fix some lint issues (#38913)

2024-03-07 18:04:51 +00:00

kubernetes_server.go

Expose IsEqual for more resource types (#64520)

2026-03-11 17:54:10 +00:00

kubernetes_test.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

kubernetes.go

adding kube support to scoped roles (#65132)

2026-04-02 21:06:53 +00:00

license_test.go

Adds IGS related fields to feature, module, and license objects (#34868)

2023-11-27 18:22:49 +00:00

license.go

Fix license stringification (#46415)

2024-09-10 13:05:48 +00:00

lock_test.go

refactor lib/srv to adopt pdp-style patterns (#54081)

2025-05-06 16:37:03 +00:00

lock.go

MWI: Add lock targets for join token name and bot instance ID (#56021)

2025-06-26 22:58:02 +00:00

maintenance_test.go

Fix CMC weekdays bug (#54076)

2025-04-16 19:25:34 +00:00

maintenance.go

Fix CMC weekdays bug (#54076)

2025-04-16 19:25:34 +00:00

matchers_accessgraph.go

[iac] Implement AWS CloudTrail log ingestion for Access Graph (#54989)

2025-05-22 13:48:31 +00:00

matchers_aws_test.go

Refactor teleport/discovery/aws module to support eks (#65002)

2026-04-03 21:02:11 +00:00

matchers_aws.go

Refactor teleport/discovery/aws module to support eks (#65002)

2026-04-03 21:02:11 +00:00

matchers_azure_test.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers_azure.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers_gcp_test.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers_gcp.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers_kube_test.go

DiscoveryMatchers: move checkandset to types package (#32857)

2023-10-04 13:48:09 +00:00

matchers_kube.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

matchers_test.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

matchers.go

Add support for HTTP_PROXY in Server auto discovery (#60635)

2025-11-05 15:00:39 +00:00

metadata.pb.go

TDPB Message Definitions (#62100)

2025-12-31 16:59:49 +00:00

mfa_device.pb.go

[Browser MFA] Add Browser MFA to challenge request flow (#63936)

2026-03-26 12:24:12 +00:00

mfa_test.go

Stop comparing Users with go-cmp (#64127)

2026-03-12 20:45:35 +00:00

mfa.go

Stop comparing Users with go-cmp (#64127)

2026-03-12 20:45:35 +00:00

msgraph_test.go

refactor intune exported constants and validator (#58043)

2025-08-19 17:04:28 +00:00

msgraph.go

lib/msgraph: Add auth error handling, logging, and Client-Request-Id header (#58661)

2025-09-09 08:48:53 +00:00

namespace.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

networking_test.go

Allow a custom SSH dial timeout to be set cluster wide (#45507)

2024-08-20 13:11:46 +00:00

networking.go

Allow a custom SSH dial timeout to be set cluster wide (#45507)

2024-08-20 13:11:46 +00:00

oidc_external_test.go

OIDC: validate the client_secret field (#46041)

2024-10-16 19:25:59 +00:00

oidc_external.go

…

oidc_test.go

Restrict the maximum length of an auth connector name (#63923)

2026-03-31 23:42:35 +00:00

oidc.go

Restrict the maximum length of an auth connector name (#63923)

2026-03-31 23:42:35 +00:00

okta_test.go

Okta: Add disableAssignDefaultRoles to plugin sync settings (#54878)

2025-05-23 21:19:23 +00:00

okta.go

Extend OktaAssignmentV1.String() with more useful info (#64541)

2026-03-23 13:23:44 +00:00

order.go

…

plugin_data.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

plugin_static_credentials.go

Adds protobuf description of a service for updating Plugins' static credentials. (#57690)

2025-08-26 11:42:22 +00:00

plugin_test.go

Add protos for Intune plugin (#57074)

2025-08-01 14:22:52 +00:00

plugin.go

update PluginEntraIDSyncSettings to configure source of access list owners. (#62765)

2026-01-16 11:22:44 +00:00

presence.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

provisioning_test.go

fixing scoped kube token validation of service accounts (#64952)

2026-03-27 13:45:26 +00:00

provisioning.go

fixing scoped kube token validation of service accounts (#64952)

2026-03-27 13:45:26 +00:00

proxied_service.go

…

register.go

…

remotecluster.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

resource_153_test.go

Remove Resource153Unwrapper interface (#53699)

2025-04-04 21:11:22 +00:00

resource_153.go

Convert Identity Center Accounts to Apps in the UnifiedResourceCache (#54911)

2025-05-20 20:57:52 +00:00

resource_constraints.go

types: Add types for SSH Node Resource Constraints (#64287)

2026-03-06 21:13:43 +00:00

resource_ids_test.go

Access Requests: New Types for Resource-Scoped Constraints (#61168)

2026-01-26 23:41:53 +00:00

resource_ids.go

Access Requests: Add Resource-Scoped Constraints (#60123)

2026-01-27 14:51:52 +00:00

resource_test.go

delete unused app_server_or_saml_idp_sp type and its usage (#54473)

2025-05-06 22:00:47 +00:00

resource.go

Add MCP Server filter for WebUI (#58171)

2025-08-25 13:50:50 +00:00

resources.pb.go

types: Add types for SSH Node Resource Constraints (#64287)

2026-03-06 21:13:43 +00:00

restrictions.go

Convert network restrictions to new cache mechanism (#54504)

2025-05-09 14:04:18 +00:00

role_test.go

Add support for CRDs in access requests. (#54891)

2025-07-07 15:58:31 +00:00

role.go

Expose IsEqual for more resource types (#64520)

2026-03-11 17:54:10 +00:00

saml_idp_service_provider_test.go

aws identity center plugin config dependency (#47844)

2024-10-23 18:28:23 +00:00

saml_idp_service_provider.go

delete unused app_server_or_saml_idp_sp type and its usage (#54473)

2025-05-06 22:00:47 +00:00

saml_test.go

Fix URL components for SAML auth connector ACS URL in tests, error message. (#65193)

2026-03-30 20:10:35 +00:00

saml.go

Fix URL components for SAML auth connector ACS URL in tests, error message. (#65193)

2026-03-30 20:10:35 +00:00

second_factor_test.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

second_factor.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

semaphore.go

[api] Add ListSemaphores (#60672)

2025-10-29 11:37:59 +00:00

server_info_test.go

EC2 Auto-Discovery: EICE support (#35504)

2024-03-26 16:16:20 +00:00

server_info.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

server_test.go

adding immutable labels to scoped tokens and host certificates (#62941)

2026-02-06 20:57:03 +00:00

server.go

adding immutable labels to scoped tokens and host certificates (#62941)

2026-02-06 20:57:03 +00:00

session_tracker_test.go

fix: session trackers participants inconsistencies (#58853)

2025-09-08 16:07:11 +00:00

session_tracker.go

fix: session trackers participants inconsistencies (#58853)

2025-09-08 16:07:11 +00:00

session.go

Add SetAppSessionDBSCPublicKey RPC for DBSC device binding (#65032)

2026-04-03 17:50:57 +00:00

sessionrecording_test.go

adding manual key management config (#56920)

2025-08-05 21:21:10 +00:00

sessionrecording.go

Add missing handling for recording encryption configs and keys (#57279)

2025-08-13 15:14:20 +00:00

signaturealgorithmsuite.go

refactor new join flow (#59331)

2025-09-30 16:33:35 +00:00

sortby_test.go

…

sortby.go

Use new access request filters in webUI (#39625)

2024-03-27 18:21:55 +00:00

statictokens.go

Add support for in memory caching (#52210)

2025-04-10 21:18:24 +00:00

system_role_test.go

Make system roles case-insensitive in provision tokens (#33053)

2023-10-10 20:19:30 +00:00

system_role.go

Restrict the maximum length of an auth connector name (#63923)

2026-03-31 23:42:35 +00:00

target_health_test.go

Aggregate health status in unified resource cache (#54868)

2025-06-04 21:54:30 +00:00

target_health.go

Refactor healthcheck for Kubernetes extensibility with HealthChecker interface (#59396)

2025-09-24 21:31:07 +00:00

traits.go

…

trust_test.go

Make use of the newly-introduced WindowsCA (#63035)

2026-01-22 18:12:54 +00:00

trust.go

Make use of the newly-introduced WindowsCA (#63035)

2026-01-22 18:12:54 +00:00

trusted_device_requirement.pb.go

Show device trust status in Connect (#49508)

2024-11-29 10:11:30 +00:00

trustedcluster.go

Add UpsertTrustedClusterV2 RPC (#49789)

2024-12-21 04:24:29 +00:00

tunnel_strategy_test.go

…

tunnel_strategy.go

…

tunnel.go

Convert resource to use in memory cache collections (#54322)

2025-04-29 11:58:54 +00:00

tunnelconn.go

Update (*TunnelConnectionV2) Clone to do a full copy (#54661)

2025-05-09 13:03:10 +00:00

types.pb.go

adding kube support to scoped roles (#65132)

2026-04-02 21:06:53 +00:00

ui_config.go

Convert installers, web tokens and ui config to new cache collections (#54497)

2025-05-06 13:36:02 +00:00

user_test.go

Stop comparing Users with go-cmp (#64127)

2026-03-12 20:45:35 +00:00

user.go

Stop comparing Users with go-cmp (#64127)

2026-03-12 20:45:35 +00:00

usergroup_test.go

…

usergroup.go

Expose IsEqual for more resource types (#64520)

2026-03-11 17:54:10 +00:00

usertoken.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

usertokensecrets.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

watch_status.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00