opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-10-30 18:29:21 +08:00
Code Issues Packages Projects Releases Wiki Activity
Files
5fa17d4d31111018ed487b37c856e03d3f7ec93a
teleport/lib/services
T
History
Edward DowlingandPawel Kopiczko 46b23ce10d Respect role max duration when request does not set it (#51467) 
* Respect role max duration when request does not set it

* Update lib/services/access_request_test.go

Co-authored-by: Pawel Kopiczko <pawel.kopiczko@goteleport.com>

* Update lib/services/access_request.go

Co-authored-by: Pawel Kopiczko <pawel.kopiczko@goteleport.com>

* Add test for max_duration when a requesting user has multiple roles

* Refactor max duration calculation to be clearer

* Fix typo

---------

Co-authored-by: Pawel Kopiczko <pawel.kopiczko@goteleport.com>
2025-01-31 17:27:48 +00:00
..
expiry
Add initial expiry service (#49267)
2025-01-06 15:06:17 +00:00
local
Stable UNIX users: storage and auth API (#51102)
2025-01-28 17:08:20 +00:00
readonly
Stable UNIX users: storage and auth API (#51102)
2025-01-28 17:08:20 +00:00
simple
Convert lib/services to use slog (#50348)
2024-12-21 02:06:10 +00:00
suite
chore: Bump github.com/jonboulle/clockwork to v0.5.0 (#51434)
2025-01-24 15:22:13 +00:00
access_checker_test.go
Add workload_identity_labels to RoleCondition (#50071)
2024-12-12 11:46:19 +00:00
access_checker.go
Convert lib/services to use slog (#50348)
2024-12-21 02:06:10 +00:00
access_graph_settings.go
[sec_scan][11] add AccessGraphSettings backend service (#44014)
2024-07-17 15:30:27 +00:00
access_graph.go
[sec_scan][16] add methods to store/retrieve device assertion functions (#44081)
2024-07-15 08:30:36 +00:00
access_list_test.go
feat: Allow including Access Lists as nested members and owners (#38738)
2024-11-01 22:07:36 +00:00
access_list.go
feat: Allow including Access Lists as nested members and owners (#38738)
2024-11-01 22:07:36 +00:00
access_monitoring_rules.go
Add initial condition parser for access monitoring rules (#40659)
2024-05-24 18:45:13 +00:00
access_request_cache_test.go
fix access request cache panic (#44790)
2024-08-07 16:04:46 +00:00
access_request_cache.go
fix access request cache panic (#44790)
2024-08-07 16:04:46 +00:00
access_request_test.go
Respect role max duration when request does not set it (#51467)
2025-01-31 17:27:48 +00:00
access_request.go
Respect role max duration when request does not set it (#51467)
2025-01-31 17:27:48 +00:00
access_test.go
Add dynamic/ prefix to server info labels (#36219)
2024-01-11 00:57:52 +00:00
access.go
role pagination (#38714)
2024-02-29 18:40:33 +00:00
app_test.go
kube: resolve Kubernetes cluster domain (#43584)
2024-06-28 09:14:12 +00:00
app.go
Fix outdated docs URLs (#50923)
2025-01-16 18:17:35 +00:00
audit.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
authentication_test.go
feat: SSO MFA - Add ephemeral SSO MFA device (#46704)
2024-10-16 22:24:07 +00:00
authentication.go
feat: SSO MFA - Add ephemeral SSO MFA device (#46704)
2024-10-16 22:24:07 +00:00
authority_test.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
authority.go
Add host fields and protos for ssh identities (#51024)
2025-01-27 18:51:37 +00:00
autoupdates.go
enforce conditional updates on AutoUpdate* + rename typos (#48240)
2024-11-04 18:36:16 +00:00
bot_instance.go
Add basic CRUD for BotInstanceService (#42899)
2024-06-25 21:51:29 +00:00
clustername.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
compare_test.go
Add access list IneligibleStatus to ignored fields (#41830)
2024-05-22 14:28:23 +00:00
compare.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
configuration_test.go
Stable UNIX users: storage and auth API (#51102)
2025-01-28 17:08:20 +00:00
configuration.go
Stable UNIX users: storage and auth API (#51102)
2025-01-28 17:08:20 +00:00
connection_diagnostic.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
crown_jewel.go
refactor common proto resource (un)marshallers into generic functions (#41562)
2024-05-15 18:18:03 +00:00
crown_jewels_test.go
Add Query field to CrownJewel specifications (#44853)
2024-08-01 17:56:34 +00:00
database_test.go
Remove lib/cloud dependencies from lib/services (#41740)
2024-05-20 18:30:53 +00:00
database.go
Convert lib/services to use slog (#50348)
2024-12-21 02:06:10 +00:00
databaseobject.go
Cache support for database objects (#41692)
2024-05-27 11:36:58 +00:00
databaseobjectimportrule.go
Change the tctl format for database_object_import_rule resource (#39764)
2024-04-04 11:10:40 +00:00
databaseserver.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
databaseservice_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
databaseservice.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
desktop.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
device_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
device.go
[sec_scan][16] add methods to store/retrieve device assertion functions (#44081)
2024-07-15 08:30:36 +00:00
discoveryconfig_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
discoveryconfig.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
doc.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
dynamic_desktop.go
Cache and watcher support for DynamicWindowsDesktop (#46989)
2024-10-22 21:22:03 +00:00
externalauditstorage_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
externalauditstorage.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
fanoutv2_test.go
Get rid of math/rand in favor of math/rand/v2 (#49294)
2024-11-21 12:57:32 +00:00
fanoutv2.go
Don't let users watch Web Sessions with secrets (#39588)
2024-04-22 22:45:05 +00:00
fuzz_test.go
Improve performance of resource parsing via predicate expressions (#39929)
2024-03-28 17:28:52 +00:00
git_server.go
GitHub proxy part 6: proxing Git using SSH transport (#49980)
2025-01-14 21:48:04 +00:00
github_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
github.go
Include BuildCommunity in built type checks (#42391)
2024-06-04 20:10:38 +00:00
header.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
headlessauthn_test.go
Headless authn support for split SSH/TLS keys (#45646)
2024-08-22 15:38:22 +00:00
headlessauthn.go
Headless authn support for split SSH/TLS keys (#45646)
2024-08-22 15:38:22 +00:00
identity_test.go
Skip validating minimum password length for existing user logins (#36579)
2024-01-12 21:50:33 +00:00
identity.go
feat: SSO MFA - Add SSOMFASessionData (#47647)
2024-10-21 19:50:01 +00:00
identitycenter_test.go
Adds RBAC support for Identity Center Accounts (#49808)
2024-12-06 01:01:15 +00:00
identitycenter.go
Fixes IC Account Assignment role matcher (#49977)
2024-12-10 11:40:51 +00:00
impersonate_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
impersonate.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
installer.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
integration_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
integration.go
Adding OIDC auth functionality to the Azure integration (#51219)
2025-01-23 18:03:16 +00:00
inventory.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
kubernetes_test.go
Reduce exposure of lib/cloud/gcp (#41678)
2024-05-17 10:29:02 +00:00
kubernetes.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
kubewaitingcontainer.go
refactor common proto resource (un)marshallers into generic functions (#41562)
2024-05-15 18:18:03 +00:00
label_expressions_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
label_expressions.go
Allow typical parsers to optionally support dynamic values (#39765)
2024-03-27 13:07:47 +00:00
license_test.go
Enable the usage&billing page in self-hosted dashboards (#36498)
2024-01-10 15:27:54 +00:00
license.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
lock_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
lock.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
map_test.go
deduplicate remote role mappings (#37485)
2024-01-30 18:36:34 +00:00
matchers_test.go
Forbid custom namespaces in various resources (#49830)
2024-12-05 19:21:24 +00:00
matchers.go
Convert lib/services to use slog (#50348)
2024-12-21 02:06:10 +00:00
namespace.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
networking.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
notifications_cache_test.go
implement listing notifications for a user with matching (#39942)
2024-05-15 19:26:58 +00:00
notifications_cache.go
Consistently use logutils.TypeAttr (#49948)
2024-12-09 21:10:59 +00:00
notifications_test.go
implement listing notifications for a user with matching (#39942)
2024-05-15 19:26:58 +00:00
notifications.go
add unique notification identifier protos and crud methods (#51358)
2025-01-23 18:27:31 +00:00
oidc_test.go
Remove OIDCClaimsToTraits helper function (#48599)
2024-11-08 13:29:21 +00:00
oidc.go
Remove OIDCClaimsToTraits helper function (#48599)
2024-11-08 13:29:21 +00:00
okta_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
okta.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
parser_test.go
Add support for exact matching on an element in a delimited label (#40166)
2024-04-03 17:17:37 +00:00
parser.go
Convert lib/services to use slog (#50348)
2024-12-21 02:06:10 +00:00
plugin_data.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
plugin_static_credentials_test.go
GitHub Proxy part 3.5: caching PluginStaticCredentials (#49472)
2024-12-03 15:32:00 +00:00
plugin_static_credentials.go
GitHub Proxy part 3: gen github user cert and export CA (#49396)
2024-12-03 18:17:21 +00:00
plugins_test.go
Adds detailed Okta status to Plugin Resource (#44431)
2024-07-24 01:32:08 +00:00
plugins.go
Add plugin resource handling in tctl (#42059)
2024-05-31 10:44:15 +00:00
presence.go
Remove the auth namespaces REST API (#50999)
2025-01-15 14:21:23 +00:00
presets_test.go
GitHub proxy: role presets and user traits (#51299)
2025-01-22 17:57:23 +00:00
presets.go
Support more fields in the role editor (#51458)
2025-01-31 14:00:13 +00:00
process_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
process.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
provisioning.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
provisioningstates.go
feat: identity center and provisioning service gRPC client with deleteAllxxx methods (#48714)
2024-11-12 16:57:47 +00:00
reconciler_test.go
Allow Reconciler to change resource origin (#50851)
2025-01-08 23:00:04 +00:00
reconciler.go
Allow Reconciler to change resource origin (#50851)
2025-01-08 23:00:04 +00:00
remotecluster.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
resource_test.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
resource.go
Add basic tctl commands for WorkloadIdentity resource kind (#49828)
2024-12-10 17:19:05 +00:00
restrictions.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
role_test.go
GitHub proxy: role presets and user traits (#51299)
2025-01-22 17:57:23 +00:00
role.go
Convert lib/services to use aws-sdk-go-v2 (#51706)
2025-01-31 15:53:33 +00:00
saml_idp_service_provider_test.go
move acs_url and relay_state input validation to rpc create and update methods (#46833)
2024-09-20 23:59:16 +00:00
saml_idp_service_provider.go
Convert lib/services to use slog (#50348)
2024-12-21 02:06:10 +00:00
saml_test.go
fix panic in CheckSAMLEntityDescriptor (#51583)
2025-01-29 17:49:57 +00:00
saml.go
fix panic in CheckSAMLEntityDescriptor (#51583)
2025-01-29 17:49:57 +00:00
scim.go
Changes supporting SCIM group/AccessList management in Enterprise (#39331)
2024-03-15 05:00:45 +00:00
secreports_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
secreports.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
semaphore_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
semaphore.go
Convert lib/services to use slog (#50348)
2024-12-21 02:06:10 +00:00
server_info.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
server.go
GitHub Proxy part 2: git_server resource, service, and RBAC (#49393)
2024-11-27 16:12:30 +00:00
servers_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
services_test.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
services.go
Eliminate services.Services interface and XXXClient() methods on auth.Services (#45058)
2024-08-06 17:41:52 +00:00
session.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
sessionrecording.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
sessiontracker.go
Remove CheckAndSetDefaults from types.Resource (#35561)
2023-12-08 18:05:38 +00:00
spiffe_federations_test.go
Add backend Service and Cache support for SPIFFE Federation resource (#45054)
2024-08-12 12:25:59 +00:00
spiffe_federations.go
Workload Identity: SPIFFE Federation Syncer (#45586)
2024-08-30 10:04:34 +00:00
sso_mfa.go
Use json compatible struct for SSOMFASessionData (#47826)
2024-10-31 19:59:53 +00:00
stableunixusers.go
Stable UNIX users: storage and auth API (#51102)
2025-01-28 17:08:20 +00:00
statichostuser_test.go
Add StaticHostUserV2 (#46038)
2024-09-04 21:16:11 +00:00
statichostuser.go
Add StaticHostUserV2 (#46038)
2024-09-04 21:16:11 +00:00
statictokens.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
status.go
feat: HSM/KMS CA rotation reminders via cluster alerts (#36780)
2024-01-23 14:11:51 +00:00
traits_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
traits.go
Convert lib/services to use slog (#50348)
2024-12-21 02:06:10 +00:00
trust.go
switch trusted/remote cluster management to atomic write (#48009)
2024-10-29 17:28:01 +00:00
trustedcluster.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
tunnel.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
tunnelconn.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
ui_config.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
unified_resource_test.go
Add Identity Center Account Assignments to Unified Resource Cache (#49580)
2024-12-09 12:02:36 +00:00
unified_resource.go
Define Backend.GetRange to be inclusive (#50996)
2025-01-14 16:28:06 +00:00
user_login_state_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
user_login_state.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
user_task_test.go
User Tasks: add discover-ec2 task type (#47062)
2024-10-04 11:05:27 +00:00
user_task.go
UserTasks: List by Integration service method (#47327)
2024-10-09 08:46:06 +00:00
user_test.go
Remove OIDCClaimsToTraits helper function (#48599)
2024-11-08 13:29:21 +00:00
user.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
useracl_test.go
GitHub proxy part 4.5: git server in UI (#49644)
2025-01-21 18:12:30 +00:00
useracl.go
GitHub proxy part 4.5: git server in UI (#49644)
2025-01-21 18:12:30 +00:00
usergroup_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
usergroup.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
userpreferences.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
usertoken_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00
usertoken.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
usertokensecrets.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
vnet_config.go
[vnet] leaf cluster support (#42600)
2024-06-11 10:10:13 +00:00
watcher_test.go
GitHub proxy part 6: proxing Git using SSH transport (#49980)
2025-01-14 21:48:04 +00:00
watcher.go
GitHub proxy: download GitHub server keys (#50891)
2025-01-21 14:59:10 +00:00
workload_identity_test.go
Workload ID: Introduce basic rule condition operators (#50940)
2025-01-10 21:15:11 +00:00
workload_identity.go
Workload ID: Introduce basic rule condition operators (#50940)
2025-01-10 21:15:11 +00:00
wrappers_test.go
Updated Teleport codebase to AGPL3 license (#35259)
2023-12-01 17:48:14 +00:00