Noah Stride ee6e527eaf WMI: Allow max TTL for X509 and JWT SVIDs to be configured (#53787) ...

* Add maximum_ttl fields to the WorkloadIdentity resource

* Update issuer service to respect configurable max TTLs

* Add tests for TTL specification

* Add validation logic & tests

* Update terraform provider

* Fix tbot max ttl limitations

* Clarify name of `ignoreMaximumTTL`

* Introduce `defaultTTL` constant

* Fix generation of jwt

* Update operator resources

2025-04-09 17:28:51 +00:00

..

bot

Machine ID: Provide existing identity when rejoining as part of renewals (#43732)

2024-07-23 11:27:36 +00:00

botfs

fix: use Go 1.18+ build tag syntax (#53746)

2025-04-07 12:35:51 +00:00

cli

Workload Identity: Roles Anywhere tbot service. (#52426)

2025-03-25 15:06:20 +00:00

config

WMI: Allow max TTL for X509 and JWT SVIDs to be configured (#53787)

2025-04-09 17:28:51 +00:00

identity

Fix incorrect usages of "it's" (#48252)

2024-10-31 23:35:30 +00:00

ssh

Machine ID: Generate "includable" ssh_configs (#46397)

2024-09-17 16:53:25 +00:00

testdata

Workload Identity: Roles Anywhere tbot service. (#52426)

2025-03-25 15:06:20 +00:00

tshwrap

Machine ID: Fix tshwrap destination dir handling (#48186)

2024-10-31 21:49:39 +00:00

workloadidentity

Add a parameterized types.Resource153UnwrapperT (#53567)

2025-04-01 14:39:44 +00:00

database_access.go

Start using authclient.Client/ClientI/NewClient (#41539)

2024-05-15 14:09:14 +00:00

identity_test.go

…

loop_test.go

Add runOnInterval helper for tbot (#42916)

2024-06-26 08:06:36 +00:00

loop.go

Machine ID: Add Prometheus metrics for loop tasks (#52410)

2025-02-26 01:13:29 +00:00

output_utils.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_application_output.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_application_tunnel_test.go

Machine ID: application-tunnel service (#44087)

2024-07-19 10:00:51 +00:00

service_application_tunnel.go

Machine ID: Per-ouput credential_ttl and renewal_interval (#51956)

2025-02-14 14:42:17 +00:00

service_bot_identity.go

Machine ID: Add Prometheus metrics for loop tasks (#52410)

2025-02-26 01:13:29 +00:00

service_ca_rotation_test.go

Refactor away lib/tbot/testhelpers (#42699)

2024-06-13 16:00:31 +00:00

service_ca_rotation.go

update log messages (#50679)

2025-01-02 16:54:07 +00:00

service_client_credential.go

Machine ID: Add Prometheus metrics for loop tasks (#52410)

2025-02-26 01:13:29 +00:00

service_database_output.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_database_tunnel.go

Machine ID: Per-ouput credential_ttl and renewal_interval (#51956)

2025-02-14 14:42:17 +00:00

service_diagnostics.go

Fix outdated docs URLs (#50923)

2025-01-16 18:17:35 +00:00

service_example.go

Machine ID: SPIFFE support in tbot (#37772)

2024-03-06 09:48:16 +00:00

service_heartbeat_test.go

Machine ID: Bot Instance heartbeating (#43463)

2024-07-08 09:52:12 +00:00

service_heartbeat.go

Machine ID: Add Prometheus metrics for loop tasks (#52410)

2025-02-26 01:13:29 +00:00

service_identity_output_test.go

Fix tbot SSH with non-multiplexed configuration (#52177)

2025-02-19 10:58:42 +00:00

service_identity_output.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_kubernetes_output_test.go

add emptiness testutils (#50655)

2025-01-07 16:36:01 +00:00

service_kubernetes_output.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_kubernetes_v2_output_test.go

Machine ID: Support path-based Kubernetes routing (#50898)

2025-01-28 02:45:35 +00:00

service_kubernetes_v2_output.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_spiffe_svid_output.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_spiffe_workload_api_sds_test.go

Allow unknown fields when unmarshaling protojson resources (#53469)

2025-03-27 14:35:37 +00:00

service_spiffe_workload_api_sds.go

Machine ID: Per-ouput credential_ttl and renewal_interval (#51956)

2025-02-14 14:42:17 +00:00

service_spiffe_workload_api_test.go

Refactor lib/tbot/spiffe to use WorkloadAttrs proto (#50833)

2025-01-15 12:22:03 +00:00

service_spiffe_workload_api.go

Machine ID: Per-ouput credential_ttl and renewal_interval (#51956)

2025-02-14 14:42:17 +00:00

service_ssh_host_output.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_ssh_multiplexer_test.go

Introduce long-lived SSH proxy for Machine ID (#42592)

2024-06-11 11:45:58 +00:00

service_ssh_multiplexer_unix.go

Ensure tbot compiles on windows (#43877)

2024-07-09 13:52:54 +00:00

service_ssh_multiplexer_windows.go

Ensure tbot compiles on windows (#43877)

2024-07-09 13:52:54 +00:00

service_ssh_multiplexer.go

Machine ID: Add Prometheus metrics for loop tasks (#52410)

2025-02-26 01:13:29 +00:00

service_workload_identity_api_test.go

Workload Identity Revocations Signing (#52353)

2025-02-26 11:03:01 +00:00

service_workload_identity_api.go

Workload Identity Revocations Signing (#52353)

2025-02-26 11:03:01 +00:00

service_workload_identity_aws_ra_test.go

Workload Identity: Roles Anywhere tbot service. (#52426)

2025-03-25 15:06:20 +00:00

service_workload_identity_aws_ra.go

Workload Identity: Roles Anywhere tbot service. (#52426)

2025-03-25 15:06:20 +00:00

service_workload_identity_jwt_test.go

Remove feature flags for new WorkloadIdentity UX (#51233)

2025-01-21 12:31:46 +00:00

service_workload_identity_jwt.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

service_workload_identity_x509_test.go

Workload Identity Revocations Signing (#52353)

2025-02-26 11:03:01 +00:00

service_workload_identity_x509.go

Machine ID: Warn when returned cert TTL is less than expected (#52833)

2025-03-12 19:05:56 +00:00

ssh_proxy.go

Improve client tools host resolution (#50175)

2024-12-20 15:57:26 +00:00

tbot_test.go

Allow Machine ID to be configured to issue reissuable identities (#51951)

2025-02-13 11:59:40 +00:00

tbot.go

Workload Identity: Roles Anywhere tbot service. (#52426)

2025-03-25 15:06:20 +00:00