mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-01 21:52:02 +08:00
Dan Upton
fd2edb678c
* Move `CertificateTTL` and `RenewalInterval` into a `CertificateLifetime` struct These values are always required together, and moving them into a struct will make it more straightforward to override them per-service/output. * Support custom `certificate_ttl` and `renewal_interval` on identity output * Support custom `certificate_ttl` and `renewal_interval` on application output * Support custom `certificate_ttl` and `renewal_interval` on application tunnel * Support custom `certificate_ttl` and `renewal_interval` on Kubernetes output * Support custom `certificate_ttl` and `renewal_interval` on Kubernetes V2 output * Support custom `certificate_ttl` and `renewal_interval` on database tunnel * Support custom `certificate_ttl` and `renewal_interval` on SSH host output * Support custom `certificate_ttl` and `renewal_interval` on SSH multiplexer * Support custom `certificate_ttl` and `renewal_interval` on SPIFFE SVID output * Support custom `certificate_ttl` and `renewal_interval` on database output * Support custom `certificate_ttl` and `renewal_interval` on workload API * Support custom `certificate_ttl` and `renewal_interval` on workload identity output * Add `GetCertificateLifetime` to service config interface * Update the docs * Add more examples to the standard config * Rename `CertificateLifetime` to `CredentialLifetime` So it can be used for non-certificate credentials like JWTs * Deprecate `certificate_ttl` option and replace it with `credential_ttl` * Return TTL warnings as errors and let the caller decide what to do with them * Add `CredentialLifetime` to the "full" service config tests * Support `credential_ttl` and `renewal_interval` in workload-identity-jwt service * Silence sloglint * Replace duplicated helper with `cmp.Or`