Nic Klaassen ef0f92d010 fix: prevent deleting AWS OIDC integration used by EAS (#40630) ...

* fix: prevent deleting AWS OIDC integration used by EAS

The External Audit Storage feature for Teleport Cloud depends on an AWS
OIDC integration to exist in order to get credentials for the customer
AWS account.
It's currently possible for a customer to delete the AWS OIDC
integration referenced by the EAS configuration, leading to the EAS
integration breaking and the Auth service crashing the next time it's
started up.

This commit prevents deleting an AWS OIDC integration currently
referenced by and EAS integration, and prevents creating an EAS
integration referencing an unknown AWS OIDC integration.

* use PreDeleteCheck instead of calling EAS service

* reorder tests and add missing cleanup

* create integrations svc on the fly

* switch to AtomicWrite

* set revision of returned resources

* deprecate gRPC DeleteAllIntegrations and use more general cacheMode

2024-04-23 21:22:16 +00:00

..

cache_test.go

fix: prevent deleting AWS OIDC integration used by EAS (#40630)

2024-04-23 21:22:16 +00:00

cache.go

fix: prevent deleting AWS OIDC integration used by EAS (#40630)

2024-04-23 21:22:16 +00:00

collections.go

Don't let users watch Web Sessions with secrets (#39588)

2024-04-22 22:45:05 +00:00

doc.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00