Noah Stride 7cbb46d2ed Support configuring StaticJWKS for the GitLab join method (#53386) ...

* Update protobuf

* Implement and test ValidateTokenWithJWKS

* Update join logic to use new method for static jwks

* Update Terraform Provider

* Update operator docs/files

* Update goldenfile

2025-03-25 18:03:09 +00:00

..

accessgraph

[sec_scan][24] extract AuthorizedKey's comment and type (#44643)

2024-07-29 19:33:29 +00:00

accesslist

feat: Allow including Access Lists as nested members and owners (#38738)

2024-11-01 22:07:36 +00:00

accessmonitoringrule

Add initial access monitoring rule resource (#36745)

2024-03-08 15:46:00 +00:00

autoupdate

Add autoupdate_config and autoupdate_agent_rollout validation (#50181)

2024-12-17 17:12:42 +00:00

clusterconfig

[sec_scan][11] add AccessGraphSettings backend service (#44014)

2024-07-17 15:30:27 +00:00

common

Improve perf on label key validation (#52579)

2025-03-03 11:24:43 +00:00

compare

Uniform equal function names to IsEqual (#40441)

2024-04-19 09:22:43 +00:00

discoveryconfig

Protobuf and configuration for Access Graph Azure Discovery (#50364)

2024-12-18 20:05:56 +00:00

events

Workload ID: Include attributes in issuance audit events (#53016)

2025-03-18 09:45:14 +00:00

externalauditstorage

fix: prevent deleting AWS OIDC integration used by EAS (#40630)

2024-04-23 21:22:16 +00:00

header

[sec_scan][15] add support for edits to AccessGraphSettings via tctl (#44055)

2024-07-23 08:40:05 +00:00

installers

Teleport Install scripts: use /etc/apt/keyrings/ when adding Teleport's public key for DEB packages (#50273)

2025-01-15 15:14:51 +00:00

kubewaitingcontainer

Introduce patch_type to KubernetesWaitingContainer (#39738)

2024-03-22 19:35:46 +00:00

label

Implement persistence for db_object_import_rule resource (#37806)

2024-02-22 03:54:27 +00:00

samlsp

aws identity center plugin config dependency (#47844)

2024-10-23 18:28:23 +00:00

secreports

Security Reports (#30853)

2023-10-16 10:11:54 +00:00

trait

Preserve Traits nil value between proto<-->API type conversion (#44492)

2024-07-24 08:23:49 +00:00

userloginstate

GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849)

2024-12-10 17:31:32 +00:00

userprovisioning

Add StaticHostUserV2 (#46038)

2024-09-04 21:16:11 +00:00

usertasks

UserTasks - DiscoverRDS issues: add RDS known issues (#50986)

2025-01-20 14:11:23 +00:00

webauthn

feat: Implement the WebAuthn credProps extension (#45252)

2024-08-15 13:28:19 +00:00

wrappers

…

access_request_test.go

Use new access request filters in webUI (#39625)

2024-03-27 18:21:55 +00:00

access_request.go

Add initial expiry service (#49267)

2025-01-06 15:06:17 +00:00

accountrecovery.go

Fixed additional license format issues (#34726)

2023-11-17 21:14:08 +00:00

app_test.go

VNet: Refuse conn if local port doesn't match app spec (#49944)

2024-12-11 16:20:58 +00:00

app.go

Add UseAnyProxyPublicAddr to app spec (#52693)

2025-03-20 00:40:06 +00:00

appserver_or_saml_idp_sp_test.go

add saml apps to webui apps list (#28041)

2023-07-20 16:56:43 +00:00

appserver_or_saml_idp_sp.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

appserver_test.go

AWS OIDC: add aws account id as label to AWS App (#49693)

2024-12-06 08:43:03 +00:00

appserver.go

AWS OIDC: add aws account id as label to AWS App (#49693)

2024-12-06 08:43:03 +00:00

assertion_info_test.go

…

assertion_info.go

…

audit.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

authentication_authpreference_test.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

authentication_mfadevice_test.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704)

2024-10-16 22:24:07 +00:00

authentication_test.go

Add second_factors (#47233)

2024-10-11 00:02:39 +00:00

authentication.go

Stable UNIX users: storage and auth API (#51102)

2025-01-28 17:08:20 +00:00

authority_test.go

verify cluster name of TLS peer certificates (#52128)

2025-02-13 21:25:52 +00:00

authority.go

transition ssh enforcement to sshca.Identity (#51468)

2025-02-04 18:01:53 +00:00

clone_test.go

…

cluster_alert_test.go

Add a link text label to the ClusterAlert resource (#45972)

2024-09-05 10:24:39 +00:00

cluster_alert.go

Add a link text label to the ClusterAlert resource (#45972)

2024-09-05 10:24:39 +00:00

clustername.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

connection_diagnostic.go

…

constants.go

Support context path for Kubernetes app discovery (#52897)

2025-03-17 21:47:48 +00:00

database_permissions_test.go

Add DatabasePermissions field to role (#37797)

2024-02-07 20:03:11 +00:00

database_permissions.go

Add DatabasePermissions field to role (#37797)

2024-02-07 20:03:11 +00:00

database_test.go

Add support for RDS-hosted Oracle and update related RDS handling (#52374)

2025-02-25 13:23:37 +00:00

database.go

Add support for RDS-hosted Oracle and update related RDS handling (#52374)

2025-02-25 13:23:37 +00:00

databaseserver_test.go

Fix an issue tsh db ls shows one entry per db server instead of db name (#40784)

2024-04-22 20:21:40 +00:00

databaseserver.go

Replace usages of x/exp/maps with stdlib maps package (#51448)

2025-01-28 14:54:40 +00:00

databaseservice.go

Add Hostname for Database Services status (#45902)

2024-08-27 14:39:19 +00:00

derived.gen.go

Add UseAnyProxyPublicAddr to app spec (#52693)

2025-03-20 00:40:06 +00:00

desktop_test.go

Validate desktop names (#31739)

2023-09-12 18:56:31 +00:00

desktop.go

Add support for storing RDP licenses from Windows Desktops (#51250)

2025-01-23 22:41:39 +00:00

device_test.go

Add the os_id field to device messages (#34588)

2023-11-16 13:05:47 +00:00

device.go

Add the os_id field to device messages (#34588)

2023-11-16 13:05:47 +00:00

device.pb.go

Set all gogo -M options (#45231)

2024-08-08 22:11:36 +00:00

duration_test.go

…

duration.go

Fix violations of non-constant format strings linter (#51812)

2025-02-04 16:43:35 +00:00

events_test.go

add CA filter for all known CAs to cache configs (#36361)

2024-01-09 18:30:41 +00:00

events.go

add CA filter for all known CAs to cache configs (#36361)

2024-01-09 18:30:41 +00:00

extension.go

Add support for Protobuf Enums into Operator CRDs (#32469)

2023-09-26 13:43:50 +00:00

fuzz_test.go

Fuzzing test improvements (#28066)

2023-06-20 16:14:15 +00:00

github_test.go

GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849)

2024-12-10 17:31:32 +00:00

github.go

GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849)

2024-12-10 17:31:32 +00:00

headlessauthn.go

Fix headless authentication matching logic for watcher (#28843)

2023-07-11 20:05:17 +00:00

installer.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

instance_test.go

rework instance hbs to be more scalable and to track upgraders (#27895)

2023-07-08 02:15:56 +00:00

instance.go

Add monitoring of the servers time drifting (#44489)

2024-11-28 21:18:24 +00:00

integration_awsoidc.go

AWSOIDC: Compute Proxy's Endpoint for issuing a token (#37253)

2024-01-26 13:35:16 +00:00

integration_github_test.go

GitHub proxy: web apis for enrolment (#51423)

2025-02-03 19:12:08 +00:00

integration_github.go

GitHub proxy: web apis for enrolment (#51423)

2025-02-03 19:12:08 +00:00

integration_test.go

GitHub Proxy part 1: github integration resource (#48999)

2024-11-23 20:09:35 +00:00

integration.go

GitHub Proxy part 1: github integration resource (#48999)

2024-11-23 20:09:35 +00:00

jamf_test.go

remove protobuf fields for storing Jamf username, password, client_id and client_secret (#45957)

2024-08-28 20:04:54 +00:00

jamf.go

disable JamfSpec secrets validation (#45959)

2024-08-28 14:57:39 +00:00

jwt.go

Add option to configure JWT claim rewriting (#29687)

2023-08-08 10:30:27 +00:00

kubernetes_server_test.go

Fix some lint issues (#38913)

2024-03-07 18:04:51 +00:00

kubernetes_server.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

kubernetes_test.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

kubernetes.go

remove protoKnownFieldsEqual hack with goderive (#43508)

2024-07-01 23:45:02 +00:00

license_test.go

Adds IGS related fields to feature, module, and license objects (#34868)

2023-11-27 18:22:49 +00:00

license.go

Fix license stringification (#46415)

2024-09-10 13:05:48 +00:00

lock_test.go

Reduce resource consumption of ListUnifiedResources (#53213)

2025-03-21 19:20:55 +00:00

lock.go

Reduce resource consumption of ListUnifiedResources (#53213)

2025-03-21 19:20:55 +00:00

maintenance_test.go

Add autoupdate_config and autoupdate_agent_rollout validation (#50181)

2024-12-17 17:12:42 +00:00

maintenance.go

[teleport-update] Version reporting and deprecated upgrader management (#50266)

2025-01-22 21:13:40 +00:00

matchers_accessgraph.go

[aws_matchers] validate aws regions (#45119)

2024-08-06 15:05:32 +00:00

matchers_aws_test.go

EC2 AutoDiscover Script mode with Integration (#40959)

2024-05-09 15:05:36 +00:00

matchers_aws.go

chore: Bump golangci-lint to v1.60.1 (#45469)

2024-08-14 14:46:57 +00:00

matchers_azure_test.go

DiscoveryConfig: fix CheckAndSetDefaults for matchers (#33697)

2023-10-30 10:18:00 +00:00

matchers_azure.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

matchers_gcp_test.go

[gcp] support project discovery (#47434)

2024-10-14 16:50:47 +00:00

matchers_gcp.go

[gcp] support project discovery (#47434)

2024-10-14 16:50:47 +00:00

matchers_kube_test.go

DiscoveryMatchers: move checkandset to types package (#32857)

2023-10-04 13:48:09 +00:00

matchers_kube.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

matchers.go

Move Discovery Matchers to their own files (#32325)

2023-09-22 07:42:30 +00:00

mfa.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704)

2024-10-16 22:24:07 +00:00

namespace.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

networking_test.go

Allow a custom SSH dial timeout to be set cluster wide (#45507)

2024-08-20 13:11:46 +00:00

networking.go

Allow a custom SSH dial timeout to be set cluster wide (#45507)

2024-08-20 13:11:46 +00:00

oidc_external_test.go

OIDC: validate the client_secret field (#46041)

2024-10-16 19:25:59 +00:00

oidc_external.go

…

oidc.go

feat: SSO MFA - support for OIDC MaxAge (#47292)

2024-10-16 20:19:18 +00:00

okta_test.go

Add PluginOktaSyncSettings.UserSyncSource (#51642)

2025-02-05 19:28:15 +00:00

okta.go

Add OktaUserSyncSource.IsUnknown (#52160)

2025-02-18 11:30:19 +00:00

order.go

…

plugin_data.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

plugin_static_credentials.go

GitHub Proxy part 1: github integration resource (#48999)

2024-11-23 20:09:35 +00:00

plugin_test.go

Adds AWS Role ARN to IC Integration settings (#53024)

2025-03-13 15:14:12 +00:00

plugin.go

Adds AWS Role ARN to IC Integration settings (#53024)

2025-03-13 15:14:12 +00:00

presence.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

provisioning_test.go

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

provisioning.go

Add oci join server auth (#51446)

2025-02-07 18:09:44 +00:00

proxied_service.go

…

register.go

…

remotecluster.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

resource_153_test.go

Exposes Identity Center accounts as Apps in Unified Resource Cache (#49301)

2024-12-05 12:23:56 +00:00

resource_153.go

Fix proto resource 153 marshalling for autoupdate_* resources (#50688)

2025-01-09 14:18:57 +00:00

resource_ids_test.go

feat: support resource requests via tctl (#29418)

2023-07-24 20:35:12 +00:00

resource_ids.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

resource_test.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

resource.go

Reduce resource consumption of ListUnifiedResources (#53213)

2025-03-21 19:20:55 +00:00

restrictions.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

role_test.go

Fix unmarshalling of CreateDatabaseUserMode (#49995)

2024-12-11 17:55:57 +00:00

role.go

Adds Roles for IC resource access requests (#49565)

2024-12-16 02:06:46 +00:00

saml_idp_service_provider_test.go

aws identity center plugin config dependency (#47844)

2024-10-23 18:28:23 +00:00

saml_idp_service_provider.go

aws identity center plugin config dependency (#47844)

2024-10-23 18:28:23 +00:00

saml_test.go

Fix SAMLForceAuthn marshalling (#48098)

2024-10-30 18:29:35 +00:00

saml.go

Fix SAMLForceAuthn marshalling (#48098)

2024-10-30 18:29:35 +00:00

second_factor_test.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

second_factor.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

semaphore.go

periodically create access list reminder notifications when needed (#51581)

2025-01-31 15:59:23 +00:00

server_info_test.go

EC2 Auto-Discovery: EICE support (#35504)

2024-03-26 16:16:20 +00:00

server_info.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

server_test.go

GitHub proxy part 6: proxing Git using SSH transport (#49980)

2025-01-14 21:48:04 +00:00

server.go

Reduce resource consumption of ListUnifiedResources (#53213)

2025-03-21 19:20:55 +00:00

session_tracker_test.go

…

session_tracker.go

git session prehog event (#51794)

2025-02-14 19:11:23 +00:00

session.go

split SSH and TLS keys in tsh login (#45995)

2024-09-12 19:36:32 +00:00

sessionrecording.go

readonly shared cluster configs (#43422)

2024-07-02 17:23:13 +00:00

signaturealgorithmsuite.go

support file configuration of signature_algorithm_suite (#46203)

2024-09-04 19:45:55 +00:00

sortby_test.go

…

sortby.go

Use new access request filters in webUI (#39625)

2024-03-27 18:21:55 +00:00

statictokens.go

Add token list/delete endpoints (#42402)

2024-06-07 22:59:11 +00:00

system_role_test.go

Make system roles case-insensitive in provision tokens (#33053)

2023-10-10 20:19:30 +00:00

system_role.go

Add AccessGraphPlugin system role (#40714)

2024-04-23 09:43:45 +00:00

traits.go

…

trust.go

grpc: Update OktaService add Enroll/Validate/Update methods (#46707)

2024-09-20 14:24:59 +00:00

trusted_device_requirement.pb.go

Show device trust status in Connect (#49508)

2024-11-29 10:11:30 +00:00

trustedcluster.go

Add UpsertTrustedClusterV2 RPC (#49789)

2024-12-21 04:24:29 +00:00

tunnel_strategy_test.go

…

tunnel_strategy.go

…

tunnel.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

tunnelconn.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

types.pb.go

Support configuring StaticJWKS for the GitLab join method (#53386)

2025-03-25 18:03:09 +00:00

ui_config.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

user.go

GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849)

2024-12-10 17:31:32 +00:00

usergroup_test.go

Add mapping between user groups and applications. (#27812)

2023-06-16 17:52:31 +00:00

usergroup.go

Uniform equal function names to IsEqual (#40441)

2024-04-19 09:22:43 +00:00

usertoken.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

usertokensecrets.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

watch_status.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00