David BosleeandZac Bergquist 02cadb4c14 auth: fix cluster init deadlock (#49638) ...

* auth: fix cluster init deadlock

If the bootstrapped resources are created but a failure occurs later
in the cluster init process subsequent runs of the cluster initialization
will fail due to the existing bootstrap resources.

* add test for new behavior

* add test for cluster init failures recovery

* Update lib/services/local/resource_test.go

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* reorder assertion values

---------

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

2024-12-09 17:18:36 +00:00

..

accessmonitoringrules/accessmonitoringrulesv1

add periodic cleanup for notifications (#40941)

2024-09-20 10:56:41 +00:00

accesspoint

GitHub proxy part 2.5: git_server cache (#49564)

2024-12-05 03:18:50 +00:00

authclient

GitHub proxy part 2.5: git_server cache (#49564)

2024-12-05 03:18:50 +00:00

autoupdate/autoupdatev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

clusterconfig/clusterconfigv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

crownjewel

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

dbobject/dbobjectv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

dbobjectimportrule/dbobjectimportrulev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

discoveryconfig/discoveryconfigv1

Convert some lib/auth subpackages to slog (#47477)

2024-10-11 10:00:37 +00:00

dynamicwindows/dynamicwindowsv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

gitserver/gitserverv1

GitHub Proxy part 2: git_server resource, service, and RBAC (#49393)

2024-11-27 16:12:30 +00:00

integration

GitHub Proxy part 3: gen github user cert and export CA (#49396)

2024-12-03 18:17:21 +00:00

join

Use builtin tracing machinery of aws-sdk-go-v2 (#49826)

2024-12-06 14:41:33 +00:00

keygen

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

keystore

Use builtin tracing machinery of aws-sdk-go-v2 (#49826)

2024-12-06 14:41:33 +00:00

kubewaitingcontainer/kubewaitingcontainerv1

add periodic cleanup for notifications (#40941)

2024-09-20 10:56:41 +00:00

loginrule/loginrulev1

Unify naming and location of auth RPC services (#46559)

2024-09-12 22:34:58 +00:00

machineid/machineidv1

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

mfatypes

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

migration

Convert some lib/auth subpackages to slog (#47477)

2024-10-11 10:00:37 +00:00

mocku2f

feat: Implement the WebAuthn credProps extension (#45252)

2024-08-15 13:28:19 +00:00

notifications/notificationsv1

Enhance the tctl notifications command (#48829)

2024-11-13 17:24:38 +00:00

okta

Update backend.Key to be its own distinct type (#46701)

2024-10-04 14:02:00 +00:00

presence/presencev1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

state

Prevent auth from starting when an incompatible major upgrade is detected (#43520)

2024-07-12 22:01:21 +00:00

storage

Introduce a dedicated backend key type (#45706)

2024-08-22 18:29:42 +00:00

test

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

testauthority

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

touchid

Set min macOS version to 11 (#46461)

2024-10-04 23:31:00 +00:00

trust/trustv1

Clean up code marked for deletion in v17 (#47364)

2024-10-10 15:36:53 +00:00

userloginstate

Logs: Forward the error from the failing case to emitUsageEvent (#49237)

2024-11-19 21:39:41 +00:00

userpreferences/userpreferencesv1

add sticky mode support to sidenav (#48326)

2024-11-13 00:35:50 +00:00

userprovisioning/userprovisioningv2

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

users/usersv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

usertasks/usertasksv1

Fix UsageEvent for UserTaskState changed (#49409)

2024-12-03 09:16:08 +00:00

vnetconfig/vnetconfigv1

Update several admin actions to allow reusable MFA challenges (#49095)

2024-11-19 18:56:32 +00:00

webauthn

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

webauthncli

fix: Address flakiness and revisit TestTeleportClient_Login_local (#47406)

2024-10-10 13:18:20 +00:00

webauthntypes

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

webauthnwin

fix: Always prompt if multiple MFA methods are running (#47114)

2024-10-03 19:04:17 +00:00

windows

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

access_request_test.go

feat: Allow including Access Lists as nested members and owners (#38738)

2024-11-01 22:07:36 +00:00

access_test.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

access.go

Replace more Logrus usage with Slog (#46757)

2024-09-19 18:37:51 +00:00

accountrecovery_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

accountrecovery.go

Replace more Logrus usage with Slog (#46757)

2024-09-19 18:37:51 +00:00

apiserver_test.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

apiserver.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

auth_login_test.go

Headless authn support for split SSH/TLS keys (#45646)

2024-08-22 15:38:22 +00:00

auth_test.go

Sanitize SSH server hostnames (#48988)

2024-11-15 19:04:45 +00:00

auth_with_roles_okta_rbac_test.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

auth_with_roles_test.go

Add Identity Center Account Assignments to Unified Resource Cache (#49580)

2024-12-09 12:02:36 +00:00

auth_with_roles.go

Add Identity Center Account Assignments to Unified Resource Cache (#49580)

2024-12-09 12:02:36 +00:00

auth.go

Prevent races counting missed heartbeats (#49882)

2024-12-06 19:16:11 +00:00

aws_certs.go

Extend EC2 joining method to other AWS regions (#39045)

2024-03-07 09:40:31 +00:00

azure_certs_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

azure_certs.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

bot_test.go

Rename lib/kubernetestoken to lib/kube/token (#49554)

2024-12-04 22:39:55 +00:00

bot.go

resolve minor TODOs (#47777)

2024-10-22 17:46:00 +00:00

client_tls_config_generator.go

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

db_test.go

fix(auth): return db client CA when generating sql server certificates (#48772)

2024-11-13 17:48:43 +00:00

db.go

fix(auth): return db client CA when generating sql server certificates (#48772)

2024-11-13 17:48:43 +00:00

desktop_test.go

Surface Cloud Entitlements (#42394)

2024-06-28 00:22:13 +00:00

desktop.go

Improve troubleshooting for LDAP authentication errors (#42948)

2024-10-16 18:51:26 +00:00

externalauditstorage.go

Fix EAS Token generation (#40154)

2024-04-05 13:06:03 +00:00

fuzz_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

github_test.go

support split SSH/TLS keys in SSO login endpoints (#45876)

2024-09-04 19:07:57 +00:00

github.go

Convert github auth code to use x/oauth2 (#48598)

2024-11-18 14:49:30 +00:00

grpcserver_test.go

Add TargetPort to RouteToApp & use it to route connections to multi-port TCP apps (#49047)

2024-12-03 13:55:00 +00:00

grpcserver.go

GitHub Proxy part 2: git_server resource, service, and RBAC (#49393)

2024-11-27 16:12:30 +00:00

helpers_mfa.go

Remove SolveAuthenticateChallenge from MFA Ceremony in favor of PromptConstructor (#47650)

2024-10-21 18:38:50 +00:00

helpers.go

GitHub proxy part 2.5: git_server cache (#49564)

2024-12-05 03:18:50 +00:00

init_test.go

auth: fix cluster init deadlock (#49638)

2024-12-09 17:18:36 +00:00

init.go

Temporary fix major version check for v18 (#49851)

2024-12-06 00:50:29 +00:00

join_azure_test.go

Azure join method - Use attested data subscription id (#48707)

2024-11-18 20:03:22 +00:00

join_azure.go

Azure join method - Use attested data subscription id (#48707)

2024-11-18 20:03:22 +00:00

join_bitbucket_test.go

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

join_bitbucket.go

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

join_circleci_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

join_circleci.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

join_ec2_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

join_ec2.go

Use builtin tracing machinery of aws-sdk-go-v2 (#49826)

2024-12-06 14:41:33 +00:00

join_gcp_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

join_gcp.go

Use pkg slices from the standard library (#35905)

2023-12-19 23:06:53 +00:00

join_github_test.go

Support for joining Actions in un-reachable GitHub Enterprise Servers via Static JWKS (#48973)

2024-11-15 12:32:55 +00:00

join_github.go

Support for joining Actions in un-reachable GitHub Enterprise Servers via Static JWKS (#48973)

2024-11-15 12:32:55 +00:00

join_gitlab_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

join_gitlab.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

join_iam_test.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_iam.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_kubernetes_test.go

Rename lib/kubernetestoken to lib/kube/token (#49554)

2024-12-04 22:39:55 +00:00

join_kubernetes.go

Rename lib/kubernetestoken to lib/kube/token (#49554)

2024-12-04 22:39:55 +00:00

join_spacelift_test.go

Make Spacelift Enterprise (#35475)

2023-12-07 18:05:47 +00:00

join_spacelift.go

Make Spacelift Enterprise (#35475)

2023-12-07 18:05:47 +00:00

join_terraformcloud_test.go

Enable Terraform Cloud joining for Teleport Community Edition (#46419)

2024-09-12 02:37:41 +00:00

join_terraformcloud.go

Enable Terraform Cloud joining for Teleport Community Edition (#46419)

2024-09-12 02:37:41 +00:00

join_test.go

Update backend.Key to be its own distinct type (#46701)

2024-10-04 14:02:00 +00:00

join_tpm_test.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join_tpm.go

Convert RegisterUsingToken RPC from HTTP to gRPC (#47853)

2024-10-24 10:54:22 +00:00

join.go

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724)

2024-11-21 23:05:58 +00:00

kube_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

kube.go

[kube] Drop usage of ProcessKubeCSR (#46779)

2024-09-20 09:56:04 +00:00

methods_test.go

Replace dependencies on lib/auth with lib/authclient (#41623)

2024-05-16 17:34:58 +00:00

methods.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

middleware_test.go

Make rejected connections easier to identify (#45176)

2024-08-08 17:46:31 +00:00

middleware.go

lib/limiter: remove the Oxy rate limiter (#47257)

2024-10-10 22:32:52 +00:00

moderated_sessions_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

notification_test.go

make access request notifications expire alongside the request (#42527)

2024-06-06 22:58:11 +00:00

oidc.go

feat: SSO MFA - SSO MFA challenge creation and verification (#47684)

2024-10-24 20:12:59 +00:00

password_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

password.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

periodic_test.go

Add automatic_updates label (#40563)

2024-04-25 18:43:50 +00:00

periodic.go

Add automatic_updates label (#40563)

2024-04-25 18:43:50 +00:00

register.go

chore: update IAM join method to use aws-sdk-go-v2 (#47044)

2024-10-02 00:58:00 +00:00

rotate.go

Get rid of internal reloads (#44882)

2024-09-11 21:13:09 +00:00

saml.go

feat: SSO MFA - SSO MFA challenge creation and verification (#47684)

2024-10-24 20:12:59 +00:00

server_info_test.go

Add retry logic to server info reconciler (#47160)

2024-10-10 16:25:47 +00:00

server_info.go

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

server_monitor.go

Add monitoring of the servers time drifting (#44489)

2024-11-28 21:18:24 +00:00

session_access_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

session_access.go

Fix incorrect usages of "it's" (#48252)

2024-10-31 23:35:30 +00:00

sessions_test.go

Test DeviceWebToken creation from CreateWebSessionFromReq (#44818)

2024-07-30 19:34:15 +00:00

sessions.go

Add TargetPort to RouteToApp & use it to route connections to multi-port TCP apps (#49047)

2024-12-03 13:55:00 +00:00

sso_diag_context_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

sso_diag_context.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

sso_mfa_test.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

sso_mfa.go

feat: SSO MFA - WebUI backend implementation (#47832)

2024-11-06 01:43:41 +00:00

tls_test.go

fix: Update types for TestAuthServerConfig (#49194)

2024-11-22 18:25:34 +00:00

transport_credentials_test.go

Update google.golang.org/grpc to 1.68.0 (#49712)

2024-12-03 19:05:35 +00:00

transport_credentials.go

Fix gRPC connections being disconnected regardless of DisconnectCertExpiry (#43270)

2024-06-20 14:48:38 +00:00

trustedcluster_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

trustedcluster.go

upsert trusted cluster cleanup (#48176)

2024-11-05 22:15:50 +00:00

usage_test.go

Surface Cloud Entitlements (#42394)

2024-06-28 00:22:13 +00:00

user.go

Clean up user and login enrichment code for v17 (#47459)

2024-10-10 21:33:49 +00:00

usertoken_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

usertoken.go

Use second_factors for logic instead of deprecated second_factor. (#47426)

2024-10-16 19:22:39 +00:00

version.go

Temporary fix major version check for v18 (#49851)

2024-12-06 00:50:29 +00:00