David BosleeandZac Bergquist 02cadb4c14 auth: fix cluster init deadlock (#49638) ...

* auth: fix cluster init deadlock

If the bootstrapped resources are created but a failure occurs later
in the cluster init process subsequent runs of the cluster initialization
will fail due to the existing bootstrap resources.

* add test for new behavior

* add test for cluster init failures recovery

* Update lib/services/local/resource_test.go

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

* reorder assertion values

---------

Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

2024-12-09 17:18:36 +00:00

..

local

auth: fix cluster init deadlock (#49638)

2024-12-09 17:18:36 +00:00

readonly

Generalize resource watchers (#47561)

2024-10-28 18:49:57 +00:00

simple

feat: Allow including Access Lists as nested members and owners (#38738)

2024-11-01 22:07:36 +00:00

suite

Sanitize SSH server hostnames (#48988)

2024-11-15 19:04:45 +00:00

access_checker_test.go

fixing default shell assignment from role config (#47341)

2024-10-09 17:49:05 +00:00

access_checker.go

Adds RBAC support for Identity Center Accounts (#49808)

2024-12-06 01:01:15 +00:00

access_graph_settings.go

[sec_scan][11] add AccessGraphSettings backend service (#44014)

2024-07-17 15:30:27 +00:00

access_graph.go

[sec_scan][16] add methods to store/retrieve device assertion functions (#44081)

2024-07-15 08:30:36 +00:00

access_list_test.go

feat: Allow including Access Lists as nested members and owners (#38738)

2024-11-01 22:07:36 +00:00

access_list.go

feat: Allow including Access Lists as nested members and owners (#38738)

2024-11-01 22:07:36 +00:00

access_monitoring_rules.go

Add initial condition parser for access monitoring rules (#40659)

2024-05-24 18:45:13 +00:00

access_request_cache_test.go

fix access request cache panic (#44790)

2024-08-07 16:04:46 +00:00

access_request_cache.go

fix access request cache panic (#44790)

2024-08-07 16:04:46 +00:00

access_request_test.go

Add support for requiring reason for access requests (#49124)

2024-11-27 16:24:35 +00:00

access_request.go

Adds RBAC support for Identity Center Accounts (#49808)

2024-12-06 01:01:15 +00:00

access_test.go

Add dynamic/ prefix to server info labels (#36219)

2024-01-11 00:57:52 +00:00

access.go

role pagination (#38714)

2024-02-29 18:40:33 +00:00

app_test.go

kube: resolve Kubernetes cluster domain (#43584)

2024-06-28 09:14:12 +00:00

app.go

kube: resolve Kubernetes cluster domain (#43584)

2024-06-28 09:14:12 +00:00

audit.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

authentication_test.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704)

2024-10-16 22:24:07 +00:00

authentication.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704)

2024-10-16 22:24:07 +00:00

authority_test.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

authority.go

eliminate rsa.GenerateKey and lib/auth/native (#47768)

2024-10-21 20:55:22 +00:00

autoupdates.go

enforce conditional updates on AutoUpdate* + rename typos (#48240)

2024-11-04 18:36:16 +00:00

bot_instance.go

Add basic CRUD for BotInstanceService (#42899)

2024-06-25 21:51:29 +00:00

clustername.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

compare_test.go

Add access list IneligibleStatus to ignored fields (#41830)

2024-05-22 14:28:23 +00:00

compare.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

configuration.go

[sec_scan][11] add AccessGraphSettings backend service (#44014)

2024-07-17 15:30:27 +00:00

connection_diagnostic.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

crown_jewel.go

refactor common proto resource (un)marshallers into generic functions (#41562)

2024-05-15 18:18:03 +00:00

crown_jewels_test.go

Add Query field to CrownJewel specifications (#44853)

2024-08-01 17:56:34 +00:00

database_test.go

Remove lib/cloud dependencies from lib/services (#41740)

2024-05-20 18:30:53 +00:00

database.go

Move static database validation to only be executed on service start (#42900)

2024-06-13 16:25:09 +00:00

databaseobject.go

Cache support for database objects (#41692)

2024-05-27 11:36:58 +00:00

databaseobjectimportrule.go

Change the tctl format for database_object_import_rule resource (#39764)

2024-04-04 11:10:40 +00:00

databaseserver.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

databaseservice_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

databaseservice.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

desktop.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

device_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

device.go

[sec_scan][16] add methods to store/retrieve device assertion functions (#44081)

2024-07-15 08:30:36 +00:00

discoveryconfig_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

discoveryconfig.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

doc.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

dynamic_desktop.go

Cache and watcher support for DynamicWindowsDesktop (#46989)

2024-10-22 21:22:03 +00:00

externalauditstorage_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

externalauditstorage.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

fanoutv2_test.go

Get rid of math/rand in favor of math/rand/v2 (#49294)

2024-11-21 12:57:32 +00:00

fanoutv2.go

Don't let users watch Web Sessions with secrets (#39588)

2024-04-22 22:45:05 +00:00

fuzz_test.go

Improve performance of resource parsing via predicate expressions (#39929)

2024-03-28 17:28:52 +00:00

git_server.go

GitHub Proxy part 2: git_server resource, service, and RBAC (#49393)

2024-11-27 16:12:30 +00:00

github_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

github.go

Include BuildCommunity in built type checks (#42391)

2024-06-04 20:10:38 +00:00

header.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

headlessauthn_test.go

Headless authn support for split SSH/TLS keys (#45646)

2024-08-22 15:38:22 +00:00

headlessauthn.go

Headless authn support for split SSH/TLS keys (#45646)

2024-08-22 15:38:22 +00:00

identity_test.go

Skip validating minimum password length for existing user logins (#36579)

2024-01-12 21:50:33 +00:00

identity.go

feat: SSO MFA - Add SSOMFASessionData (#47647)

2024-10-21 19:50:01 +00:00

identitycenter_test.go

Adds RBAC support for Identity Center Accounts (#49808)

2024-12-06 01:01:15 +00:00

identitycenter.go

Add Identity Center Account Assignments to Unified Resource Cache (#49580)

2024-12-09 12:02:36 +00:00

impersonate_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

impersonate.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

installer.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

integration_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

integration.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

inventory.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

kubernetes_test.go

Reduce exposure of lib/cloud/gcp (#41678)

2024-05-17 10:29:02 +00:00

kubernetes.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

kubewaitingcontainer.go

refactor common proto resource (un)marshallers into generic functions (#41562)

2024-05-15 18:18:03 +00:00

label_expressions_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

label_expressions.go

Allow typical parsers to optionally support dynamic values (#39765)

2024-03-27 13:07:47 +00:00

license_test.go

Enable the usage&billing page in self-hosted dashboards (#36498)

2024-01-10 15:27:54 +00:00

license.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

lock_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

lock.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

map_test.go

deduplicate remote role mappings (#37485)

2024-01-30 18:36:34 +00:00

matchers_test.go

Forbid custom namespaces in various resources (#49830)

2024-12-05 19:21:24 +00:00

matchers.go

Add Identity Center Account Assignments to Unified Resource Cache (#49580)

2024-12-09 12:02:36 +00:00

namespace.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

networking.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

notifications_cache_test.go

implement listing notifications for a user with matching (#39942)

2024-05-15 19:26:58 +00:00

notifications_cache.go

improve unified resource cache perf (#42892)

2024-06-13 18:56:17 +00:00

notifications_test.go

implement listing notifications for a user with matching (#39942)

2024-05-15 19:26:58 +00:00

notifications.go

add periodic cleanup for notifications (#40941)

2024-09-20 10:56:41 +00:00

oidc_test.go

Remove OIDCClaimsToTraits helper function (#48599)

2024-11-08 13:29:21 +00:00

oidc.go

Remove OIDCClaimsToTraits helper function (#48599)

2024-11-08 13:29:21 +00:00

okta_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

okta.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

parser_test.go

Add support for exact matching on an element in a delimited label (#40166)

2024-04-03 17:17:37 +00:00

parser.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

plugin_data.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

plugin_static_credentials_test.go

GitHub Proxy part 3.5: caching PluginStaticCredentials (#49472)

2024-12-03 15:32:00 +00:00

plugin_static_credentials.go

GitHub Proxy part 3: gen github user cert and export CA (#49396)

2024-12-03 18:17:21 +00:00

plugins_test.go

Adds detailed Okta status to Plugin Resource (#44431)

2024-07-24 01:32:08 +00:00

plugins.go

Add plugin resource handling in tctl (#42059)

2024-05-31 10:44:15 +00:00

presence.go

Sanitize SSH server hostnames (#48988)

2024-11-15 19:04:45 +00:00

presets_test.go

Except the okta-requester role from standard system resource behavior. (#38765)

2024-02-29 18:50:56 +00:00

presets.go

Add Contacts RBAC (#48885)

2024-12-03 17:47:31 +00:00

process_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

process.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

provisioning.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

provisioningstates.go

feat: identity center and provisioning service gRPC client with deleteAllxxx methods (#48714)

2024-11-12 16:57:47 +00:00

reconciler_test.go

Reconciler extensions for Identity Center integration (#47308)

2024-10-08 21:24:46 +00:00

reconciler.go

Address leftover TODOs from slog migrations (#48038)

2024-10-29 00:05:40 +00:00

remotecluster.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

resource_test.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

resource.go

feat: interactive tctl auth rotate (#49171)

2024-12-05 23:39:23 +00:00

restrictions.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

role_test.go

Remove "namespace" parameters from various helpers (#49515)

2024-12-02 19:07:14 +00:00

role.go

Adds RBAC support for Identity Center Accounts (#49808)

2024-12-06 01:01:15 +00:00

saml_idp_service_provider_test.go

move acs_url and relay_state input validation to rpc create and update methods (#46833)

2024-09-20 23:59:16 +00:00

saml_idp_service_provider.go

move acs_url and relay_state input validation to rpc create and update methods (#46833)

2024-09-20 23:59:16 +00:00

saml_test.go

Fix singing -> signing typos where necessary (#45121)

2024-08-06 14:29:47 +00:00

saml.go

feat: SSO MFA - add missing SAML MFA fields (#47291)

2024-10-10 22:11:48 +00:00

scim.go

Changes supporting SCIM group/AccessList management in Enterprise (#39331)

2024-03-15 05:00:45 +00:00

secreports_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

secreports.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

semaphore_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

semaphore.go

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

server_info.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

server.go

GitHub Proxy part 2: git_server resource, service, and RBAC (#49393)

2024-11-27 16:12:30 +00:00

servers_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

services_test.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

services.go

Eliminate services.Services interface and XXXClient() methods on auth.Services (#45058)

2024-08-06 17:41:52 +00:00

session.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

sessionrecording.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

sessiontracker.go

Remove CheckAndSetDefaults from types.Resource (#35561)

2023-12-08 18:05:38 +00:00

spiffe_federations_test.go

Add backend Service and Cache support for SPIFFE Federation resource (#45054)

2024-08-12 12:25:59 +00:00

spiffe_federations.go

Workload Identity: SPIFFE Federation Syncer (#45586)

2024-08-30 10:04:34 +00:00

sso_mfa.go

Use json compatible struct for SSOMFASessionData (#47826)

2024-10-31 19:59:53 +00:00

statichostuser_test.go

Add StaticHostUserV2 (#46038)

2024-09-04 21:16:11 +00:00

statichostuser.go

Add StaticHostUserV2 (#46038)

2024-09-04 21:16:11 +00:00

statictokens.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

status.go

feat: HSM/KMS CA rotation reminders via cluster alerts (#36780)

2024-01-23 14:11:51 +00:00

traits_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

traits.go

Fix glob matched role access requests when generating system annotations (#41907)

2024-05-23 00:38:45 +00:00

trust.go

switch trusted/remote cluster management to atomic write (#48009)

2024-10-29 17:28:01 +00:00

trustedcluster.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

tunnel.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

tunnelconn.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

ui_config.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

unified_resource_test.go

Add Identity Center Account Assignments to Unified Resource Cache (#49580)

2024-12-09 12:02:36 +00:00

unified_resource.go

Add Identity Center Account Assignments to Unified Resource Cache (#49580)

2024-12-09 12:02:36 +00:00

user_login_state_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

user_login_state.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

user_task_test.go

User Tasks: add discover-ec2 task type (#47062)

2024-10-04 11:05:27 +00:00

user_task.go

UserTasks: List by Integration service method (#47327)

2024-10-09 08:46:06 +00:00

user_test.go

Remove OIDCClaimsToTraits helper function (#48599)

2024-11-08 13:29:21 +00:00

user.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

useracl_test.go

Add Contacts RBAC (#48885)

2024-12-03 17:47:31 +00:00

useracl.go

Disable file transfer buttons if user lacks permissions (#49892)

2024-12-06 19:14:30 +00:00

usergroup_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

usergroup.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

userpreferences.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

usertoken_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

usertoken.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

usertokensecrets.go

remote Metadata.ID and Lease.ID fields (#41732)

2024-05-23 15:08:46 +00:00

vnet_config.go

[vnet] leaf cluster support (#42600)

2024-06-11 10:10:13 +00:00

watcher_test.go

Prevent panic in proxy diffing (#48216)

2024-10-31 15:33:35 +00:00

watcher.go

Use thread-local RNGs for jitters (#48860)

2024-11-13 16:35:09 +00:00

wrappers_test.go

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00