teleport

mirror of https://github.com/gravitational/teleport.git synced 2026-11-04 02:21:02 +08:00

Files

T

Tiago Silva e06fc88e98 Extend Teleport RBAC to support Kubernetes Verbs (#27096 )

* Extend Teleport RBAC to suport Kubernetes Verbs

This PR extends Teleport per-Resource RBAC to support Kubernetes verbs
restriction. With this change it's possible to restrict certain actions
allowed by the underlying `kubernetes_users` and `kubernetes_resources`.

Supported verbs:
- `get`
- `create`
- `update`
- `patch`
- `delete`
- `list`
- `watch`
- `deletecollection`

Fixes #27095

* address timr's comments

* assign wildcard to verbs for role <7

* address marco's reviews

2023-07-06 15:39:11 +00:00

common

Introduce Access List internal object. (#28479 )

2023-07-06 13:30:42 +00:00

events

Add endpoints to export AuditEvents as unstructured data (#27026 )

2023-06-02 14:49:42 +00:00

header

Introduce Access List internal object. (#28479 )

2023-07-06 13:30:42 +00:00

installers

InstallScripts: pin teleport version using ServerVersion (#28149 )

2023-06-23 15:45:36 +00:00

traits

Introduce Access List internal object. (#28479 )

2023-07-06 13:30:42 +00:00

webauthn

Replace deprecated duo-labs/webauthn with go-webauthn/webauthn (#19476 )

2022-12-19 18:07:30 +00:00

wrappers

…

access_list.go

Introduce Access List internal object. (#28479 )

2023-07-06 13:30:42 +00:00

access_request_test.go

Access requests implement ResourceWithLabels. (#19838 )

2023-01-06 19:36:07 +00:00

access_request.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

accountrecovery.go

Fix operator build (#21362 )

2023-02-07 01:15:55 +00:00

app_test.go

Azure CLI access (#18675 )

2022-12-12 19:34:53 +00:00

app.go

Add mapping between user groups and applications. (#27812 )

2023-06-16 17:52:31 +00:00

appserver_test.go

Support app servers on different types of tunnels. (#23749 )

2023-03-29 18:13:48 +00:00

appserver.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

assertion_info_test.go

…

assertion_info.go

…

audit.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

authentication_authpreference_test.go

Device Trust: TPM Enrollment support EKCerts (#27070 )

2023-05-29 18:42:41 +00:00

authentication_mfadevice_test.go

Allow unknown fields when unmarshaling types.MFADevice (#25437 )

2023-05-01 22:41:01 +00:00

authentication.go

Allow setting max_session_ttl from clusterauth preferences (#26824 )

2023-06-21 10:39:34 +00:00

authority_test.go

…

authority.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

clone_test.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

cluster_alert_test.go

Alert ack API + CLI implementation (#19480 )

2023-01-24 17:30:07 +00:00

cluster_alert.go

Alert ack API + CLI implementation (#19480 )

2023-01-24 17:30:07 +00:00

clustername.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

cmp_test.go

Rename protoEqual and add a big warning (#21491 )

2023-02-08 20:57:18 +00:00

cmp.go

Rename protoEqual and add a big warning (#21491 )

2023-02-08 20:57:18 +00:00

connection_diagnostic.go

Adds Origin and Label functions to ResourceHeader. (#20847 )

2023-01-30 16:23:24 +00:00

constants.go

Extend Teleport RBAC to support Kubernetes Verbs (#27096 )

2023-07-06 15:39:11 +00:00

database_test.go

Script to configure IAM for the DeployService (#28436 )

2023-07-04 15:10:00 +00:00

database.go

Support authenticating with AWS IAM role for MongoDB Atlas (#26439 )

2023-06-06 14:57:27 +00:00

databaseserver_test.go

Add extra database validations to CreateDatabase (#18776 )

2022-11-25 16:12:53 +00:00

databaseserver.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

databaseservice.go

Adds Origin and Label functions to ResourceHeader. (#20847 )

2023-01-30 16:23:24 +00:00

desktop_test.go

…

desktop.go

Adds Origin and Label functions to ResourceHeader. (#20847 )

2023-01-30 16:23:24 +00:00

device_test.go

Add a delete confirmation step to SyncInventory (#27906 )

2023-06-16 17:55:57 +00:00

device.go

Add a delete confirmation step to SyncInventory (#27906 )

2023-06-16 17:55:57 +00:00

device.pb.go

Add a delete confirmation step to SyncInventory (#27906 )

2023-06-16 17:55:57 +00:00

duration_test.go

…

duration.go

…

events_test.go

Partial cache healthiness (#24080 )

2023-04-15 20:07:43 +00:00

events.go

Partial cache healthiness (#24080 )

2023-04-15 20:07:43 +00:00

extension.go

…

fuzz_test.go

Fuzzing test improvements (#28066 )

2023-06-20 16:14:15 +00:00

github.go

Allow users to specify separate API URL for github connectors (#23200 )

2023-03-23 20:10:05 +00:00

headlessauthn.go

* Enable headless authentication event watch. (#28234 )

2023-06-28 18:03:53 +00:00

installer.go

…

instance_test.go

instance heartbeats

2022-12-30 12:09:11 -08:00

instance.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

integration_awsoidc_test.go

Integrations: AWS OIDC - ListDatabases action (#24460 )

2023-04-19 15:42:53 +00:00

integration_awsoidc.go

Integrations: AWS OIDC - ListDatabases action (#24460 )

2023-04-19 15:42:53 +00:00

integration_test.go

Integrations service for CRUD operations (#23989 )

2023-04-05 16:49:43 +00:00

integration.go

Integrations: web API and tctl (#24145 )

2023-04-12 16:06:30 +00:00

jamf_test.go

fix: Use correct sync defaults and validation (#28540 )

2023-06-30 20:21:06 +00:00

jamf.go

fix: Use correct sync defaults and validation (#28540 )

2023-06-30 20:21:06 +00:00

jwt.go

…

kubernetes_server_test.go

…

kubernetes_server.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

kubernetes_test.go

…

kubernetes.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

license_test.go

Add new reporting license flag (#21928 )

2023-02-22 15:43:58 +00:00

license.go

Add new field to license spec (#23194 )

2023-04-17 12:52:09 +00:00

lock_test.go

Extend host lock enforcement to other built in roles besides Node (#27018 )

2023-06-05 17:08:18 +00:00

lock.go

Extend host lock enforcement to other built in roles besides Node (#27018 )

2023-06-05 17:08:18 +00:00

maintenance_test.go

maintenance window API (#22850 )

2023-04-11 00:23:03 +00:00

maintenance.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

mfa.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

namespace.go

…

networking_test.go

…

networking.go

use "google.golang.org/protobuf" to clone protobuf messages (#25466 )

2023-05-04 21:22:01 +00:00

oidc_external_test.go

…

oidc_external.go

…

oidc.go

Use x/exp/slices instead of home grown utilities (#18524 )

2022-11-17 15:25:46 +00:00

okta_test.go

Simplify Okta assignment statuses. (#25166 )

2023-04-26 13:30:10 +00:00

okta.go

Introduce group and app name Okta import rule regexes. (#26561 )

2023-05-23 18:29:22 +00:00

order.go

…

plugin_data.go

…

plugin_static_credentials.go

Introduce the Plugin Static Credentials object. (#27121 )

2023-05-31 15:11:36 +00:00

plugin_test.go

fix: update equality nil check in settings.Jamf (#27814 )

2023-06-14 03:47:48 +00:00

plugin.go

Changes to PagerDuty plugin to support running as a hosted plugin (#28021 )

2023-06-21 13:31:10 +00:00

presence.go

usagereporter: resource heartbeats (#23093 )

2023-03-24 18:47:58 +00:00

provisioning_test.go

Add GCP join method (#24493 )

2023-05-10 23:56:59 +00:00

provisioning.go

operator: ProvisionToken support (#18718 )

2023-05-19 15:56:25 +00:00

proxied_service.go

…

remotecluster.go

feat: extend label expression syntax (#27312 )

2023-06-08 15:43:11 +00:00

resource_ids_test.go

Extend Per Kube resource RBAC (#26244 )

2023-06-29 17:08:52 +00:00

resource_ids.go

Extend Per Kube resource RBAC (#26244 )

2023-06-29 17:08:52 +00:00

resource_test.go

Removes deprecated KindKubeService objects (#22663 )

2023-03-13 10:55:39 +00:00

resource.go

Introduce Access List internal object. (#28479 )

2023-07-06 13:30:42 +00:00

restrictions.go

…

role_test.go

Extend Teleport RBAC to support Kubernetes Verbs (#27096 )

2023-07-06 15:39:11 +00:00

role.go

Extend Teleport RBAC to support Kubernetes Verbs (#27096 )

2023-07-06 15:39:11 +00:00

saml_idp_service_provider_test.go

Automatically parse entity ID from SAML SP during CLI creation. (#22101 )

2023-02-27 20:58:22 +00:00

saml_idp_service_provider.go

Remove the crewjam/saml dependency from api. (#23517 )

2023-03-24 03:32:47 +00:00

saml_test.go

…

saml.go

Use x/exp/slices instead of home grown utilities (#18524 )

2022-11-17 15:25:46 +00:00

semaphore.go

…

server_info.go

Add ServerInfo type (#25281 )

2023-05-09 17:17:40 +00:00

server_test.go

changes openssh addr validation to allow hosts (#25958 )

2023-05-18 20:38:48 +00:00

server.go

changes openssh addr validation to allow hosts (#25958 )

2023-05-18 20:38:48 +00:00

session_tracker_test.go

Fix moderated session presence checking (#25988 )

2023-06-08 20:27:13 +00:00

session_tracker.go

Fix moderated session presence checking (#25988 )

2023-06-08 20:27:13 +00:00

session.go

Add full IP pinning enforcement (#24743 )

2023-04-23 17:09:49 +00:00

sessionrecording.go

Use x/exp/slices instead of home grown utilities (#18524 )

2022-11-17 15:25:46 +00:00

sortby_test.go

…

sortby.go

…

statictokens.go

…

system_role_test.go

…

system_role.go

Add and map the MDM system role (#26395 )

2023-05-17 17:46:04 +00:00

traits.go

…

trust.go

Integrations: AWS OIDC - ListDatabases action (#24460 )

2023-04-19 15:42:53 +00:00

trustedcluster.go

Allow updating of trusted cluster role maps (#18168 )

2023-01-13 19:06:17 +00:00

tunnel_strategy_test.go

…

tunnel_strategy.go

…

tunnel.go

…

tunnelconn.go

…

types.pb.go

Extend Teleport RBAC to support Kubernetes Verbs (#27096 )

2023-07-06 15:39:11 +00:00

ui_config.go

Add static and dynamic web ui configuration options (#21945 )

2023-02-28 17:45:52 +00:00

user.go

Add support for automatic database users for Postgres (#25614 )

2023-05-18 23:22:14 +00:00

usergroup_test.go

Add mapping between user groups and applications. (#27812 )

2023-06-16 17:52:31 +00:00

usergroup.go

Add mapping between user groups and applications. (#27812 )

2023-06-16 17:52:31 +00:00

usertoken.go

…

usertokensecrets.go

…

watch_status.go

Partial cache healthiness (#24080 )

2023-04-15 20:07:43 +00:00