Tiago Silva e06fc88e98 Extend Teleport RBAC to support Kubernetes Verbs (#27096) ...

* Extend Teleport RBAC to suport Kubernetes Verbs

This PR extends Teleport per-Resource RBAC to support Kubernetes verbs
restriction. With this change it's possible to restrict certain actions
allowed by the underlying `kubernetes_users` and `kubernetes_resources`.

Supported verbs:
- `get`
- `create`
- `update`
- `patch`
- `delete`
- `list`
- `watch`
- `deletecollection`

Fixes #27095

* address timr's comments

* assign wildcard to verbs for role <7

* address marco's reviews

2023-07-06 15:39:11 +00:00

..

agentconn

Run GCI as make fix-imports (#17956)

2022-11-04 15:46:46 +00:00

aws

AWS OIDC - DeployService: configure IAM (#28088)

2023-06-30 18:35:29 +00:00

cert

Use pre-generated RSA keys in tests (#18750)

2022-12-05 19:33:49 +00:00

concurrentqueue

Reduce etcd requests performed by a KeepAlive (#21892)

2023-02-16 15:27:39 +00:00

gcp

Validate GCP service accounts in tctl users add/update and tsh app login (#20180)

2023-01-13 13:07:04 +01:00

golden

Configure linter to catch British 🇬🇧 spellings 🇺🇸 🦅 📖 (#14363)

2022-07-14 10:51:23 +00:00

host

Add option to allow for host users not to be deleted (#26892)

2023-06-23 13:35:57 +00:00

interval

add multi-interval helper

2022-11-23 10:14:45 -08:00

mlock

* Add --mlock flag with auto, off, best_effort, and strict options. (#24236)

2023-04-11 17:27:26 +00:00

parse

Fuzzing test improvements (#28066)

2023-06-20 16:14:15 +00:00

prompt

Fix underlying reader not a terminal issues (#25102)

2023-04-27 00:20:49 +00:00

proxy

Add full IP pinning enforcement (#24743)

2023-04-23 17:09:49 +00:00

registry

Fix imports on non-linting files (#28752)

2023-07-06 14:32:56 +00:00

socks

Use x/exp/slices instead of home grown utilities (#18524)

2022-11-17 15:25:46 +00:00

stream

ai: Add a node embedding watcher (#27204)

2023-06-21 01:28:56 +00:00

typical

Benchmark label expressions (#27474)

2023-06-08 18:23:19 +00:00

workpool

Remove [direct] dependency on go.uber.org/atomic (#17035)

2022-10-05 01:24:46 +00:00

addr_test.go

Extend Per Kube resource RBAC (#26244)

2023-06-29 17:08:52 +00:00

addr.go

refactor how 'tsh scp' destinations are parsed (#24441)

2023-04-19 22:17:47 +00:00

anonymizer_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

anonymizer.go

usagereporter: resource heartbeats (#23093)

2023-03-24 18:47:58 +00:00

archive_test.go

Remove most t.Log() from tests (#28453)

2023-06-29 15:14:09 +00:00

archive.go

Download mTLS files from Web (#14526)

2022-08-01 10:14:18 +01:00

bcrypt.go

Update crypto fork to v0.6.0-1 tag (#22564)

2023-03-15 16:05:13 +00:00

broadcaster.go

Revert "Node session race (#6195)"

2021-04-26 17:24:06 +00:00

buf.go

Fix a data race in utils.SyncBuffer

2020-04-17 20:05:38 +00:00

certs_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

certs.go

handle postgres cancel requests (#22173)

2023-03-17 21:26:46 +00:00

chconn_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

circular_buffer_test.go

Refactor tests under util package.

2022-07-14 19:22:54 -07:00

circular_buffer.go

Watcher System Metrics (#8338)

2021-09-28 12:16:03 -04:00

cli_test.go

check for correct kube and ssh listen address in starting message (#25780)

2023-05-09 13:52:55 +00:00

cli.go

Replace graviational/oxy.Forwarder with httputil.ReverseProxy (#27761)

2023-06-29 13:50:07 +00:00

config.go

Optionally provide ca_pin as a file path (#12796)

2022-05-31 22:14:50 +00:00

conn_test.go

Teleport Proxy Behind ALB support for IP Pinning (#26623)

2023-06-28 13:09:24 +00:00

conn.go

Teleport Proxy Behind ALB support for IP Pinning (#26623)

2023-06-28 13:09:24 +00:00

copy.go

api dependency reduction - utils constants (#5363)

2021-01-29 09:37:01 -08:00

disk_windows.go

Naji/11867 manual resource joining (#13505)

2022-08-09 15:42:17 +00:00

disk.go

Naji/11867 manual resource joining (#13505)

2022-08-09 15:42:17 +00:00

ec2_test.go

Automatically import Azure tags (#16218)

2022-09-28 23:40:13 +00:00

ec2.go

context.TODO() tidying (#21288)

2023-02-07 09:01:35 +00:00

environment_test.go

Update golangci-lint to 1.49.0 (#16507)

2022-09-19 22:38:59 +00:00

environment.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

equals.go

api dependency reduction - utils constants (#5363)

2021-01-29 09:37:01 -08:00

errors.go

errors.go: Update link in error message for self signed cert setup (#19132)

2022-12-07 23:45:45 +00:00

fields_test.go

Refactor tests under util package.

2022-07-14 19:22:54 -07:00

fields.go

Use x/exp/slices instead of home grown utilities (#18524)

2022-11-17 15:25:46 +00:00

fncache_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

fncache.go

bucket etcd leases

2022-09-27 15:01:32 -07:00

formatter.go

Add ability to enable trace logging level (#25800)

2023-05-08 17:40:16 +00:00

fs_test.go

Securely delete OTP QR code (#18752)

2022-11-29 22:08:55 +00:00

fs_unix.go

lib/utils/fs.go: Do not remove lockfiles on Windows (#21655)

2023-02-13 15:55:08 +00:00

fs_windows.go

Add kube credentials lockfile to prevent possibility of excessive login attempts (#26102)

2023-06-05 12:56:43 +00:00

fs.go

Add Support for Oracle protocol (#23227)

2023-03-31 17:35:21 +00:00

fuzz_test.go

Fuzzing test improvements (#28066)

2023-06-20 16:14:15 +00:00

grpc_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

grpc.go

Add gRPC service definition for Plugin resources (#21750)

2023-02-23 14:32:41 +00:00

http_test.go

Teleport Proxy Behind ALB support for IP Pinning (#26623)

2023-06-28 13:09:24 +00:00

http.go

Teleport Proxy Behind ALB support for IP Pinning (#26623)

2023-06-28 13:09:24 +00:00

inmemory_fs.go

Download mTLS files from Web (#14526)

2022-08-01 10:14:18 +01:00

jsontools_test.go

instance heartbeats

2022-12-30 12:09:11 -08:00

jsontools.go

fix: use errors.Is for all EOF comparisons (#26012)

2023-05-10 19:27:39 +00:00

kernel_test.go

Fix kernel version parsing on WSL2 (#18292)

2022-11-09 15:24:35 +00:00

kernel.go

Fix kernel version parsing on WSL2 (#18292)

2022-11-09 15:24:35 +00:00

keys.go

Use KeyStore instead of raw keys with CAs (#7615)

2021-08-03 10:13:08 -07:00

linking_test.go

Refactor tests under util package.

2022-07-14 19:22:54 -07:00

linking.go

Update golangci-lint to 1.49.0 (#16507)

2022-09-19 22:38:59 +00:00

listener.go

Lint and fix missing license headers (#8075)

2021-08-30 09:44:09 -07:00

loadbalancer_test.go

context.TODO() tidying (#21288)

2023-02-07 09:01:35 +00:00

loadbalancer.go

Fix agent mesh integration test (#13954)

2022-07-05 16:01:03 +00:00

net.go

Teleport Proxy Behind ALB support for IP Pinning (#26623)

2023-06-28 13:09:24 +00:00

pipenetconn_unix.go

fix: use build tags and import net (#19028)

2022-12-02 22:10:52 +00:00

pipenetconn_windows.go

fix: use build tags and import net (#19028)

2022-12-02 22:10:52 +00:00

pipenetconn.go

Fix: make DualPipeNetConn cross-platform (#19023)

2022-12-02 21:30:48 +00:00

proxyconn_test.go

Add support for proxying TCP apps (#13455)

2022-07-26 19:01:39 +00:00

proxyconn.go

Security fixes 03/23 (#23864)

2023-03-31 21:55:13 +00:00

proxyjump_test.go

Refactor tests under util package.

2022-07-14 19:22:54 -07:00

proxyjump.go

Allow user with at sign in name (#4002)

2020-07-21 10:41:31 -03:00

rand.go

Fix CryptoRandomHex function (#9186)

2021-12-09 19:50:44 +00:00

repeat.go

Session streaming

2020-09-28 23:08:56 -07:00

replace_test.go

Extend Teleport RBAC to support Kubernetes Verbs (#27096)

2023-07-06 15:39:11 +00:00

replace.go

Extend Teleport RBAC to support Kubernetes Verbs (#27096)

2023-07-06 15:39:11 +00:00

retry.go

node hb and watcher scalability improvements (#21490)

2023-03-03 17:39:00 +00:00

roles_test.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

round.go

Update golangci-lint to 1.49.0 (#16507)

2022-09-19 22:38:59 +00:00

slice_test.go

Refactor tests under util package.

2022-07-14 19:22:54 -07:00

slice.go

Lint and fix missing license headers (#8075)

2021-08-30 09:44:09 -07:00

spki.go

Replace golint with revive (#8613)

2021-10-19 14:00:24 -04:00

sync_map_test.go

Support assumed roles for "tsh proxy aws" (#20568)

2023-01-30 21:21:43 +00:00

sync_map.go

Support assumed roles for "tsh proxy aws" (#20568)

2023-01-30 21:21:43 +00:00

sync_writer.go

Implement Moderated Sessions (#8563)

2022-02-15 17:02:10 +01:00

syslog_windows.go

Make tctl build for Windows (#25447)

2023-05-24 20:44:18 +00:00

syslog.go

Remove use of deprecated ioutil package (#11296)

2022-03-21 18:00:34 +00:00

time.go

Lint and fix missing license headers (#8075)

2021-08-30 09:44:09 -07:00

timeout.go

Add metrics to track connection ingress (#19734)

2023-02-01 23:45:34 +00:00

tls.go

Use pre-generated RSA keys in tests (#18750)

2022-12-05 19:33:49 +00:00

tlsdial.go

Add full IP pinning enforcement (#24743)

2023-04-23 17:09:49 +00:00

uid.go

Enable GCI linter (#17894)

2022-10-28 20:20:28 +00:00

unpack_test.go

Refactor tests under util package.

2022-07-14 19:22:54 -07:00

unpack.go

fix: use errors.Is for all EOF comparisons (#26012)

2023-05-10 19:27:39 +00:00

utils_test.go

Add ListReleases and GetLicense endpoints (#19565)

2023-01-03 12:52:22 +00:00

utils.go

InstallScripts: pin teleport version using ServerVersion (#28149)

2023-06-23 15:45:36 +00:00

ver_test.go

Refactor tests under util package.

2022-07-14 19:22:54 -07:00

ver.go

Add secure client IP propagation throughout teleport (#21080)

2023-02-28 20:38:12 +00:00

writer_test.go

Refactor tests under util package.

2022-07-14 19:22:54 -07:00

writer.go

Capture stderr from "tsh db connect" and reformat redis error (#13843)

2022-07-05 21:25:43 +00:00