teleport

mirror of https://github.com/gravitational/teleport.git synced 2026-11-04 19:12:46 +08:00

Files

T

Trent Clarke 1ce0649944 Adds IC plugin status value to trigger IC group import (#52682 )

* Adds IC plugin status value to trigger IC group import

The IC plugin automatically imports IC groups into Teleport on its
first run, and uses the plugin status block to mark the import as complete,
and is not required the next time the plugin starts up.

New functionality in `tctl` allows Teleport admins to edit the IC plugin
resource in order to modify group, account and permission set filters.
At the moment, the group filters are only applied during tis initial import,
so changing them has no effect.

In order to allow changes to group import filters to have an effect, this this
patch adds a new value to the `AWSICGroupImportStatusCode` enueration that
indicates that the import process should be re-run the next time the plugin
restarts.

* Break out import status code validation

* Remove import status enum validation

2025-03-07 02:25:44 +00:00

accessgraph

[sec_scan][24] extract AuthorizedKey's comment and type (#44643 )

2024-07-29 19:33:29 +00:00

accesslist

feat: Allow including Access Lists as nested members and owners (#38738 )

2024-11-01 22:07:36 +00:00

accessmonitoringrule

Add initial access monitoring rule resource (#36745 )

2024-03-08 15:46:00 +00:00

autoupdate

Add autoupdate_config and autoupdate_agent_rollout validation (#50181 )

2024-12-17 17:12:42 +00:00

clusterconfig

[sec_scan][11] add AccessGraphSettings backend service (#44014 )

2024-07-17 15:30:27 +00:00

common

Improve perf on label key validation (#52579 )

2025-03-03 11:24:43 +00:00

compare

Uniform equal function names to IsEqual (#40441 )

2024-04-19 09:22:43 +00:00

discoveryconfig

Protobuf and configuration for Access Graph Azure Discovery (#50364 )

2024-12-18 20:05:56 +00:00

events

emit user_origin for local login event (#52124 )

2025-02-25 20:53:29 +00:00

externalauditstorage

fix: prevent deleting AWS OIDC integration used by EAS (#40630 )

2024-04-23 21:22:16 +00:00

header

[sec_scan][15] add support for edits to AccessGraphSettings via tctl (#44055 )

2024-07-23 08:40:05 +00:00

installers

Teleport Install scripts: use /etc/apt/keyrings/ when adding Teleport's public key for DEB packages (#50273 )

2025-01-15 15:14:51 +00:00

kubewaitingcontainer

Introduce patch_type to KubernetesWaitingContainer (#39738 )

2024-03-22 19:35:46 +00:00

label

Implement persistence for db_object_import_rule resource (#37806 )

2024-02-22 03:54:27 +00:00

samlsp

aws identity center plugin config dependency (#47844 )

2024-10-23 18:28:23 +00:00

secreports

…

trait

Preserve Traits nil value between proto<-->API type conversion (#44492 )

2024-07-24 08:23:49 +00:00

userloginstate

GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849 )

2024-12-10 17:31:32 +00:00

userprovisioning

Add StaticHostUserV2 (#46038 )

2024-09-04 21:16:11 +00:00

usertasks

UserTasks - DiscoverRDS issues: add RDS known issues (#50986 )

2025-01-20 14:11:23 +00:00

webauthn

feat: Implement the WebAuthn credProps extension (#45252 )

2024-08-15 13:28:19 +00:00

wrappers

…

access_request_test.go

Use new access request filters in webUI (#39625 )

2024-03-27 18:21:55 +00:00

access_request.go

Add initial expiry service (#49267 )

2025-01-06 15:06:17 +00:00

accountrecovery.go

…

app_test.go

VNet: Refuse conn if local port doesn't match app spec (#49944 )

2024-12-11 16:20:58 +00:00

app.go

Filter IC Permission Sets based on access (#49936 )

2024-12-12 22:51:01 +00:00

appserver_or_saml_idp_sp_test.go

…

appserver_or_saml_idp_sp.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

appserver_test.go

AWS OIDC: add aws account id as label to AWS App (#49693 )

2024-12-06 08:43:03 +00:00

appserver.go

AWS OIDC: add aws account id as label to AWS App (#49693 )

2024-12-06 08:43:03 +00:00

assertion_info_test.go

…

assertion_info.go

…

audit.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

authentication_authpreference_test.go

Use second_factors for logic instead of deprecated second_factor. (#47426 )

2024-10-16 19:22:39 +00:00

authentication_mfadevice_test.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704 )

2024-10-16 22:24:07 +00:00

authentication_test.go

Add second_factors (#47233 )

2024-10-11 00:02:39 +00:00

authentication.go

Stable UNIX users: storage and auth API (#51102 )

2025-01-28 17:08:20 +00:00

authority_test.go

verify cluster name of TLS peer certificates (#52128 )

2025-02-13 21:25:52 +00:00

authority.go

transition ssh enforcement to sshca.Identity (#51468 )

2025-02-04 18:01:53 +00:00

clone_test.go

…

cluster_alert_test.go

Add a link text label to the ClusterAlert resource (#45972 )

2024-09-05 10:24:39 +00:00

cluster_alert.go

Add a link text label to the ClusterAlert resource (#45972 )

2024-09-05 10:24:39 +00:00

clustername.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

connection_diagnostic.go

…

constants.go

Support setting the public addr for apps discovered in Kube clusters (#52642 )

2025-03-03 15:42:47 +00:00

database_permissions_test.go

Add DatabasePermissions field to role (#37797 )

2024-02-07 20:03:11 +00:00

database_permissions.go

Add DatabasePermissions field to role (#37797 )

2024-02-07 20:03:11 +00:00

database_test.go

Add support for RDS-hosted Oracle and update related RDS handling (#52374 )

2025-02-25 13:23:37 +00:00

database.go

Add support for RDS-hosted Oracle and update related RDS handling (#52374 )

2025-02-25 13:23:37 +00:00

databaseserver_test.go

Fix an issue tsh db ls shows one entry per db server instead of db name (#40784 )

2024-04-22 20:21:40 +00:00

databaseserver.go

Replace usages of x/exp/maps with stdlib maps package (#51448 )

2025-01-28 14:54:40 +00:00

databaseservice.go

Add Hostname for Database Services status (#45902 )

2024-08-27 14:39:19 +00:00

derived.gen.go

Add Account Assignment IDs to IC Account & App Permission Set Lists (#49747 )

2024-12-05 06:19:56 +00:00

desktop_test.go

…

desktop.go

Add support for storing RDP licenses from Windows Desktops (#51250 )

2025-01-23 22:41:39 +00:00

device_test.go

…

device.go

…

device.pb.go

Set all gogo -M options (#45231 )

2024-08-08 22:11:36 +00:00

duration_test.go

…

duration.go

Fix violations of non-constant format strings linter (#51812 )

2025-02-04 16:43:35 +00:00

events_test.go

add CA filter for all known CAs to cache configs (#36361 )

2024-01-09 18:30:41 +00:00

events.go

add CA filter for all known CAs to cache configs (#36361 )

2024-01-09 18:30:41 +00:00

extension.go

…

fuzz_test.go

…

github_test.go

GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849 )

2024-12-10 17:31:32 +00:00

github.go

GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849 )

2024-12-10 17:31:32 +00:00

headlessauthn.go

…

installer.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

instance_test.go

…

instance.go

Add monitoring of the servers time drifting (#44489 )

2024-11-28 21:18:24 +00:00

integration_awsoidc.go

AWSOIDC: Compute Proxy's Endpoint for issuing a token (#37253 )

2024-01-26 13:35:16 +00:00

integration_github_test.go

GitHub proxy: web apis for enrolment (#51423 )

2025-02-03 19:12:08 +00:00

integration_github.go

GitHub proxy: web apis for enrolment (#51423 )

2025-02-03 19:12:08 +00:00

integration_test.go

GitHub Proxy part 1: github integration resource (#48999 )

2024-11-23 20:09:35 +00:00

integration.go

GitHub Proxy part 1: github integration resource (#48999 )

2024-11-23 20:09:35 +00:00

jamf_test.go

remove protobuf fields for storing Jamf username, password, client_id and client_secret (#45957 )

2024-08-28 20:04:54 +00:00

jamf.go

disable JamfSpec secrets validation (#45959 )

2024-08-28 14:57:39 +00:00

jwt.go

…

kubernetes_server_test.go

Fix some lint issues (#38913 )

2024-03-07 18:04:51 +00:00

kubernetes_server.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

kubernetes_test.go

Forbid custom namespaces in various resources (#49830 )

2024-12-05 19:21:24 +00:00

kubernetes.go

remove protoKnownFieldsEqual hack with goderive (#43508 )

2024-07-01 23:45:02 +00:00

license_test.go

2023-11-27 18:22:49 +00:00

license.go

Fix license stringification (#46415 )

2024-09-10 13:05:48 +00:00

lock_test.go

…

lock.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

maintenance_test.go

Add autoupdate_config and autoupdate_agent_rollout validation (#50181 )

2024-12-17 17:12:42 +00:00

maintenance.go

[teleport-update] Version reporting and deprecated upgrader management (#50266 )

2025-01-22 21:13:40 +00:00

matchers_accessgraph.go

[aws_matchers] validate aws regions (#45119 )

2024-08-06 15:05:32 +00:00

matchers_aws_test.go

EC2 AutoDiscover Script mode with Integration (#40959 )

2024-05-09 15:05:36 +00:00

matchers_aws.go

chore: Bump golangci-lint to v1.60.1 (#45469 )

2024-08-14 14:46:57 +00:00

matchers_azure_test.go

…

matchers_azure.go

Use pkg slices from the standard library (#35905 )

2023-12-19 23:06:53 +00:00

matchers_gcp_test.go

[gcp] support project discovery (#47434 )

2024-10-14 16:50:47 +00:00

matchers_gcp.go

[gcp] support project discovery (#47434 )

2024-10-14 16:50:47 +00:00

matchers_kube_test.go

…

matchers_kube.go

Use pkg slices from the standard library (#35905 )

2023-12-19 23:06:53 +00:00

matchers.go

…

mfa.go

feat: SSO MFA - Add ephemeral SSO MFA device (#46704 )

2024-10-16 22:24:07 +00:00

namespace.go

Forbid custom namespaces in various resources (#49830 )

2024-12-05 19:21:24 +00:00

networking_test.go

Allow a custom SSH dial timeout to be set cluster wide (#45507 )

2024-08-20 13:11:46 +00:00

networking.go

Allow a custom SSH dial timeout to be set cluster wide (#45507 )

2024-08-20 13:11:46 +00:00

oidc_external_test.go

OIDC: validate the client_secret field (#46041 )

2024-10-16 19:25:59 +00:00

oidc_external.go

…

oidc.go

feat: SSO MFA - support for OIDC MaxAge (#47292 )

2024-10-16 20:19:18 +00:00

okta_test.go

Add PluginOktaSyncSettings.UserSyncSource (#51642 )

2025-02-05 19:28:15 +00:00

okta.go

Add OktaUserSyncSource.IsUnknown (#52160 )

2025-02-18 11:30:19 +00:00

order.go

…

plugin_data.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

plugin_static_credentials.go

GitHub Proxy part 1: github integration resource (#48999 )

2024-11-23 20:09:35 +00:00

plugin_test.go

Adds option to use ambient creds to IC integration config (#51013 )

2025-01-15 09:50:43 +00:00

plugin.go

Adds IC plugin status value to trigger IC group import (#52682 )

2025-03-07 02:25:44 +00:00

presence.go

Forbid custom namespaces in various resources (#49830 )

2024-12-05 19:21:24 +00:00

provisioning_test.go

Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724 )

2024-11-21 23:05:58 +00:00

provisioning.go

Add oci join server auth (#51446 )

2025-02-07 18:09:44 +00:00

proxied_service.go

…

remotecluster.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

resource_153_test.go

Exposes Identity Center accounts as Apps in Unified Resource Cache (#49301 )

2024-12-05 12:23:56 +00:00

resource_153.go

Fix proto resource 153 marshalling for autoupdate_* resources (#50688 )

2025-01-09 14:18:57 +00:00

resource_ids_test.go

…

resource_ids.go

Use pkg slices from the standard library (#35905 )

2023-12-19 23:06:53 +00:00

resource_test.go

Forbid custom namespaces in various resources (#49830 )

2024-12-05 19:21:24 +00:00

resource.go

Improve perf on label key validation (#52579 )

2025-03-03 11:24:43 +00:00

restrictions.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

role_test.go

Fix unmarshalling of CreateDatabaseUserMode (#49995 )

2024-12-11 17:55:57 +00:00

role.go

Adds Roles for IC resource access requests (#49565 )

2024-12-16 02:06:46 +00:00

saml_idp_service_provider_test.go

aws identity center plugin config dependency (#47844 )

2024-10-23 18:28:23 +00:00

saml_idp_service_provider.go

aws identity center plugin config dependency (#47844 )

2024-10-23 18:28:23 +00:00

saml_test.go

Fix SAMLForceAuthn marshalling (#48098 )

2024-10-30 18:29:35 +00:00

saml.go

Fix SAMLForceAuthn marshalling (#48098 )

2024-10-30 18:29:35 +00:00

second_factor_test.go

Use second_factors for logic instead of deprecated second_factor. (#47426 )

2024-10-16 19:22:39 +00:00

second_factor.go

Use second_factors for logic instead of deprecated second_factor. (#47426 )

2024-10-16 19:22:39 +00:00

semaphore.go

periodically create access list reminder notifications when needed (#51581 )

2025-01-31 15:59:23 +00:00

server_info_test.go

EC2 Auto-Discovery: EICE support (#35504 )

2024-03-26 16:16:20 +00:00

server_info.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

server_test.go

GitHub proxy part 6: proxing Git using SSH transport (#49980 )

2025-01-14 21:48:04 +00:00

server.go

GitHub proxy: web apis for enrolment (#51423 )

2025-02-03 19:12:08 +00:00

session_tracker_test.go

…

session_tracker.go

git session prehog event (#51794 )

2025-02-14 19:11:23 +00:00

session.go

split SSH and TLS keys in tsh login (#45995 )

2024-09-12 19:36:32 +00:00

sessionrecording.go

readonly shared cluster configs (#43422 )

2024-07-02 17:23:13 +00:00

signaturealgorithmsuite.go

support file configuration of signature_algorithm_suite (#46203 )

2024-09-04 19:45:55 +00:00

sortby_test.go

…

sortby.go

Use new access request filters in webUI (#39625 )

2024-03-27 18:21:55 +00:00

statictokens.go

Add token list/delete endpoints (#42402 )

2024-06-07 22:59:11 +00:00

system_role_test.go

…

system_role.go

Add AccessGraphPlugin system role (#40714 )

2024-04-23 09:43:45 +00:00

traits.go

…

trust.go

grpc: Update OktaService add Enroll/Validate/Update methods (#46707 )

2024-09-20 14:24:59 +00:00

trusted_device_requirement.pb.go

Show device trust status in Connect (#49508 )

2024-11-29 10:11:30 +00:00

trustedcluster.go

Add UpsertTrustedClusterV2 RPC (#49789 )

2024-12-21 04:24:29 +00:00

tunnel_strategy_test.go

…

tunnel_strategy.go

…

tunnel.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

tunnelconn.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

types.pb.go

Adds IC plugin status value to trigger IC group import (#52682 )

2025-03-07 02:25:44 +00:00

ui_config.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

user.go

GitHub proxy part 5: OAuth flow to retrieve GitHub identity (#49849 )

2024-12-10 17:31:32 +00:00

usergroup_test.go

…

usergroup.go

Uniform equal function names to IsEqual (#40441 )

2024-04-19 09:22:43 +00:00

usertoken.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

usertokensecrets.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00

watch_status.go

remote Metadata.ID and Lease.ID fields (#41732 )

2024-05-23 15:08:46 +00:00