Tim Buckley daf95c1595 Support verifying standard agent UUIDs for bound keypair joining (#64351) ...

* MWI: Adapt bound keypair verification logic to account for standard hosts

This adds support for verifying host UUIDs (rather than bot instance
UUIDs) to the bound keypair join method.

Note that as hosts only have a trustworthy UUID when joining via the
new join service, bound keypair joining for agents via the legacy join
service is not allowed and will result in an error.

* Test coverage and small fixes for legacy joining

Agents cannot join via the legacy join service, however the bound
keypair implementation depends on having a trustworthy HostID that
is unset for bots. The impl passed it through before since it wasn't
used, so we now clear it.

* Add unit test coverage for node joining

Also includes missing bound keypair case in HostID generation,
fixes a leaky error string in HandleBoundKeypair, and adds additional
checks for identity misuse with presenting HostIDs to a token with
a bot ID and vice versa.

* Address review feedback

- Use `t.Context()` in tests
- Remove unnecessary params for mutator functions that were always
  an empty string.

2026-04-02 01:48:29 +00:00

..

hostid_test.go

Introduce logtest package (#56741)

2025-07-15 18:11:10 +00:00

hostid_unix.go

Modernize lib/auth and lib/utils (#55976)

2025-06-22 10:53:52 +00:00

hostid_windows.go

…

hostid.go

Support verifying standard agent UUIDs for bound keypair joining (#64351)

2026-04-02 01:48:29 +00:00