self-hosted/teleport
self-hosted/teleport
1
0
Fork 0
mirror of https://github.com/gravitational/teleport synced 2024-10-19 08:43:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
12205 commits 3223 branches 4169 tags 1.3 GiB
Commit graph

218 commits

Author SHA1 Message Date
Jonathan Lassoff 5d82604d58
Add a GitHub Workflow for the Trivy security scanner (#23084) 
* Add a GitHub Workflow for the Trivy security scanner

* Add initial ignore statements for Trivy

This accepts all the current latent findings in the repository, while still
enabling Trivy to flag new findings.
 2023-03-23 01:31:54 +00:00
Justinas Stankevičius 6af6e7f566
Vendor slack plugin and supporting libraries (#23045) 
* Vendor slack plugin and supporting libraries

* Fix up plugin integration tests (wip)

* Run GCI on vendored code

* Use newtype instead of type alias

golangci-lint currently panics on this,
"skip-files" et al don't help, as it is a linter panic, not an error

See d717045480

* Remove long-runing plugins tests from difftest

* Move access plugin tests to unit-tests-integrations
 2023-03-22 19:39:07 +00:00
Joel 884a95cc10
Teleport Usage Script (#23304) 
* draft go script

* print end stats

* remove empty

* default start date

* prios

* todo

* update ratelimiter algo

* add comments

* dockerfile stuff

* include image workflow

* use official product names

* comments + rephrase output

* fix various script bugs

* feedback

* wording

* show users option

* use multistage to reduce image size

* make throttle error handling stable

* lowercase fns

* set go.mod to 1.19 to match main project

* Update examples/teleport-usage/main.go

Co-authored-by: Gavin Frazar <gavin.frazar@goteleport.com>

* exp ratelimit

* okay, seems binary search throttling is best

* add test coverage for ratelimiter

* add span test

* remove unused const

* use custom retry passby

* update flaky tests ci

* split job

* fix makefile

* oops

* run tests in integration job

* go mod tidy

---------

Co-authored-by: Gavin Frazar <gavin.frazar@goteleport.com>
 2023-03-22 16:36:21 +00:00
Hugo Shaka 5040fbda56
kube-updater: add Dockerfile & GHA pipelines (#22983) 2023-03-22 13:05:02 +00:00
Mike Jensen 2e2911438d
Update CodeQL Schedule to scan release branches (#23169) 
* Update CodeQL Schedule to scan release branches

This allows us to switch our release branches to also use the scheduled CodeQL check so we can remove CodeQL from the PR flow for our release branches too.

* Use go dependency caching with auto build

This change speeds up the build by about ~2 minutes (10%)
 2023-03-17 15:12:00 +00:00
Mike Jensen 7ee72cd194
Build API on root go.mod changes (#23170) 
Without this build step when the root go.mod is changed it's possible to merge a change that will result in api dependencies being out of sync.
 2023-03-16 13:40:48 +00:00
Mike Jensen f0987b5198
Remove ossfuzz from CI (#23089) 
This removal is primarily cost motivated.  We will continue to have scheduled scans executed by ossfuzz, but for now we are disabling this job from our PR / merge queue workflows.
 2023-03-15 00:43:20 +00:00
Steven Martin 1f01bc3a4b
add bypasses for lint go and lint docs (#22299) 
* Adds bypass for lint go for RFD and Docs changes.

* spacing

* Update docs test to only check for docs, examples changes or bypass

* include merge groups

* test docs change

* remove change

* Test go change

* remove go test change

* test doc changes

* remove docs test change

* fix indentation

* fix indentation
 2023-03-14 19:22:13 +00:00
Grzegorz Zdunek dab301b182
Add testplan items for Connect config (#22873) 
* Add testplan items for Connect config

* Rename "three dots" to "More Options"
 2023-03-14 10:04:16 +00:00
Mike Jensen dab1eb5e27
CodeQL improvements (#22854) 
This makes two changes:
* Reduces action instance type to 16 cores.  This will half the cost without a significant speed difference
* Switch from `make full` to CodeQL Auto Build.  This speeds up the build by about 10 minutes.  I confirmed there is not a reduction in the scan coverage
 2023-03-09 21:56:47 +00:00
Hugo Shaka 3a9c96d37a
kube-updater: initial commit (#22067) 
This PR implements the core of the kube-agent-updater, which is part of
https://github.com/gravitational/teleport/issues/21516#issue-1576935859

In order to have a fully working updater we still need to:
- implement the interfaces for version retrieval, image validation and maintenance trigger
- add statefulset support (and deal with the potential deadlocks)
- implement the CI and release pipeline (Dockerfile, README, Makefile, github action, drone)
- integrate in the `teleport-kube-agent` helm chart

Those changes will happen in subsequent PRs.
 2023-03-06 18:40:28 +00:00
Hugo Shaka 9e1f53d33a
Move operator into integrations/ (#22618) 
* Move operator into `integrations/`

* fixup! Move operator into `integrations/`

* fixup! fixup! Move operator into `integrations/`

* fixup! fixup! fixup! Move operator into `integrations/`

* fixup! fixup! fixup! fixup! Move operator into `integrations/`
 2023-03-06 17:59:02 +00:00
Roman Tkachenko d4163e1d01
Flaky tests detector tweaks (#22607) 2023-03-03 20:50:13 +00:00
Jakub Nyckowski 8329021148
Skip building webassets in CI (#22549) 
* Skip building webassets in CI

Building webassets is not always needed and many of our CI build just builds them and ends up not using them after.
This PR skips building the webassets for all pipelines where they are not needed. This should save us some time and $$.

* Make some changes to trigger CI

* Create the missing directory
 2023-03-03 15:14:25 +00:00
Roman Tkachenko 9537bd8d1a
Run UI checks in merge queue (#22323) 2023-02-27 17:36:39 +00:00
Jeff Pihach 2973755587
add bypassses for UI GHA's (#22105) 2023-02-22 17:31:43 +00:00
Zac Bergquist caec32a2a4
CI: bypass OS compatibility check for some changes (#21989) 
Docs changes, web UI changes, or RFD updates cannot change the
OS compatibility of Teleport, so allow them to bypass the
OS compatibililty check.
 2023-02-17 18:39:58 +00:00
Mike Jensen 10bd548162
Switch CodeQL to scheduled (#21883) 
We still plan to address this root issue, and are tracking making CodeQl faster so it can be a required PR check: https://github.com/gravitational/SecOps/issues/269

However, until then we need to switch this job to be a scheduled task rather than on every PR and push.  This is partly cost motivated, but also we are already hitting our timeouts.  This PR also increases the analysis timeout so that the daily job can be sure to complete.
 2023-02-16 17:30:59 +00:00
Jakub Nyckowski e62ff82183
Unify x86/ARM64 build process (#21660) 
* Unify x86/AMD64 build process

Currently, our ARM64 pipeline builds limited subset of Teleport features as none of the 3rd party dependencies (openssh, libbpf etc) are not built on AMR64. This change build all dependencies on AMR64 in the same way as we do on x86.

FIPS changes are not included as we do not support FIPS on ARM64.

* Apply suggestions from code review

Co-authored-by: Roman Tkachenko <roman@goteleport.com>

---------

Co-authored-by: Roman Tkachenko <roman@goteleport.com>
 2023-02-15 15:38:59 +00:00
Roman Tkachenko f57150376f
Run reviewers check on (un)labeled PR events (#21814) 2023-02-14 16:56:39 +00:00
Zac Bergquist c924be5c6d
Refer to tsh apps subcommand (#21431) 
The `tsh appps` family of commands is aliased to `tsh apps`, so both
invocations work correctly. The command itself is defined as `tsh apps`,
so this is what appears in the help message.

Update references to `tsh app` to recommend `tsh apps` instead so that
there isn't confusion when browsing `tsh help` and looking for a missing
`app` subcommand.

Fixes #21367
 2023-02-10 21:40:55 +00:00
Zac Bergquist d74d78b9f0
Create go workspace prior to build (#21668) 2023-02-10 21:18:18 +00:00
Zac Bergquist 46bfc6bd8a
Fix build-api workflow (#21658) 
- Add missing runs-on stanza
- Fix recursive glob
 2023-02-10 17:24:48 +00:00
Alan Parra f8386bf0ae
Add testplan items for Device Trust role support (#21472) 
* Add testplan items for Device Trust role support

* Trim whitespaces
 2023-02-10 15:53:59 +00:00
Jakub Nyckowski 20f5d0b3e0
Move CentOS 7 assets to GitHub repo (#21435) 
Moving our CentOS build assets, aka Clang-10 is the first step to enabling our full Teleport to build on ARM64. This change should also save us some $$ as getting the assets from S3 sounds expensive.
 2023-02-10 15:46:36 +00:00
Joel f93d401df2
Update Firestore and held-back dependencies (#21190) 
* update dep

* implicit aggregate

* fix kind check

* remove cring address manip

* correct import

* invert if

* fix rename

---------

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
 2023-02-10 14:20:15 +00:00
Gabriel Corado 22dc3dfb2e
Update SQL Server library (#21065) 
* refactor(sqlserver): change to microsoft fork

* chore(gomod): update mssqldb dep

* test(sqlserver): add server on parsing PLP RPC packets

* fix(db): change mssql import

* chore(gomod): update go-mssqldb reference

* test(protocol): use fuzz arguments

* chore: code review suggestions

* test(sqlserver): add missing protocols attribute
 2023-02-10 11:39:11 +00:00
Edoardo Spadolini 5122f308e6
Run go mod tidy in CI (#21140) 
* Run go mod tidy in CI

* Update e_imports.go

* Use git diff on just go.mod/go.sum, tidy api too

* Fix the e_imports list by accomodating build tags

* Wording

* Simplify commands in the workflow

* Delete go.sum before go mod tidy

* Shell suggestions

* Fix missing saml imports for upcoming PRs
 2023-02-08 17:22:21 +00:00
Roman Tkachenko ea5f334821
Fix operator build (#21362) 2023-02-07 01:15:55 +00:00
Krzysztof Skrzętnicki 1ca9a37dde
Test plan: expand test description for proxy service TLS routing. (#20697) 
* Test plan: expand test description for proxy service TLS routing.

* Expand the description of open ports.
 2023-02-06 18:47:15 +00:00
Michael Wilson 6f9ad9553a
Protos-up-to-date is now part of the lint job. (#21217) 
The lint job now includes protos-up-to-date as a step.
 2023-02-03 16:05:36 +00:00
Jeff Pihach 26f6022689
Initial pass at lint and test GHA for UI. (#21110) 
* Initial pass at lint and test GHA for UI.

* Fix lint

* Add --frozen-lockfile

* Skip the e directory if it doesn't exist while linting.

* Update failing snapshots.

* use a more reasonable filter for eslint to support missing e

* ignore type check on e imports.

* ignore failing file that requires e teleterm file.

* fix lint

* quiet down the log output for prettier-write.
 2023-02-02 22:56:55 +00:00
Tiago Silva b2c2886341
Update Kubernetes Access test plan (#20274) 
* Update Kubernetes Access test plan

* update

* add gke auto-discovery
 2023-02-02 18:01:19 +00:00
Michael Wilson 6bf65b0f4d
Add check if protos are up to date. (#21066) 
* Add check if protos are up to date.

A new check has been added that will detect if protobufs are up to date. The
script will exit abnormally if protobufs need to be regenerated.

* Alan's feedback.

* Restoring the script.

* Update script comment.

* Add in the set -eu.

* Add a comment for the pull_request/merge_group bit in the new github action.

* Remove helper script.

* Reduce the runner size.
 2023-02-02 05:54:20 +00:00
dependabot-batcher[bot] e1673dec70
Batched Dependabot updates (#21043) 
* Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc

Bumps [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.37.0 to 0.38.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.37.0...zpages/v0.38.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go from 1.44.189 to 1.44.191

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.189 to 1.44.191.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.189...v1.44.191)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump sigs.k8s.io/controller-tools from 0.11.1 to 0.11.2

Bumps [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools) from 0.11.1 to 0.11.2.
- [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-tools/compare/v0.11.1...v0.11.2)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-tools
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.80.1 to 1.83.0

Bumps [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) from 1.80.1 to 1.83.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.80.1...service/ec2/v1.83.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump go.opentelemetry.io/otel/sdk from 1.11.2 to 1.12.0 in /api

Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.11.2 to 1.12.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.11.2...v1.12.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump cloud.google.com/go/container from 1.10.0 to 1.13.0

Bumps [cloud.google.com/go/container](https://github.com/googleapis/google-cloud-go) from 1.10.0 to 1.13.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/asset/v1.10.0...pubsub/v1.13.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/container
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Revert "Bump cloud.google.com/go/container from 1.10.0 to 1.13.0"

This reverts commit 8987cba9a0aa8bd26743dabee99f8336637e35be.

* go mod tidy

* bring back coreos/pkg

* add container to ingores deps

* Bumps go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.37.0 to 0.38.0

* Bumps go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.11.2 to 1.12.0

* Bumps go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.11.2 to 1.12.0

* Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.11.2 to 1.12.0

* Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tobiasz Heller <tobiasz.heller@goteleport.com>
 2023-02-01 17:06:45 +00:00
dependabot-batcher[bot] 26a623b5be
Batched Dependabot updates (#20903) 
* Bump google.golang.org/grpc from 1.52.1 to 1.52.3

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.1 to 1.52.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.52.1...v1.52.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go from 1.44.186 to 1.44.189

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.186 to 1.44.189.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.186...v1.44.189)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump sigs.k8s.io/controller-runtime from 0.14.1 to 0.14.2

Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.14.1 to 0.14.2.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/master/RELEASE.md)
- [Commits](https://github.com/kubernetes-sigs/controller-runtime/compare/v0.14.1...v0.14.2)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go-v2/config from 1.18.9 to 1.18.10

Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.18.9 to 1.18.10.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.9...config/v1.18.10)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/bufbuild/connect-go from 1.4.1 to 1.5.0

Bumps [github.com/bufbuild/connect-go](https://github.com/bufbuild/connect-go) from 1.4.1 to 1.5.0.
- [Release notes](https://github.com/bufbuild/connect-go/releases)
- [Commits](https://github.com/bufbuild/connect-go/compare/v1.4.1...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/bufbuild/connect-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/snowflakedb/gosnowflake from 1.6.16 to 1.6.17

Bumps [github.com/snowflakedb/gosnowflake](https://github.com/snowflakedb/gosnowflake) from 1.6.16 to 1.6.17.
- [Release notes](https://github.com/snowflakedb/gosnowflake/releases)
- [Changelog](https://github.com/snowflakedb/gosnowflake/blob/master/release.go)
- [Commits](https://github.com/snowflakedb/gosnowflake/compare/v1.6.16...v1.6.17)

---
updated-dependencies:
- dependency-name: github.com/snowflakedb/gosnowflake
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity

Bumps [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v1.2...sdk/azidentity/v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/go-webauthn/webauthn from 0.5.0 to 0.7.0

Bumps [github.com/go-webauthn/webauthn](https://github.com/go-webauthn/webauthn) from 0.5.0 to 0.7.0.
- [Release notes](https://github.com/go-webauthn/webauthn/releases)
- [Commits](https://github.com/go-webauthn/webauthn/compare/v0.5.0...v0.7.0)

---
updated-dependencies:
- dependency-name: github.com/go-webauthn/webauthn
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump google.golang.org/grpc from 1.52.1 to 1.52.3 in /api

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.1 to 1.52.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.52.1...v1.52.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Revert "Bump github.com/go-webauthn/webauthn from 0.5.0 to 0.7.0"

This reverts commit 5cb883d540e37b21c457b2f00886798ef734845f.

* add go-webauthn to dependabot skip

* bring back coreos/pkg

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tobiasz Heller <tobiasz.heller@goteleport.com>
Co-authored-by: Tobiasz Heller <14020794+tobiaszheller@users.noreply.github.com>
Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
 2023-01-31 20:26:29 +00:00
Zac Bergquist f8921bf85f
Add workflow for building the API module (#20902) 
In the past, we've mistakenly introduced dependencies on a newer
Go version than what the API module declares as its minimum
required version.

To prevent this from happening in the future, this job will build
the API with the version of Go declared by the API.
 2023-01-31 19:59:16 +00:00
Rafał Cieślak 2e1420d07f
Add more items to Connect test plan (#20909) 2023-01-31 11:28:02 +00:00
Gavin Frazar 082886579f
update test plan to include tsh aws -e (#20878) 2023-01-30 17:55:19 +00:00
Roman Tkachenko 170eee2c0d
Use ghcr image for doc tests (#20874) 2023-01-28 03:30:47 +00:00
Ada 43100d4ed0
Remove environment in check and backport workflows (#20862) 
Context:
* Update the workflows to use repository secrets instead of environment
  secrets
 2023-01-27 22:16:17 +00:00
Brian Joerger ff60acd2f2
Remove app access from hardware key support tests since it is currently not supported. (#20787) 2023-01-27 20:50:44 +00:00
Zac Bergquist b817a05d91
Use a GitHub app for the check and backport workflows (#20850) 
These workflows need to be able to check org membership
for the PR author in order to determine whether or not
the author is an internal employee. This information is
only available when authenticated.
 2023-01-27 20:39:18 +00:00
Roman Tkachenko 2838091b4b
Add fake "check reviewers" workflow for merge queue (#20851) 2023-01-27 12:10:30 -08:00
Reed Loden 278e74d260
ci: Use large macOS runner for build-macos workflow (#20713) 
Use larger macOS runner with GitHub Actions to speed up builds.

Comment-only change to `client.go` to cause macOS build to be run.
 2023-01-25 19:39:22 +00:00
rosstimothy 4cc1c76e4d
Batched dependabot updates (#20624) 
* Update rsa requirement in /lib/srv/desktop/rdp/rdpclient

Updates the requirements on [rsa](https://github.com/RustCrypto/RSA) to permit the latest version.
- [Release notes](https://github.com/RustCrypto/RSA/releases)
- [Changelog](https://github.com/RustCrypto/RSA/blob/master/CHANGELOG.md)
- [Commits](https://github.com/RustCrypto/RSA/compare/v0.7.2...v0.8.1)

---
updated-dependencies:
- dependency-name: rsa
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump rsa from 0.7.2 to 0.8.1

Bumps [rsa](https://github.com/RustCrypto/RSA) from 0.7.2 to 0.8.1.
- [Release notes](https://github.com/RustCrypto/RSA/releases)
- [Changelog](https://github.com/RustCrypto/RSA/blob/master/CHANGELOG.md)
- [Commits](https://github.com/RustCrypto/RSA/compare/v0.7.2...v0.8.1)

---
updated-dependencies:
- dependency-name: rsa
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/gravitational/trace from 1.2.0 to 1.2.1 in /api

Bumps [github.com/gravitational/trace](https://github.com/gravitational/trace) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/gravitational/trace/releases)
- [Commits](https://github.com/gravitational/trace/compare/v1.2.0...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/gravitational/trace
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go from 1.44.180 to 1.44.184

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.180 to 1.44.184.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.180...v1.44.184)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/coreos/go-semver from 0.3.0 to 0.3.1

Bumps [github.com/coreos/go-semver](https://github.com/coreos/go-semver) from 0.3.0 to 0.3.1.
- [Release notes](https://github.com/coreos/go-semver/releases)
- [Commits](https://github.com/coreos/go-semver/compare/v0.3.0...v0.3.1)

---
updated-dependencies:
- dependency-name: github.com/coreos/go-semver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump k8s.io/apimachinery from 0.26.0 to 0.26.1

Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.26.0 to 0.26.1.
- [Release notes](https://github.com/kubernetes/apimachinery/releases)
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.26.0...v0.26.1)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.78.0 to 1.80.0

Bumps [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) from 1.78.0 to 1.80.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.78.0...service/ec2/v1.80.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump k8s.io/api from 0.26.0 to 0.26.1

Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.26.0 to 0.26.1.
- [Release notes](https://github.com/kubernetes/api/releases)
- [Commits](https://github.com/kubernetes/api/compare/v0.26.0...v0.26.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump cloud.google.com/go/storage from 1.28.1 to 1.29.0

Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) from 1.28.1 to 1.29.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/storage/v1.28.1...spanner/v1.29.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump k8s.io/cli-runtime from 0.26.0 to 0.26.1

Bumps [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) from 0.26.0 to 0.26.1.
- [Release notes](https://github.com/kubernetes/cli-runtime/releases)
- [Commits](https://github.com/kubernetes/cli-runtime/compare/v0.26.0...v0.26.1)

---
updated-dependencies:
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* revert firestore to v1.6.0

* Bump k8s.io/kubectl from 0.26.0 to 0.26.1

Bumps [k8s.io/kubectl](https://github.com/kubernetes/kubectl) from 0.26.0 to 0.26.1.
- [Release notes](https://github.com/kubernetes/kubectl/releases)
- [Commits](https://github.com/kubernetes/kubectl/compare/v0.26.0...v0.26.1)

---
updated-dependencies:
- dependency-name: k8s.io/kubectl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump k8s.io/client-go from 0.26.0 to 0.26.1

Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.26.0 to 0.26.1.
- [Release notes](https://github.com/kubernetes/client-go/releases)
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/kubernetes/client-go/compare/v0.26.0...v0.26.1)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump k8s.io/apiserver from 0.26.0 to 0.26.1

Bumps [k8s.io/apiserver](https://github.com/kubernetes/apiserver) from 0.26.0 to 0.26.1.
- [Release notes](https://github.com/kubernetes/apiserver/releases)
- [Commits](https://github.com/kubernetes/apiserver/compare/v0.26.0...v0.26.1)

---
updated-dependencies:
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* use firestore v1.6.1

* go mod tidy

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: dependabot-batcher[bot] <122306277+dependabot-batcher[bot]@users.noreply.github.com>
 2023-01-25 00:25:59 +00:00
Brian Joerger 5b6e2ada79
Test plan additions (#20586) 2023-01-24 17:41:45 +00:00
Jakub Nyckowski c1f59a1803
Disconnect moderated session on Ctrl+C (#20580) 
* Disconnect moderated session on Ctrl+C

* Add moderated session to the test plan.
 2023-01-24 01:37:34 +00:00
Mike Jensen 261dce259f
dependabot-batcher - Specify environment (#20563) 
The environment needs to be specified to have access tot he GitHub App auth.
 2023-01-23 18:41:52 +00:00
Mike Jensen 2235827c0e
Update dependabot-batcher to use GitHub app for authentication (#20342) 2023-01-23 13:42:39 +00:00