self-hosted/teleport
self-hosted/teleport
1
0
Fork 0
mirror of https://github.com/gravitational/teleport synced 2024-10-20 01:03:40 +00:00
Code Issues Packages Projects Releases Wiki Activity
15366 commits 3229 branches 4169 tags 1.3 GiB
Commit graph

15366 commits

This branch
This branch
All branches
Author SHA1 Message Date
dependabot[bot] e45aa2aaf1
Bump the go group with 25 updates (#33496) 
Bumps the go group with 25 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/compute](https://github.com/googleapis/google-cloud-go) | `1.23.0` | `1.23.1` |
| [cloud.google.com/go/container](https://github.com/googleapis/google-cloud-go) | `1.26.0` | `1.26.1` |
| [cloud.google.com/go/iam](https://github.com/googleapis/google-cloud-go) | `1.1.2` | `1.1.3` |
| [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.15.2` | `1.15.3` |
| [github.com/Azure/azure-sdk-for-go/sdk/storage/azblob](https://github.com/Azure/azure-sdk-for-go) | `1.1.0` | `1.2.0` |
| [github.com/ClickHouse/clickhouse-go/v2](https://github.com/ClickHouse/clickhouse-go) | `2.14.2` | `2.14.3` |
| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.30.5` | `2.31.0` |
| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.0.5` | `1.0.6` |
| [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) | `1.45.24` | `1.45.25` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.21.1` | `1.21.2` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.18.44` | `1.18.45` |
| [github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue](https://github.com/aws/aws-sdk-go-v2) | `1.10.41` | `1.10.42` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.11.89` | `1.11.90` |
| [github.com/aws/aws-sdk-go-v2/service/athena](https://github.com/aws/aws-sdk-go-v2) | `1.31.7` | `1.31.8` |
| [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) | `1.124.0` | `1.125.0` |
| [github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect](https://github.com/aws/aws-sdk-go-v2) | `1.17.1` | `1.17.2` |
| [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) | `1.30.2` | `1.30.3` |
| [github.com/aws/aws-sdk-go-v2/service/glue](https://github.com/aws/aws-sdk-go-v2) | `1.62.1` | `1.63.0` |
| [github.com/aws/aws-sdk-go-v2/service/iam](https://github.com/aws/aws-sdk-go-v2) | `1.22.6` | `1.22.7` |
| [github.com/aws/aws-sdk-go-v2/service/rds](https://github.com/aws/aws-sdk-go-v2) | `1.55.2` | `1.56.0` |
| [github.com/aws/aws-sdk-go-v2/service/sns](https://github.com/aws/aws-sdk-go-v2) | `1.22.1` | `1.22.2` |
| [github.com/aws/aws-sdk-go-v2/service/sqs](https://github.com/aws/aws-sdk-go-v2) | `1.24.6` | `1.24.7` |
| [github.com/elastic/go-elasticsearch/v8](https://github.com/elastic/go-elasticsearch) | `8.10.0` | `8.10.1` |
| [github.com/go-resty/resty/v2](https://github.com/go-resty/resty) | `2.9.1` | `2.10.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.146.0` | `0.147.0` |


Updates `cloud.google.com/go/compute` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.23.0...pubsub/v1.23.1)

Updates `cloud.google.com/go/container` from 1.26.0 to 1.26.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.26.0...container/v1.26.1)

Updates `cloud.google.com/go/iam` from 1.1.2 to 1.1.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/iam/v1.1.2...iam/v1.1.3)

Updates `cloud.google.com/go/kms` from 1.15.2 to 1.15.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/kms/v1.15.2...kms/v1.15.3)

Updates `github.com/Azure/azure-sdk-for-go/sdk/storage/azblob` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/v1.1...v1.2)

Updates `github.com/ClickHouse/clickhouse-go/v2` from 2.14.2 to 2.14.3
- [Release notes](https://github.com/ClickHouse/clickhouse-go/releases)
- [Changelog](https://github.com/ClickHouse/clickhouse-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ClickHouse/clickhouse-go/compare/v2.14.2...v2.14.3)

Updates `github.com/alicebob/miniredis/v2` from 2.30.5 to 2.31.0
- [Release notes](https://github.com/alicebob/miniredis/releases)
- [Changelog](https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md)
- [Commits](https://github.com/alicebob/miniredis/compare/v2.30.5...v2.31.0)

Updates `github.com/andybalholm/brotli` from 1.0.5 to 1.0.6
- [Commits](https://github.com/andybalholm/brotli/compare/v1.0.5...v1.0.6)

Updates `github.com/aws/aws-sdk-go` from 1.45.24 to 1.45.25
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.45.24...v1.45.25)

Updates `github.com/aws/aws-sdk-go-v2` from 1.21.1 to 1.21.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.21.1...v1.21.2)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.18.44 to 1.18.45
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.44...config/v1.18.45)

Updates `github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue` from 1.10.41 to 1.10.42
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/feature/dynamodb/attributevalue/v1.10.41...feature/dynamodb/attributevalue/v1.10.42)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.11.89 to 1.11.90
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/feature/s3/manager/v1.11.89...feature/s3/manager/v1.11.90)

Updates `github.com/aws/aws-sdk-go-v2/service/athena` from 1.31.7 to 1.31.8
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/athena/v1.31.7...service/athena/v1.31.8)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.124.0 to 1.125.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.124.0...service/ec2/v1.125.0)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/v1.17.2/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.17.1...v1.17.2)

Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.30.2 to 1.30.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.30.2...service/s3/v1.30.3)

Updates `github.com/aws/aws-sdk-go-v2/service/glue` from 1.62.1 to 1.63.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/service/ec2/v1.63.0/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/glue/v1.62.1...service/ec2/v1.63.0)

Updates `github.com/aws/aws-sdk-go-v2/service/iam` from 1.22.6 to 1.22.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/fms/v1.22.6...service/fms/v1.22.7)

Updates `github.com/aws/aws-sdk-go-v2/service/rds` from 1.55.2 to 1.56.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/service/ec2/v1.56.0/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/rds/v1.55.2...service/ec2/v1.56.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sns` from 1.22.1 to 1.22.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/service/eks/v1.22.2/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/eks/v1.22.1...service/eks/v1.22.2)

Updates `github.com/aws/aws-sdk-go-v2/service/sqs` from 1.24.6 to 1.24.7
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/fsx/v1.24.6...service/fsx/v1.24.7)

Updates `github.com/elastic/go-elasticsearch/v8` from 8.10.0 to 8.10.1
- [Release notes](https://github.com/elastic/go-elasticsearch/releases)
- [Changelog](https://github.com/elastic/go-elasticsearch/blob/main/CHANGELOG.md)
- [Commits](https://github.com/elastic/go-elasticsearch/compare/v8.10.0...v8.10.1)

Updates `github.com/go-resty/resty/v2` from 2.9.1 to 2.10.0
- [Release notes](https://github.com/go-resty/resty/releases)
- [Commits](https://github.com/go-resty/resty/compare/v2.9.1...v2.10.0)

Updates `google.golang.org/api` from 0.146.0 to 0.147.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.146.0...v0.147.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/compute
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: cloud.google.com/go/container
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: cloud.google.com/go/iam
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: cloud.google.com/go/kms
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/ClickHouse/clickhouse-go/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/alicebob/miniredis/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/andybalholm/brotli
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/dynamodb/attributevalue
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/athena
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/glue
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/iam
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/rds
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sns
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sqs
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/elastic/go-elasticsearch/v8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/go-resty/resty/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-16 15:53:05 +00:00
Marek Smoliński 4ddc6b6d37
Update e (#33517) 2023-10-16 15:11:48 +00:00
Mike Jensen cd34f3b5f8
Update remaining google.golang.org/grpc to v1.57.1 (#33486) 
This are primarily examples, but we still want to update to ensure coverage against CVE-2023-44487.
 2023-10-16 15:08:48 +00:00
rosstimothy 687ad89da5
Gracefully handle web socket closure by clients (#33480) 
Updates the terminal stream to detect when the web socket is closed
by the UI via setting the close handler. This reduces the time it
takes the server to know the client closed the connection from the
value of the keep alive interval in the networking config (default 5m)
to as soon as a user closes the tab. Prior to this any session that
was terminated by closing the browser tab would have an active
session tracker until the web socket ping loop, which runs at the
keep alive interval, failed. Some logging was also cleaned up to
reduce the amount of spam that appears as a result of a session
being terminated by a user.
 2023-10-16 13:05:49 +00:00
Marco André Dinis 4073b303e5
AWS OIDC: Only consider Linux/UNIX when listing EC2 instances (#33198) 
* AWS OIDC: Only consider Linux/UNIX when listing EC2 instances

Listing EC2 instances is part of the EICE flow, where Teleport connects
to the instance's SSH server.
We were returning Windows instances, but those don't have an SSH Server,
thus not compatible with the feature.

This PR adds a new filter to only return Linux/UNIX instances.

* use aws.ToString to check nil strings
 2023-10-16 12:45:15 +00:00
Ryan Clark bc88bc214e
Add nav title & packages for Access Monitoring (#32299) 2023-10-16 10:42:09 +00:00
Marek Smoliński f3545eba3f
Security Reports (#30853) 2023-10-16 10:11:54 +00:00
Noah Stride b620b20865
Allow Bots to submit access request reviews (#33375) 
* Guesstimate towards a solution

* Remove unrelated comment

* Roughly try a different way of supporting this

* Revert line that was necessary to change

* Change signature of exported func to match client

* Fix test invocation

* Add test for Bot reviewing access request

* Fix missing err check in test

* Use single context

* Use client rather than unexported method in test

* Check err before defer
 2023-10-16 09:17:07 +00:00
Rafał Cieślak 0005391fd1
Make initialization of Connect synchronous (#33444) 
This is needed in order to register event listeners for deep linking ASAP
on app start. Otherwise, the app won't be able to handle deep links on
cold start.
 2023-10-16 08:51:48 +00:00
Lisa Kim b8d48e29e1
Update e (#33492) 2023-10-14 01:09:59 +00:00
Jakub Nyckowski 1f38b96843
Include 'nextAuditDate' in 'CreateAccessListReview' method (#33479) 
* Include 'nextAuditDate' in 'CreateAccessListReview' method

The 'CreateAccessListReview' method in the 'AccessListService' and 'Client' interfaces was altered to include the 'nextAuditDate'. The 'nextAuditDate' is now being collected during the review creation process and returned as a part of the result along with the created review.

* Fix test.
 2023-10-13 20:07:24 +00:00
Brian Joerger 129df08ba4
Enable hardware key support in the WebUI (#32781) 
* Add web_session private key policy.

* Add attestation logic for web session.

* Prevent users from retrieving their own web session secrets.

* Update RFD.

* Attest extended web sessions if the original web session was attested.

* Update rfd/0080-hardware-key-support.md

Co-authored-by: Mike Jensen <jentfoo@users.noreply.github.com>

* Fix policy set unit test.

---------

Co-authored-by: Mike Jensen <jentfoo@users.noreply.github.com>
 2023-10-13 19:59:11 +00:00
teleport-post-release-automation[bot] ed169c142d
[auto] Update AMI IDs for 14.0.3 (#33362) 
Co-authored-by: GitHub <noreply@github.com>
 2023-10-13 19:46:32 +00:00
rosstimothy 8905ec1d1f
Implement Create/Update for auth connectors (#33181) 
Updates services.UserService and auth.ClientI to contain the
Create and Update methods for all auth connectors and implements
them at the client, server, and services layer. Upsert was untouched
to prevent breaking e and will be addressed in a follow up PR.

Contributes to #30416.
 2023-10-13 19:32:51 +00:00
Brian Joerger c0b3299de7
Add support for Hardware Key PIN (#31743) 
* Update RFD with hardware key pin policies.

* Consolidate policy logic and update tests.

* Add pin private key policies; Make PIV PIN/Touch prompts work together.

* Prompt user to set pin/puk from default.

* Handle unexpected PIN auth errors.

* Resolve RFD password prompt comment.

* Handle incompatible private key policy in role sets (future-proof).

* Resolve comment on require mfa type string godocs and tests.

* A satisfying change.

* Address PIN/PUK prompt comments and other code suggestions.

* Resolve comments.

* Fix test that prompts for pin twice.

* Fix test.
 2023-10-13 19:07:43 +00:00
rosstimothy f1fd668e55
Automatically forward some spans from tsh to Cloud (#33329) 
Alters the tracing initialization logic such that 50% of all
tsh ssh commands run against Cloud are sampled. Additionally some
of the detectors have been dropped to eliminate any details about
a users machine being included in the attributes.
 2023-10-13 18:55:59 +00:00
Michael 5b85848354
* Use lowercase for sort keys in unified cache (#33470) 
* Manually sort pinned resource requests and update match filter

* Use Text component for not supported message
 2023-10-13 18:43:52 +00:00
Brian Joerger 32be8eccd7
Add user certificates generated prometheus metric. (#33413) 2023-10-13 18:42:29 +00:00
rosstimothy 9d7eed5bcc
Fix Flaky Test Detector (#33471) 
#33403 removed the test-go-libfido2 make target but the flaky test
detector was still trying to invoke it resulting in all runs to fail.
 2023-10-13 18:06:32 +00:00
Michael Wilson 695b4b0ab2
Add a duration for starting notifications to access lists. (#33373) 
* Add a duration for starting notifications to access lists.

A configurable duration has been added to access lists that will determine
when notifications will start being given for access lists that are nearing
to the next audit date. All this does is add the field, it does not yet
specify the exact notification behavior.

* Rename StartNotifications to Start.
 2023-10-13 18:00:24 +00:00
Michael Wilson dc42d07174
Notify CLI users when access lists need reviews. (#33304) 
When logging in via `tsh` or doing a `tsh status`, a message expressing which
access lists need to be reviewed will be displayed along with the amount of
time left until the next review.
 2023-10-13 17:04:59 +00:00
Steven Martin 59cbbb4126
docs:correct fips debug container address (#33422) 2023-10-13 16:16:01 +00:00
Steven Martin 8ab092d5ca
docs: update okta service setup (#33449) 2023-10-13 15:46:51 +00:00
Michael Wilson 9c7d8146d6
Fix user login state gRPC client upsert. (#33347) 
* Fix user login state gRPC client upsert.

The user login state gRPC client's upsert was not including the actual
provided user login state.

* Add user login state gRPC client tests.

* Run GCI.
 2023-10-13 12:54:17 +00:00
Edward Dowling 631e4a35c4
Remove cloud only warning in servicenow docs (#32844) 
* Remove cloud only warning in servicenow docs

* Update forScopes for servicenow plugin doc
 2023-10-13 08:57:03 +00:00
Rafał Cieślak 1ade71fb5f
Show Connect My Computer button in empty state in Connect (#33144) 
* Reformat buttons story away from using spacing on individual elements

* Add support for gap prop to Button

* Fix and expand DocumentCluster stories

* Add info about Discover to empty text in DocumentCluster

* hasConnectMyComputerPermissions: Accept LoggedInUser instead of Cluster

* Refactor getEmptyTableText into two separate functions

This will make it easier to show the Connect My Computer button in the
table with servers.

* Show button for Connect My Computer in empty state

* Show hint about adding resources on separate line

* Do not show resources hint in leaf clusters
 2023-10-13 08:53:32 +00:00
Rafał Cieślak 37b742a602
Update @babel/core to 7.23.2 and dedupe babel deps (#33355) 
* Update Babel to 7.23.2

* Deduplicate packages under @babel scope

npx yarn-deduplicate yarn.lock --scopes @babel

* Deduplicate browserslist and caniuse-lite

* Remove orphaned deps
 2023-10-13 08:42:46 +00:00
Alan Parra 1eee6f352b
Run tagged libfido2 tests on test-go-unit (#33403) 2023-10-13 00:50:48 +00:00
Forrest 5c818458ef
fix oidc test race (#33419) 2023-10-13 00:27:42 +00:00
Zac Bergquist df09eb323d
Add usage events for desktop access (#33051) 
Updates #30417
 2023-10-12 23:50:07 +00:00
Alan Parra e19bfee841
Drop MFARequired TODO (#33418) 
* Drop MFARequired TODO

* Update generated protos
 2023-10-12 21:21:26 +00:00
Lisa Kim b0b2e552e9
Web: add identity management nav section (#33409) 2023-10-12 21:10:13 +00:00
Michael 51721c4e65
Use searchAsRoles in unified requests (#33314) 2023-10-12 20:41:29 +00:00
Yassine Bounekhla 82a0e8fb54
add security group picker to deployservice step (#32885) 2023-10-12 20:21:37 +00:00
dependabot[bot] 639d5d5216
Bump golang.org/x/net in /examples/access-plugin-minimal (#33345) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.8.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 20:19:56 +00:00
dependabot[bot] 874c9a060e
Bump golang.org/x/net from 0.8.0 to 0.17.0 in /examples/api-sync-roles (#33343) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.8.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 20:05:45 +00:00
dependabot[bot] ca7174a4bc
Bump golang.org/x/net in /examples/service-discovery-api-client (#33342) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.8.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 19:54:14 +00:00
dependabot[bot] 6ef35ed620
Bump golang.org/x/net from 0.7.0 to 0.17.0 in /examples/go-client (#33341) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 19:54:10 +00:00
Alan Parra 13d326e1eb
Move lib/client MFA issuance to GenerateUserCerts (#33305) 
* Update ClusterClient to use GenerateUserCerts

* Refactor performMFACeremony into a plain func

* Move IssueUserCertsWithMFA to performMFACeremony

* Address linter issues, handle errors
 2023-10-12 19:25:21 +00:00
dependabot[bot] 26bceaf766
Bump golang.org/x/net in /examples/desktop-registration (#33346) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.7.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.7.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-12 19:22:21 +00:00
Michael ab0e1d24de
Add resource pinning to Unified Resource cards (#32980) 
* parent b905eaf472
author Michael Myers <michael.myers@goteleport.com> 1694885352 -0500
committer Michael Myers <michael.myers@goteleport.com> 1696979801 -0500
gpgsig -----BEGIN PGP SIGNATURE-----

 iQGzBAABCAAdFiEETMffNTGCRZBrrPo/svAculE8l1QFAmUl21kACgkQsvAculE8
 l1Qn3wwAjHFOvII2t68vDH4HD93nX3vxSDED9DLgjjFSCjklKTuWVC9Vxb+vO4kL
 XrbZxQiEN/Q10Z5DSXB1scn6SP2kgk9Ae2TMfZJskTMd9hLhZJVuhwzAW4/brj9t
 3zIW4k7uBQF2sCGN7aG8+sSuNl43lacaJDN550MuGZwagRrgXXNDyNUdn7AzULVX
 PcMyKrcp5kuN+uWIRb7z1ZJR+s4m1wyI1MoX8ikUrBdWwk6bTFFXM3TvxFCtNb2j
 8+ILDFWJ6HZ0k9Sx2ExQAbN9M76BQcWqE06BhuLQ9UTUIbw0pmk2j/DjlaOlZhjF
 LlHEjM8se3rO7Gqy5Kj1lPs6j3AIwUqfhEwE9pWRl10P1oCxv47MHhs9jfZFkihl
 yWUm7ey1Un36wl46F3/POdT4Fzf0PwavCRogcMIUo5J6xqKM47C3jY8szjympeJW
 lp7g0nvNhvgbGE0kW2FZQFmuQfZdGtiZ6gVPeIER9cKwJYWtiEOURqd6/R99j+q8
 29I8CwLA
 =qgBc
 -----END PGP SIGNATURE-----
Add pinned resources to the web UI

* Fix merge conflict

* Add abort controller

* Use local abort controller

* Fix lint and stories

* Show loading cards on cluster preferences attempt

* Replace clusterPrefs with useCallbacks

* Add pinning disabled state

* Fix lint

* Remove unneeded useCallback

* Remove not_supported flag if prefs exist in cache

* Show pinned resources error if not supported
 2023-10-12 19:07:37 +00:00
STeve (Xin) Huang 103dd6e7b5
Fix an issue tsh fails to connect Proxy behind TLS-terminated loadbalancer in separate port mode (#33374) 2023-10-12 18:33:15 +00:00
lsgunn-teleport 891356e5d6
docs: Add timing for automatic agent updates to the cloud FAQ (#33177) 
* Add agent updates follow the cluster upgrade to the FAQ

* Revise maintenance window start time topic

* Edit the upgrade topics

* Modify auto update information for cluster services and agents

* Fix link to agent update enrollment

* Revise cluster and agent Upgrade > Update FAQs

* Fix update typo
 2023-10-12 18:19:48 +00:00
lsgunn-teleport 33b2ae621c
docs: Reorganize and revise moderated sessions (#32420) 
* Get revision for moderated sessions into the 15.x directory

* Add backticks and < > around mode

* Add keywords

* Fix typo

* remove extraneous line

* Update connect your client with changes related to moderated sessions

* updates from Zac's review

* fix typo

* fix typo

* You can only require session moderation using Enterprise editions

* Clarify the Teleport Enterprise requirement

* Add paragraph about role mapping and moderated sessions

* updates from Paul's review

* updates from Paul's review-2

* Replace caveat about join_sessions/deny rules
 2023-10-12 18:11:38 +00:00
lsgunn-teleport 10939c465c
Add Docker to Slack access request plugin (#33330) 2023-10-12 17:56:51 +00:00
lsgunn-teleport 29268d3da2
Add Docker to Mattermost plugin (#33328) 2023-10-12 17:56:28 +00:00
lsgunn-teleport 7e3738bac2
Add Docker to MSFT teams plugin (#33326) 2023-10-12 17:55:52 +00:00
lsgunn-teleport b55703cfaa
Fix a couple of typos and reword scenario descriptions (#33318) 2023-10-12 17:55:24 +00:00
STeve (Xin) Huang c48753b624
[docs] clarify RDS/Aurora databases getting modified (#33312) 2023-10-12 17:48:03 +00:00
Lisa Kim 74bb29878b
Fix access list audit log formatting (#33344) 
* Fix access list audit log formatting

* Address CR
 2023-10-12 17:45:04 +00:00