Brian Joerger 48dc80cf15 MFA for admin actions: Add server side check (#33676) ... * Add method to check MFA challenge response for admin actions. * Add tests. * Move AuthorizeAdminAction to authz package. Add ValidateMFAAuthResponse as a dependency for the authorizer. Update tests to include a mock ValidateMFAAuthResponse method. * Resolve comments.		2023-11-16 21:30:24 +00:00
..
agentless	Update users interface (#32987)	2023-10-10 14:07:46 +00:00
ai	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
asciitable	chore: Bump golang.org/x/exp and fix breakages (#30439)	2023-08-14 18:29:48 +00:00
assist	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
auditd
auth	MFA for admin actions: Add server side check (#33676)	2023-11-16 21:30:24 +00:00
authz	MFA for admin actions: Add server side check (#33676)	2023-11-16 21:30:24 +00:00
automaticupgrades	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
backend	Disable AWS IMDSv1 fallback and enforce use of FIPS endpoints (#34170)	2023-11-09 21:53:25 +00:00
benchmark	Fix non-interactive kube benchmark (#31591)	2023-10-17 08:32:16 +00:00
bpf	Apply various small BPF refactors (#31977)	2023-09-15 21:33:03 +00:00
cache	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
cgroup	Careful handling when loading files (#31721)	2023-09-15 14:44:31 +00:00
circleci
client	Fix piv slot overridden by server settings. (#34349)	2023-11-14 17:47:09 +00:00
cloud	Prevent AKS discovery from panicking if group claim is missing (#34609)	2023-11-16 17:35:37 +00:00
config	TAG initial implementation (#34541)	2023-11-13 22:46:17 +00:00
configurators	Disable AWS IMDSv1 fallback and enforce use of FIPS endpoints (#34170)	2023-11-09 21:53:25 +00:00
darwin
defaults	Fix headless login timing out prematurely (#34163)	2023-11-03 16:29:17 +00:00
devicetrust	Collect device data concurrently on Linux (#34602)	2023-11-16 14:20:57 +00:00
events	feat: enable External Cloud Audit backend (#34606)	2023-11-16 00:53:27 +00:00
fixtures	Fix SAML certificate decoding when data is padded (#30372)	2023-08-14 16:21:44 +00:00
gcp	Support GCP joining when google claim is not present (#28651)	2023-07-06 12:20:22 +00:00
githubactions	This change adds validation for ID tokens generated for GCP VMs. (#24492)	2023-05-03 19:06:54 +00:00
gitlab	Machine ID: More rules to gitlab joining and add globby matching to some fields (#34290)	2023-11-09 16:52:04 +00:00
httplib	Prevent SSO Redirects to other origins (#33853)	2023-10-31 15:24:47 +00:00
integrations	feat: enable External Cloud Audit backend (#34606)	2023-11-16 00:53:27 +00:00
inventory	variable rate instance heartbeats (#33871)	2023-11-16 01:36:15 +00:00
joinserver	Add gRPC error interceptors to API client (#30578)	2023-08-24 23:27:06 +00:00
jwt	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
kube	Reduce TestDatabaseServerAutoDisconnect flakiness (#34060)	2023-11-16 12:59:18 +00:00
kubernetestoken	Kubernetes External Joining: static_jwks implementation (#30225)	2023-09-11 10:58:27 +00:00
labels	Use maps.{Clone,Copy} instead of manual loops (#34318)	2023-11-08 14:41:31 +00:00
limiter	Teleport Proxy Behind ALB support for IP Pinning (#26623)	2023-06-28 13:09:24 +00:00
linux	Collect device data concurrently on Linux (#34602)	2023-11-16 14:20:57 +00:00
loginrule	add list of applied login rules to user login event (#26460)	2023-05-17 18:43:50 +00:00
loglimit	Deduplicate multiplexer detection errors over 1-minute windows (#20694)	2023-03-08 20:32:44 +00:00
modules	Proxy TAG requests through Auth (#34642)	2023-11-16 18:08:37 +00:00
multiplexer	Fix PROXY protocol handling of dedicated kube listener with TLS routing (#34317)	2023-11-15 20:36:23 +00:00
observability	Bump the go group with 32 updates (#34527)	2023-11-13 18:57:32 +00:00
openssh	Add certificate rotation to teleport openssh join oneshot command (#24194)	2023-05-22 12:22:37 +00:00
pam	pam: free conversation buffer on error (#30466)	2023-08-15 21:22:30 +00:00
player	Convert the desktop sesssion player to the new player API (#34070)	2023-11-09 23:46:01 +00:00
plugin	Security Reports (#30853)	2023-10-16 10:11:54 +00:00
proxy	Limit GRPC Active streams (#33936)	2023-10-27 15:26:07 +00:00
puttyhosts	tsh: Add support for host:port combinations to tsh puttyconfig (#33518)	2023-10-20 19:44:06 +00:00
release	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
resourceusage	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
restrictedsession	Fuzz Test Improvements 3 (#30576)	2023-08-17 14:55:15 +00:00
reversetunnel	feat: cached auto-refreshing AWS credentials for BYOBucket (#34380)	2023-11-14 20:16:14 +00:00
reversetunnelclient	Track user connections across clusters (#32688)	2023-10-04 15:35:11 +00:00
secret
service	improve test cov for auth caches (#33939)	2023-11-16 18:42:58 +00:00
services	Proxy TAG requests through Auth (#34642)	2023-11-16 18:08:37 +00:00
session	Add initial command to session trackers (#32947)	2023-10-07 20:25:18 +00:00
shell	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
srv	Reduce TestDatabaseServerAutoDisconnect flakiness (#34060)	2023-11-16 12:59:18 +00:00
sshca
sshutils	Fix incorrect permissions for X11 Unix socket (#34613)	2023-11-15 14:27:09 +00:00
system	Refactor tctl's dependencies (#22693)	2023-03-09 17:48:36 +00:00
tbot	Fix data race in file descriptors (#34183)	2023-11-11 02:49:36 +00:00
teleagent	utils.RecursiveChown: Fix for Privilege Escalation due to following symlinks (#33244)	2023-10-10 21:32:19 +00:00
teleterm	Make MFA prompt client agnostic (#34087)	2023-11-09 18:14:12 +00:00
tlsca	Add Hardware Key login audit event fields (#33254)	2023-10-16 19:48:11 +00:00
usagereporter	Add TAG query usage event (#34386)	2023-11-14 02:31:30 +00:00
utils	variable rate instance heartbeats (#33871)	2023-11-16 01:36:15 +00:00
versioncontrol	Enable testify lint (#34222)	2023-11-06 20:38:38 +00:00
web	Proxy TAG requests through Auth (#34642)	2023-11-16 18:08:37 +00:00
windowsexec	Device Trust: tsh privilege elevation for TPM enrollment (#27833)	2023-06-16 17:35:03 +00:00
runtimeflags.go