teleport/lib
Tiago Silva 61e04e0f2e
Fix remote pool of signed certs when exec into leaf clusters (#32644)
* Fix remote pool of signed certs when exec into leaf clusters

This PR fixes the list of acceptable CAs from the leaf cluster when
exec into a leaf cluster pod.

Fixes #32380

Signed-off-by: Tiago Silva <tiago.silva@goteleport.com>

* add unit test

---------

Signed-off-by: Tiago Silva <tiago.silva@goteleport.com>
2023-09-28 17:55:11 +00:00
..
agentless fix connecting to agentless leaf nodes (#25206) 2023-05-02 17:39:47 +00:00
ai always generate request IDs server-side (#31760) 2023-09-13 16:08:11 +00:00
asciitable chore: Bump golang.org/x/exp and fix breakages (#30439) 2023-08-14 18:29:48 +00:00
assist Add the ability to run a specific tool to Assist. (#31113) 2023-08-31 20:38:32 +00:00
auditd Do not return error from Auditd when process lacks privileges (#17319) 2022-10-17 18:27:24 +00:00
auth Allow MFA deletion using challenges (#32702) 2023-09-28 16:53:51 +00:00
authz Propagate resource revision to/from the backend (#32040) 2023-09-26 16:58:04 +00:00
automaticupgrades EC2 Instance Connect Endpoint: List EC2 Instances (#29366) 2023-08-10 11:26:10 +00:00
backend Error when redundant prefixes are detected in events. (#32652) 2023-09-27 20:05:04 +00:00
benchmark Fix tsh bench postgres not being able to connect to databases (#31104) 2023-08-30 11:51:03 +00:00
bpf Apply various small BPF refactors (#31977) 2023-09-15 21:33:03 +00:00
cache Fix Access List Members cache and eventing. (#32619) 2023-09-27 13:04:52 +00:00
cgroup Careful handling when loading files (#31721) 2023-09-15 14:44:31 +00:00
circleci Add InstanceJoin/BotJoin audit events (#19044) 2022-12-13 17:04:15 +00:00
client Use Proxy gRPC API during log in (#32388) 2023-09-27 11:16:40 +00:00
cloud Fix bugs with GCP project ID + default installer (#31853) 2023-09-21 00:27:17 +00:00
config Implement waiting for Connect My Computer node to join cluster (#30905) 2023-09-21 11:43:10 +00:00
configurators Use the regions in teleport config instead of ENV for bootstrap (#31401) 2023-09-11 10:44:51 +00:00
darwin Implement macOS device enrollment methods (#19079) 2022-12-07 18:11:21 +00:00
defaults Implement waiting for Connect My Computer node to join cluster (#30905) 2023-09-21 11:43:10 +00:00
devicetrust fix: Fix panic on tsh device enroll --current-device (#32694) 2023-09-28 13:56:46 +00:00
events Remove unused bot_token.create event (#31944) 2023-09-15 16:04:45 +00:00
fixtures Fix SAML certificate decoding when data is padded (#30372) 2023-08-14 16:21:44 +00:00
gcp Support GCP joining when google claim is not present (#28651) 2023-07-06 12:20:22 +00:00
githubactions This change adds validation for ID tokens generated for GCP VMs. (#24492) 2023-05-03 19:06:54 +00:00
gitlab This change adds validation for ID tokens generated for GCP VMs. (#24492) 2023-05-03 19:06:54 +00:00
httplib Fix duplicate entry for X-Forwarded-For header (#32039) 2023-09-18 19:21:41 +00:00
integrations/awsoidc move aws region selector to shared and add types and endpoints (#31179) 2023-09-18 18:36:01 +00:00
inventory Support AWS EC2 IMDSv2 for installer and inventory metadata (#30940) 2023-08-29 08:44:54 +00:00
joinserver Add gRPC error interceptors to API client (#30578) 2023-08-24 23:27:06 +00:00
jwt Add option to configure JWT claim rewriting (#29687) 2023-08-08 10:30:27 +00:00
kube Fix remote pool of signed certs when exec into leaf clusters (#32644) 2023-09-28 17:55:11 +00:00
kubernetestoken Kubernetes External Joining: static_jwks implementation (#30225) 2023-09-11 10:58:27 +00:00
labels Upsert ServerInfos from discovery service (#27475) 2023-07-12 23:56:32 +00:00
limiter Teleport Proxy Behind ALB support for IP Pinning (#26623) 2023-06-28 13:09:24 +00:00
loginrule add list of applied login rules to user login event (#26460) 2023-05-17 18:43:50 +00:00
loglimit Deduplicate multiplexer detection errors over 1-minute windows (#20694) 2023-03-08 20:32:44 +00:00
modules Generate access list allowed promotions on access request creation (#31768) 2023-09-22 19:34:32 +00:00
multiplexer Add connection information to multiplexer logs so it's easier to investigate (#32712) 2023-09-28 14:52:21 +00:00
observability Bump go.opentelemetry.io/otel/sdk from 1.16.0 to 1.17.0 (#31185) 2023-09-05 18:29:45 +00:00
openssh Add certificate rotation to teleport openssh join oneshot command (#24194) 2023-05-22 12:22:37 +00:00
pam pam: free conversation buffer on error (#30466) 2023-08-15 21:22:30 +00:00
plugin Prevent duplicate service registration (#32050) 2023-09-18 16:02:09 +00:00
proxy Dont allow directly dialing to servers not in inventory (#30323) 2023-08-29 11:52:55 +00:00
puttyhosts tsh: Implement puttyconfig command to add saved PuTTY sessions to Windows registry (#19316) 2023-07-05 17:53:46 +00:00
release Add ListReleases and GetLicense endpoints (#19565) 2023-01-03 12:52:22 +00:00
resourceusage Enable limited Access Requests feature for the Team plan (#29866) 2023-08-16 17:20:34 +00:00
restrictedsession Fuzz Test Improvements 3 (#30576) 2023-08-17 14:55:15 +00:00
reversetunnel Drain unused SSH channels (#32505) 2023-09-27 17:05:48 +00:00
reversetunnelclient Use Amazon EICE to connect into EC2 instances (#30632) 2023-08-24 16:38:51 +00:00
secret Enable GCI linter (#17894) 2022-10-28 20:20:28 +00:00
service Fix usage of ClusterName from config when starting Auth server (#32624) 2023-09-27 17:42:51 +00:00
services Error when redundant prefixes are detected in events. (#32652) 2023-09-27 20:05:04 +00:00
session Fixed typo in error message for terminal params (#31219) 2023-08-31 14:49:29 +00:00
shell Enable GCI linter (#17894) 2022-10-28 20:20:28 +00:00
srv Drain unused SSH channels (#32505) 2023-09-27 17:05:48 +00:00
sshca Fixes dissonance between disconnect_expired_cert vs require_session_mfa (#18607) 2022-12-07 17:00:38 +00:00
sshutils Drain unused SSH channels (#32505) 2023-09-27 17:05:48 +00:00
system Refactor tctl's dependencies (#22693) 2023-03-09 17:48:36 +00:00
tbot support discovered name match in tbot outputs (#32108) 2023-09-19 18:01:11 +00:00
teleagent Enable GCI linter (#17894) 2022-10-28 20:20:28 +00:00
teleterm Add promoted access list title to teleterm access request (#32708) 2023-09-28 06:13:12 +00:00
tlsca Have hardware_key_touch count towards MFA verification instead of replacing the normal MFA verification flow. (#31663) 2023-09-18 16:47:34 +00:00
usagereporter Add Access List usage events, emit event for userloginstate Generator. (#32196) 2023-09-21 13:15:36 +00:00
utils Move lib/utils/prompt to api/utils/prompt (#32334) 2023-09-25 19:31:37 +00:00
versioncontrol don't delete unit schedule file (#24631) 2023-05-09 18:17:52 +00:00
web add eice discover flow (#32202) 2023-09-28 16:38:26 +00:00
windowsexec Device Trust: tsh privilege elevation for TPM enrollment (#27833) 2023-06-16 17:35:03 +00:00
runtimeflags.go