* Add `mobile_device` kind for `mobile_device.create_enroll_token` permission
* Update preset-roles.json
* Add `mobile_device.create_enroll_token` to user ACL
* Make boombuler/barcode a direct dep
It's used in teleport.e to generate the QR code that's going to be
consumed by the mobile app.
* Enable defaultAllowRules to return roles which need `buildType`
* Backfill device-admin role
* Add `mobile_device.create_enroll_token` to admin role
* Resize RDP images in Rust instead of Go
* go mod tidy all
* cargo fmt
* Add tests
* Remove unused Thumbnail()
* Change ResizeCrop() to return an error
* Avoid hard-coding the bytes per pixel
* Release resources in tests
* Clamp dimensions to at least 1x1
* Add x/image to e_imports
* Fix linting
* Fold resize options and crop bounds check into resize_crop_into
* Run cargo fetch
The library has had a number of CVEs recently and uses shady
dependencies. https://github.com/gravitational/teleport.e/pull/8513
removed the dependency pulled in via teleport.e. This updates the
e_imports.go to reflect that change which moved buger/jsonparser to
an indirect dependency.
To remove the dependency entirely, mark3labs/mcp-go was updated to
the latest version. In that version they have replaced
github.com/invopop/jsonschema, which brough in buger/jsonparser,
with github.com/google/jsonschema-go. As a result buger/jsonparser
is no longer in our dependency tree.
* Add support for Bedrock models to the session summarizer
- Add protocol buffers
- Add validation
- Add dependency on Bedrock SDK
- Move GenerateTestSession to the OSS code
* Tidy up the go.mod file
* Enable/disable Bedrock on the auth server level
* Add bedrockruntime to e_imports, rerun mod-tidy-all
* Add a comment to GetModules()
* Revert e/ change
* Add jsonpath parser for user attributes.
* Included unmapped claims in login rule evaluation.
* Add TestJSONPath.
* Add better error message for jsonpath errors.
* Make jsonpath return nil instead of error for non-json values.
* Pass unmapped claims to loginrule evaluation as a separate env variable.
* Remove jsonpath function from the default parser and add opts for parsers to provide custom localized express functions.
* Update comment
* Remove ExpressionParserOpts.
* Move JSONPath fn to /e.
* Remove unnecessary changes.
* Configuration resources for the session summarizer
* Review
* OSS layer of the session summarizer
- The backend service
- A stub gRPC service which communicates that the feature is only
available in Enterprise
- e_imports statement that adds an OpenAI client that will be used by
the enterprise build
- Necessary wiring that allows `ProtoStream` instances to notify
listeners about upload completion; the accompanying enterprise change
will use it for triggering summarization
* review
* review
* Rename the resources
* Rename the resources
* Review
* go mod tidy
* lint
* Add response messages
* Add return types to the gRPC server
* Split out the resources gRPC service from summarizer
* Fix CI issues
* Add some comments, fix existing ones
* Remove unnecessary e/ change
* Fix broken lint
* Replace summarizer wrapper with summarizer provider
This fixes a minor race condition, adds some missing unit tests, and
hopefully reduces confusion about the entire concept.
* Fix license and import order
* review
* Clean up tests
* Review
Move code around, switch from atomic pointer to a mutex in the
summarizer provider.
* Fix stream_test
* Review
* Narrow down the number of event types accepted by Summarizer
* Fix tests
* Review
* Review: some renamings
* Convert autoupdate version handling to coreos/go-semver
* get the right version in installer endpoint + get rid of x/mod/semver
* depguard x/mod/semver
* Add nolint rules for existing x/mod/semver usages
* Add depguard explanation
After deprecation of `github.com/xanzy/go-gitlab` in favour of
`gitlab.com/gitlab-org/api/client-go`, this PR drops the direct
dependency from Teleport module. The dependency is still indirect
because it's imported by `cosign`. Hopefully in future versions, the
dependency will be updated and fully removed.
Signed-off-by: Tiago Silva <[email protected]>
Gitlab moved the golang client under its organization and deprecated
`github.com/xanzy/go-gitlab` in favour of
`gitlab.com/gitlab-org/api/client-go`. The codebase is the same and it's
a pure fork of the original client but it's now controlled by Gitlab.
Signed-off-by: Tiago Silva <[email protected]>
* new aws-sdk-go-v2 deps:
- github.com/aws/aws-sdk-go-v2/service/organizations
- github.com/aws/aws-sdk-go-v2/service/identitystore
- github.com/aws/aws-sdk-go-v2/service/ssoadmin
* re-do go get and go mod tidy
* group aws-sdk-go-v2 deps
* temp:update e-ref
* udpate e-imports
* e_imports.go 2
* re-re-re go mod tidy inside integrations
---------
Co-authored-by: Marek Smoliński <[email protected]>
The teleport.e repo was recently converted to log exclusively with
slog. In order to prevent logrus from accidentally being reintroduced
into teleport.e the logrus depguard rule was updated to include
the e repo. Additionally the e_imports.go file was updated to reflect
that logrus is no longer required.
* Adds AWS SDK dependencies for Identity Center Integration
* Terraform mod tidy
* Event handler mod tidy
* Protect updates from `go mod tidy`
* Re-tidy integrations
* Add e imports for MS Graph SDK
* Add ability to sign Entra ID OIDC JWTs, rework KID handling
- Synthesize Key IDs for our JWT keys. For backwards compatibility, also
include the same keys with an empty `kid` in JWKS.
- Sign AWS OIDC tokens with a `kid=""` header claim,
rather than omitting the `kid` claim altogether.
See comment for details.
* Add validation for Entra ID plugin
* Fix typo in assertion function name
* Update the OIDC JWKS test to expect the same key twice
* Add Entra ID plugin type constant
* go mod tidy
* Fix expected JWKS size in integration test
* Add basic tests for KeyID
* Move Azure auth settings from Plugin to Integration
* Address review comments
* Add a unit test to ensure KeyID compatibility
* Add license header to token_generator.go
* Rename validation function per new conventions
* Update cloudflare/cfssl in order to fix enterprise builds
We now depend on cloudflare/cfssl transitively via
gravitational/license. The cfssl repo itself has a dependency on
zmap/zlint, which is outdated and doesn't build on newer versions
of Go:
# github.com/zmap/zlint/util
../../../go/pkg/mod/github.com/zmap/[email protected]/util/encodings.go:38:24: cannot use atv.Type (variable of type "github.com/zmap/zcrypto/encoding/asn1".ObjectIdentifier) as "encoding/asn1".ObjectIdentifier value in argument to IsNameAttribute
../../../go/pkg/mod/github.com/zmap/[email protected]/util/oid.go:136:16: cannot use v.Type (variable of type "github.com/zmap/zcrypto/encoding/asn1".ObjectIdentifier) as "encoding/asn1".ObjectIdentifier value in argument to oid.Equal
The fix is to upgrade cfssl to a version that uses a newer version of
zlint. Cloud team resolved a similar issue in the past:
https://github.com/gravitational/cloud/pull/3805#discussion_r1143909550
* fix2
* deps update
This also includes e_imports from gravitational/teleport.e#3114
* gci
* new tag for e_imports, tpmsimulator
---------
Co-authored-by: Edoardo Spadolini <[email protected]>
Prefer the stdlib version of the experimental package.
Includes a depguard update to prevent future regressions,
as well as an e-ref update to appease depguard.
Generated with:
$ gofmt -w -r '"golang.org/x/exp/slices" -> "slices"' . && \
make fix-imports
* Proto and Go module changes for Windows TPM support
* Obligatory `go mod tidy` && `make fix-imports`
* Godocs for proto conversion methods
* Move dependencies to main indirect block
* Handle nil more gracefully
* (wip) add unlock feature button to support page
* Fix typo
* (wip) add locked feature join session
* Improve session join style
* Add session join lock button
* Remove hover on locked join menu
* Update copy
* Only show `join as...` when appropriate
* (wip)
* Make ButtonLockedFeature theme sensitive
* Remove debug stuff
* Adjust feature button height
* Fix session join button on locked
* Remove unused import
* typo
* Add link to cta button
* Remove teams flag
* Add cta service
* Update snapshots
* Lock button style
* Add cta to context
* Rename cta to ctaService
* Stories and tests
* Add comments clarifying that ctas are not used currently
* add showActiveSessionsCTA to useSessions
* Licenses
* Lint license
* Remove commented out code
* Add missing types
* Replace cta service for an object with cta on context
* Fix menu hack
* small refactor in styled stuff
* Update SessionJoinBtn to use master code
* Snapshot update
* Add events to cta clicks
* rebase
* revert e ref update
* Revert e change
* Update proto message to start at 1
* Use enum from proto files instead of rewriting
* Improve comments on usageevents.proto cta enum
* Fix import
* Fix type errs
* Add comments
* Rename CtaEvents > CtaEvent
* Copy the CtaEvent enum instead of importing from proto
* Add back blank line
* Fix import order
* Update proto files
* Add TODO comment
* Delete teleterm's ptyHost/v1, added by mistake
* Add package name to protos conforming to PACKAGE_VERSION_SUFFIX
* use go run in buf-connect-go.gen.yaml directly
* Run protogen in place
* Run the buf-go generation off of go run
This also adds protoc-gen-go-grpc to go.mod
* Add GetType() to Plugin
* Add Plugins feature flag to web
* Run prettier
* Update e_imports.go with slack plugin subpackage
Respective enterprise changes imports a new subpackage,
which pulls new dependencies.
* Move configuration from lib/service to lib/service/servicecfg
The new servicecfg package will hold only configuration for services.
This will allow other packages (like tctl and tsh) to depend on
servicecfg without pulling in all of lib/service (which has a number
of platform-specific details).
This is the first step towards being able to build tctl for Windows.
* Move PAM and BPF config into servicecfg
This breaks a compile-time dependency on BPF/PAM for tctl.
Maja Cieślak