* MCP: Remove all non-lowercase name params from tools/call request
* Change processRequest signature to return mutated request
* Mutate request only when necessary + add "method" and "params"
* Sanitize more fields which can lead to a confused upstream
* Liter & fixes
* Drain the request body just in case before overwriting
Mirror the web UI's filtering by accepting a repeatable flags. And
adding the `--filter` as an envelope that allows combining filters
(AND semantics). Multiple distinct flag filters are OR'ed together.
* Fix areas where Go version is static where it could be automatic.
Signed-off-by: Chris Thach <[email protected]>
* Revert Dockerfile.
Signed-off-by: Chris Thach <[email protected]>
* Revert build.assets/arch.mk.
---------
Signed-off-by: Chris Thach <[email protected]>
Closes#67534
Fix the preamble to the list of services to include the correct count.
Make it clear that the list of three services refers to the services
deployed for the getting started guide. Use the terms control plane vs.
Teleport Agent service to indicate which aspects of the starter cluster
belong to a Teleport cluster in general.
* Embedded Enroll.xcframework building into the main Xcode build
* Remove xcframework generation from Makefile
Now that Enroll.xcframework is built as part of the Xcode build, we no
longer need to maintain a separate step to build it manually.
* Add a README file with basic instructions on how to integrate Swift with Go packages
* Disable user script sandboxing
This ensures that our build scripts can read/write whatever files
necessary. In particular, this avoids issues when building xcframeworks
with `gomobile` that may touch files not declared in your file inputs.
* Fix typo in build-enroll-framework.sh
* Update build-enroll-framework.sh to call `gomobile` via `go tool`
* Resolve shellcheck lint failure SC2155
* add dns diagnostic check proto
* add DNSServerSuffix and DNSServerPort constants
* handle dns diagnostic probe queries
* add dns diagnostic check
* enable dns diagnostic check in Connect
* run dns diagnostic check in tsh vnet
* render dns diagnostic check in Connect
* fix some nits
* move ssh diag check after dns check
* handle dns diagnostic probe A queries
* add dns diagnostic check proto for A queries
* refactor dns diagnostic check to also check A records
* refactor Connect to also render dns diagnostic A records
* drop trailing dot from dns diag probe
* add tests for dns diag text rendering
* do not fail dns diag if any nameserver is reachable
* Adjust spacing between DNS diag success/warning rows
* fix some nits
* improve rendering of dns reachability errors
---------
Co-authored-by: Maja Cieślak <[email protected]>
* Add audit event for Classifier delete, docs, and web UI support
* Add failure code for the Classifier delete audit event
* Add web UI and docs support for Classifier audit failure codes
* Add Terraform schema for the Classifier resource
* Regenerate Classifier Terraform schema for tri-state action enums
* Add audit event for Classifier delete, docs, and web UI support
* Add failure code for the Classifier delete audit event
* Add web UI and docs support for Classifier audit failure codes
* Add OSS preamble to file header template
* Apply automatic project file changes from using Xcode 26.5
* Update Verify project files to generate symbols for string catalog entries
* Improve formatting of template file header to reduce extra whitespace
* Update file header to automatically use the current year
* Add audit events for Classifier create and update
* Add failure codes for Classifier create and update audit events
* Add web UI and docs support for Classifier create and update audit events
* Attach parties to ServerContext rather than the full session and only after completing authz checks.
* Restrict forced termination to moderators.
* Move force termination auth check to term handlers.
* Ensure failed session cleanup.
* Generate Xcode project for Verify
* Set Swift version to 6; remove macOS and Vision as destinations
* Handle `teleport://` links and add enrollment screen
* Avoid building macOS-specific stuff on iOS
This is needed for gomobile to build our stuff from lib/mobile from the
next commit.
* Add `lib/mobile/verify/enroll` compiled with gomobile
* `lib/mobile`: Temporarily use private Device Trust service
The public gRPC service exists on the demo branch but not on this
branch. In order to make it possible to compile
`lib/mobile/verify/enroll`, temporarily use the private service which
has similar RPCs.
* Run `make go-mod-tidy-all`
* Make Swift app connect to public DT service on "Request Now" tap
* mobile: Add sheet for enroll request status
* Revert go.mod changes
This reverts commit b9af7a7614 and
2c00ecd7fa.
* Add `build.assets/tools/gomobile`
* Move gomobile back to main go.mod
This reverts commits 9b2a6c4ea3 and
a83c2959fa.
Continues the work from the previous batch (#67674).
We are standardizing docs guides to add a `page_type` frontmatter field,
with values for how-to guides, references, etc. We can then use this
field to apply linting rules that ensure each guide type follows
type-specific docs site conventions. The first convention is that each
docs page must have an outcome statement, the structure of which depends
on the guide's type. Human and AI agent readers can determine from the
outcome statement whether to continue reading the guide or not.
This change assigns the `page_type` frontmatter field to 46 guides.
Where an outcome statement is missing, it adds one. Where an outcome
statement exists, it ensures that the statement matches the standard
structure so we can add a linter later on.
Of the 46 guides:
- 12 guides already included the expected outcome statement, but needed
a `page_type` frontmatter field.
- 19 guides included an outcome statement but required minor tweaks so
they followed the expected structure.
- 15 guides had no outcome statement at all.
check manager for kube service, and porting
GetClusterNetworkingConfig, GetClusterName, InventoryControlStream,
WatchEvents, and GetSessionRecordingConfig RPCs
* - Update Proxy to send 'second_factors' instead of 'second_factor' to the WebUI, with backwards compatiblity logic.
- Use new 'second_factors' field to accurately determine if Admin MFA is required; Fallback to prompting for a challenge if 'second_factors' is unset.
* Mock getMfaChallengeResponseForAdminAction in tests.
* Validate sessionID as UUID.
* Prevent desktop session player from leaking backend details through error messages. Add tests to validate that backend/internal errors are masked.
* Log an error when we fail to write an internall error message to the client during playback.
* Coerce sID parameter to canonical form
* session package already has a parse method. Let's use that.
* Remove incorrect copy-pasted comment
* Export 'Fakestreamer' type for ease of use.
* fix flaky test
This pulls in the latest OCI SDK in order to interact
with recently introduced regions.
This includes the following regions:
- ap-kulai-2
- sa-riodejaneiro-1
- af-casablanca-1
- me-alrayyan-1
* Add Classifier backend storage, cache, gRPC service, and tctl support
* Fix formatting in lib/services/summarizer_test.go
* Replace Cache.AllClassifiers with RangeClassifiers using genericLister
* Validate that the filter is a boolean expression
* Code review fixes: sync test, range fallback
Closes#67378
Clarify the relationship between Teleport Community Edition and
CLI-based Access Request creation:
- In the Access Requests landing page and OSS Role Requests page,
indicate that using `tsh` is available to all editions, but add an
explicit recommendation for using plugins.
- In Role Requests, indicate that the CLI is also an option for creating
Access Requests. Link to CLI reference guide entries for relevant
commands rather than the OSS Guide.
Note that, while the issue also calls for a link to the Single Machine
guide from the Enterprise section, self-hosting Teleport Enterprise on a
single machine is not the recommend approach, so this change does not
address this request.
* Added new icons and matching rules
* Added DB matching rules for redis and oracle
* Deleted outdated redshift and dynamo icons
Deleted outdated and extraneous DynamoDB and Redshift icons and reassigned icon names to the latest icons shown in the AWS console.
* Split solveintelligence across lines
Too long to pass the linter!
* Validate the client's JSON playback commands during unmarshalling. Improve playback tests to validate that invalid commands are rejected.
* Use trace instead of errors
* Rename PlayRecording -> SteamRecording
* Separate unmarshal and validation steps
* Validate -> Coerce
Grzegorz Zdunek