Commit Graph
1166 Commits
Author SHA1 Message Date
Steven Martin 522ca48f06 Fix example README links to docs (#65139) 2026-04-15 12:25:31 +00:00
Noah Stride 591bfc8e2f Support enterprise/enterprise_id in github join method (#65655)
* Support enterprise_id/enterprise in gha

* Update various IaC

* Update reference

* Add explicit warning to docs and update reflect_legacy_test
2026-04-13 12:10:42 +00:00
Tiago Silva 4d68ca8df1 Migrate S3 upload/download to feature/s3/transfermanager (#65565)
Replace deprecated github.com/aws/aws-sdk-go-v2/feature/s3/manager
(Uploader/Downloader) with the new transfermanager package across all
call sites. The old manager types were superceded per
https://github.com/aws/aws-sdk-go-v2/discussions/3306.

Signed-off-by: Tiago Silva <[email protected]>
2026-04-12 09:04:43 +00:00
Dan Upton ca377d262a Add support for beams to RBAC roles (#65511)
* Add support for beams to RBAC roles

* Add KindBeam to LabelMatcherKinds

* Update CRDs

* Add beam labels and expression to role/trait tests
2026-04-09 17:50:35 +00:00
Noah Stride 3ce2b94394 MWI Scopes[1]: Bot resource and RPCs (#64551)
* MWI Scopes[1]: Bot resource and RPCs

* Address forrest feedback
2026-04-09 10:16:31 +00:00
dependabot[bot]andTim Ross 339a72cc66 Bump go.opentelemetry.io/otel/* to 1.43.0 (#65555)
* Bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0

Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* go mod tidy all

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Ross <[email protected]>
2026-04-08 21:24:47 +00:00
dependabot[bot]andTiago Silva 000401a672 Bump github.com/aws/aws-sdk-go-v2/* modules (#65497)
* Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.93.1 to 1.97.3

Bumps [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) from 1.93.1 to 1.97.3.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/s3/v1.93.1...service/s3/v1.97.3)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.97.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* go mod tidy all

* update github.com/aws/aws-sdk-go-v2/service/bedrockruntime

* update github.com/aws/aws-sdk-go-v2/*

* add no lint flags

* fix naming

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tiago Silva <[email protected]>
2026-04-08 20:54:04 +00:00
Kevin 19d0f649f1 operator: Add lock resource to kubernetes operator (#65299)
* Add lock resource to kubernetes operator

* Rename kube resource to use kind

* Address feedback
2026-04-08 18:25:57 +00:00
Chris Thachandgithub-actions[bot] 6169b27132 Update Go toolchain version to v1.25.9 (#65526)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-04-08 15:44:52 +00:00
Erik Tate cf1a42f1e1 Improving validation errors for scoped kube tokens (#65391)
* adding more specific error message for unspecified kube join type

* generating terraform docs and operator crd
2026-04-07 14:17:37 +00:00
STeve (Xin) Huang 3c2bb63432 bump fastmcp to 3.2.0 for mcp server example (#65423) 2026-04-06 17:56:24 +00:00
dependabot[bot]andTiago Silva da8bddca48 Bump github.com/russellhaering/gosaml2 from 0.10.0 to 0.11.0 (#64801)
* Bump github.com/russellhaering/gosaml2 from 0.10.0 to 0.11.0

Bumps [github.com/russellhaering/gosaml2](https://github.com/russellhaering/gosaml2) from 0.10.0 to 0.11.0.
- [Release notes](https://github.com/russellhaering/gosaml2/releases)
- [Commits](https://github.com/russellhaering/gosaml2/compare/v0.10.0...v0.11.0)

---
updated-dependencies:
- dependency-name: github.com/russellhaering/gosaml2
  dependency-version: 0.11.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* go-mod-tidy-all

* go-mod-tidy-all

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tiago Silva <[email protected]>
2026-03-26 13:20:03 +00:00
dependabot[bot] 251483db7c Bump github.com/russellhaering/goxmldsig in /examples/api-sync-roles (#65046)
Bumps [github.com/russellhaering/goxmldsig](https://github.com/russellhaering/goxmldsig) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/russellhaering/goxmldsig/releases)
- [Commits](https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/russellhaering/goxmldsig
  dependency-version: 1.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-25 22:00:24 +00:00
rosstimothy ceda3ad980 Bump github.com/buger/jsonparser to v1.1.2 (#64915)
This resolves GHSA-6g7g-w4f8-9c9x.
2026-03-25 15:16:43 +00:00
dependabot[bot] 167fcd3e93 Bump github.com/russellhaering/goxmldsig (#64868)
Bumps [github.com/russellhaering/goxmldsig](https://github.com/russellhaering/goxmldsig) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/russellhaering/goxmldsig/releases)
- [Commits](https://github.com/russellhaering/goxmldsig/compare/v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/russellhaering/goxmldsig
  dependency-version: 1.6.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-24 13:57:12 +00:00
Steven Martin b339c41132 docs: fixes for grammar and references (#64668)
* docs: fixes for grammer and references

* docs: fix grammer for okta guided

* docs: reverting auto generated file

* docs: correct roles-requests, user-sync and ssh-keys-scan

* docs: restore troubleshooting
2026-03-20 22:27:58 +00:00
Erik Tate 2c2c8bd0ba adding support for kubernetes join methods while using scoped tokens (#64387) 2026-03-20 20:31:43 +00:00
dependabot[bot]andTiago Silva 2bb262fd73 Bump google.golang.org/grpc from 1.78.0 to 1.79.3 (#64811)
* Bump google.golang.org/grpc from 1.78.0 to 1.79.3

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.78.0 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>

* go-mod-tidy-all

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tiago Silva <[email protected]>
2026-03-19 13:01:57 +00:00
Pavel 7423b4b9f4 add Linux VNet systemd, dbus, polkit files to teleport and teleport-connect packages (#64362) 2026-03-17 14:49:23 +00:00
Steven Martin da1cc0f18f docs: iac doc updates (#64703)
* docs: iac doc updates

* docs: iac page updates
2026-03-17 01:18:51 +00:00
Hugo ShakaandRoman Tkachenko 0d9379ba20 Add skipHooks to the teleport-kube-agent chart (#64700)
* Add skipHooks to teleport-kube-agent chart

* lint

* Apply suggestions from code review

Co-authored-by: Roman Tkachenko <[email protected]>
Co-authored-by: Hugo Shaka <[email protected]>

---------

Co-authored-by: Roman Tkachenko <[email protected]>
2026-03-16 23:34:09 +00:00
Hugo Shaka d9c21328d3 Fix versionning for tbot-spiffe-daemon-set and teleport-kube-agent-updater chart (#64681)
* Fix versionning for tbot-spiffe-daemon-set and teleport-kube-agent-updater charts

* Re-render chart versions

* Update test snapshots
2026-03-16 14:59:45 +00:00
Matt Smith 4424d04dc0 Release 19.0.0-prealpha.2 (#64631) 2026-03-13 17:56:57 +00:00
Matt Smith 53aeefd389 Release 19.0.0-prealpha.1 (#64603)
* Release 19.0.0-prealpha.1

* Update changelog
2026-03-13 13:34:56 +00:00
williamong-tel e444c979ca add k8s operator support for scoped tokens (#64034)
Add scoped tokens to k8s operator

address linter

Update crds

Add updated contributing.md and missing rbac for scoped tokens

Update CONTRIBUTING.md

Update zz_generated.deepcopy.go

Update Makefile

Update CONTRIBUTING.md

Update config.yaml

Add scope to root level crd instead of part of spec. Add OverrideVersionKind and regenerate crds and generated files

Update scopedtoken_types.go

Address incorrect immutable labels mapping

Update resources-teleport-dev-scopedtokensv1.mdx

Update scopedtoken_controller.go

Update schemagen.go

Update resources-teleport-dev-scopedtokensv1.mdx
2026-03-13 02:43:47 +00:00
williamong-tel 8f9694be94 Fix operator map generation (#64459)
* fix mapping gen

make crd

Update schemagen.go

update format

fix docs

update map key

fix

fix formatting

fix formatting

Update format.go

Update format.go

* Update resources-teleport-dev-accesslists.mdx

* add back nullable

fix nullable

* Add schema test

Update schema_test.go

Update schema_test.go
2026-03-12 22:35:09 +00:00
Nic Klaassen 2a23ceb829 feat: add scoped roles field to access list types (#63919) 2026-03-10 23:29:33 +00:00
teleport-post-release-automation[bot] d1e5f67123 [auto] Update AMI IDs for 18.7.2 (#64399)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2026-03-08 15:00:33 +00:00
Chris Thachandgithub-actions[bot] cfe648db29 chore(deps): update go toolchain version to v1.25.8 (#64376)
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
2026-03-06 17:22:16 +00:00
Adam Carheden b7037a17ed Add SAML IdP Service Provider support to k8s operator (#64289)
* Add SAML IdP Service Provider support to k8s operator

changelog:
- Add SAML IdP Service Provider support to k8s operator

See integrations/operator/CONTRIBUTING.md for operator resource pattern.

* Fixed typo in comment and unnecessary log message change

* Added V1 to SAML IdP Servicce Provider k8s kind
2026-03-06 15:26:14 +00:00
teleport-post-release-automation[bot] 3810f952ca [auto] Update AMI IDs for 18.7.1 (#64083)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2026-02-25 18:21:44 +00:00
Paul GottschlingandJames Goodhouse 107af434a4 chore: update event handler docs to clarify session URL routing (#63931)
Co-authored-by: James Goodhouse <[email protected]>
2026-02-23 18:25:52 +00:00
Alan Parra 8fcb072902 chore: Bump opentelemetry to v1.40.0 (#64014)
* chore: Bump otel packages to v1.40.0

* Bump otel contrib packages

* Tidy modules

* Bump otel in examples

* fix: Use a local copy of otelhttp.DefaultClient

* Move otelhttp to lib/observability/
2026-02-20 18:45:30 +00:00
Alan Parra 1b96139023 chore: Bump golangci-lint to v2.10.1 (#63939)
* Fix "builder.WriteString(fmt.Sprintf(...))" calls

* chore: Bump golangci-lint to v2.10.1

* Bump e/

* Fix a few more WriteString/Sprintf occurrences
2026-02-19 13:04:57 +00:00
teleport-post-release-automation[bot] b6d3ecf9be [auto] Update AMI IDs for 18.7.0 (#63915)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2026-02-17 23:47:17 +00:00
Luke Okraszewski 8f4131ff15 [tools] move go tools to isolated dir (#63724)
Each go tool will now reside in a isolated dir under
`build.assets/tools`, this allows us to isolate the
deps of each tool from both main module without
merging them for tools. This should make reviewing
tools and dep changes easier at a glance and remove
noise from main module dep manifest.

Each tool is a Makefile var to allow easy overrides
over a macro which cannot be temporarily unset/overriden.

The tools have been added to common.mk for easy reuse
across OSS and e.
2026-02-16 12:30:30 +00:00
Hugo Shaka f951766a68 operator: access_monitoring_rule support (#63745)
* operator: add accessmonitoringrule CRDs

* operator: grant access to AMRs

* operator: add types for amrs

* operator: add AMR controller and tests
2026-02-13 15:18:10 +00:00
Brian Joerger 9d98e33cb3 Fix typo in docs. (#63765) 2026-02-12 21:56:44 +00:00
Bartosz Leper 3a8f78d35f Support inference_secret in k8s operator (#63693)
* Support inference_model in k8s operator

* Support inference_policy in k8s operator

* Support inference_secret in k8s operator
2026-02-12 14:45:54 +00:00
Bartosz Leper d97a93548c Support inference_model and inference_policy resources in k8s operator (#63553)
* Support inference_model in k8s operator

* Support inference_policy in k8s operator
2026-02-12 10:45:13 +00:00
teleport-post-release-automation[bot] 3f390f384b [auto] Update AMI IDs for 18.6.8 (#63714)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2026-02-11 19:25:07 +00:00
teleport-post-release-automation[bot] e633fdcdd8 [auto] Update AMI IDs for 18.6.7 (#63665)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2026-02-10 13:32:53 +00:00
Hugo Shaka ad30f410df Document existingCACertificate footgun (#63516) 2026-02-06 14:03:42 +00:00
Chris Thach c04182b820 Fix inconsistencies in group-role mappings in SSO guides 🐛 (#63515)
* Fix group role mapping in Okta SSO guide.

Signed-off-by: Chris Thach <[email protected]>

* Update SSO guides to consistently use groups admins and devs.

Signed-off-by: Chris Thach <[email protected]>

* Fix azure ref. Make spacing consistent.

Signed-off-by: Chris Thach <[email protected]>

* Revert accidental formatting.

Signed-off-by: Chris Thach <[email protected]>

* Remove extra comma. Fix inconsistency.

Signed-off-by: Chris Thach <[email protected]>

---------

Signed-off-by: Chris Thach <[email protected]>
2026-02-05 21:09:56 +00:00
Tyler Richardson d70ca9ab4c chore: bump go to 1.25.7 (#63511) 2026-02-05 13:27:28 +00:00
teleport-post-release-automation[bot] 45ba0c0cdf [auto] Update AMI IDs for 18.6.6 (#63426)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2026-02-03 16:42:08 +00:00
Kevin b1858eb5c8 Add cert-manager certificates opt-in for Event Handler helm chart (#63120)
* Add cert-manager certificates opt-in for Event Handler chart

* Update comments

* Add certManager.issuer.create to create CA Issuer for user; refactor key encryption/encoding

* Fix config files; update comments
2026-02-03 01:00:39 +00:00
Kevin 24fa31e188 Add default token name for tbot helm chart (#63212)
* Add token default name for tbot helm chart

* Add newline

* Address feedback
2026-01-30 18:59:57 +00:00
teleport-post-release-automation[bot] 9d2f6b88ce [auto] Update AMI IDs for 18.6.5 (#63299)
Co-authored-by: teleport-post-release-automation[bot] <128860004+teleport-post-release-automation[bot]@users.noreply.github.com>
2026-01-30 10:58:14 +00:00
Erik Tate da008f23b3 adding immutable labels to scoped token, inventory, server, joinservice, (#62939)
and decisionprotos
2026-01-27 21:59:19 +00:00