Commit Graph
13311 Commits
Author SHA1 Message Date
Marco André DinisandMarek Smoliński f4385c16df RFD 0125 - Dynamic Auto-Discovery config (#26613)
* RFD 0125 - Dynamic Auto-Discovery config

* add discovery config grpc methods

* add discovery_group to assign DiscoveryConfig to discovery_services

* Update rfd/0125-dynamic-auto-discovery-config.md

Co-authored-by: Marek Smoliński <[email protected]>

---------

Co-authored-by: Marek Smoliński <[email protected]>
2023-05-29 10:29:10 +00:00
Grzegorz Zdunek 90803a1f45 Add missing dependabot.yml ignore entries (#27019) 2023-05-29 08:16:07 +00:00
Alex McGrath c644142698 Lint the discovery script templates (#27002)
* lint discovery scripts

* fix tests
2023-05-28 22:50:35 +00:00
Jakub Nyckowski 692d1d46b1 Add parallel execution to assist. (#26563)
* Add parallel execution to assist.

* Extract execution logic to a new function.

* Add test

* Switch uber to std

* Address code review comments
2023-05-26 22:11:48 +00:00
Steven Martin 30c8698041 docs: use relative links for doc pages (#27022) 2023-05-26 22:02:46 +00:00
Michael Wilson 658080afcd Add new role defaults to allow requesting and reviewing user groups. (#26644)
* Add new role defaults to allow requesting and reviewing user groups.

User groups are now default requestable by the access role and default
reviewable by the editor role. This will make the onboarding experience
for the Okta service much easier, as there will be no need to set up
new roles to support it.

A new role called group_access has also been added to support it, which
allows read access to all groups.

* Tweak group access name, add in IsEmpty functions, add in tests for AddRoleDefaults.

* Only inject access request/access review conditions if the build type is enterprise.

* Add in tests for enterprise role logic.

* GCI.
2023-05-26 21:13:26 +00:00
dependabot[bot] fce37f7708 Bump github.com/aws/aws-sdk-go from 1.44.267 to 1.44.271 (#27037)
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.267 to 1.44.271.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.267...v1.44.271)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 21:03:43 +00:00
Noah Stride 33cc58da54 Switch to recommending identity file in terraform guide (#26995) 2023-05-26 20:45:34 +00:00
a195146f1e Update kube operator with more details and troubleshooting (#27024)
* Update kube operator with more details and troubleshooting

based on testing, observations with customers, and discussion with dev, adding additional clarity to how the kube operator works with the `teleport-cluster` chart and a troubleshooting section for why the cluster may become unstable

* Apply suggestions from code review

Co-authored-by: Hugo Shaka <[email protected]>

* Apply suggestions from code review

Co-authored-by: Zac Bergquist <[email protected]>

* Update teleport-operator.mdx

---------

Co-authored-by: Hugo Shaka <[email protected]>
Co-authored-by: Zac Bergquist <[email protected]>
2023-05-26 20:45:32 +00:00
dependabot[bot] 0405f7eda3 Bump github.com/elastic/go-elasticsearch/v8 from 8.7.1 to 8.8.0 (#26960)
Bumps [github.com/elastic/go-elasticsearch/v8](https://github.com/elastic/go-elasticsearch) from 8.7.1 to 8.8.0.
- [Release notes](https://github.com/elastic/go-elasticsearch/releases)
- [Changelog](https://github.com/elastic/go-elasticsearch/blob/v8.8.0/CHANGELOG.md)
- [Commits](https://github.com/elastic/go-elasticsearch/compare/v8.7.1...v8.8.0)

---
updated-dependencies:
- dependency-name: github.com/elastic/go-elasticsearch/v8
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 19:55:54 +00:00
dependabot[bot] d211b8af35 Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#26965)
Bumps [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) from 1.2.2 to 1.3.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/azidentity/v1.2.2...sdk/azcore/v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 19:55:48 +00:00
dependabot[bot] 9e9ce7ce07 Bump github.com/opensearch-project/opensearch-go/v2 from 2.2.0 to 2.3.0 (#26963)
Bumps [github.com/opensearch-project/opensearch-go/v2](https://github.com/opensearch-project/opensearch-go) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/opensearch-project/opensearch-go/releases)
- [Changelog](https://github.com/opensearch-project/opensearch-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/opensearch-project/opensearch-go/compare/v2.2.0...v2.3.0)

---
updated-dependencies:
- dependency-name: github.com/opensearch-project/opensearch-go/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 19:55:35 +00:00
dependabot[bot] 66b8fd6698 Bump github.com/aws/aws-sdk-go-v2/service/glue from 1.48.0 to 1.49.0 (#26956)
Bumps [github.com/aws/aws-sdk-go-v2/service/glue](https://github.com/aws/aws-sdk-go-v2) from 1.48.0 to 1.49.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.48.0...service/ec2/v1.49.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/glue
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 19:55:10 +00:00
dependabot[bot] 6d4a5522c2 Bump github.com/googleapis/gax-go/v2 from 2.8.0 to 2.9.1 (#26953)
Bumps [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) from 2.8.0 to 2.9.1.
- [Release notes](https://github.com/googleapis/gax-go/releases)
- [Commits](https://github.com/googleapis/gax-go/compare/v2.8.0...v2.9.1)

---
updated-dependencies:
- dependency-name: github.com/googleapis/gax-go/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 19:55:07 +00:00
dependabot[bot] 55e6471c53 Bump google.golang.org/api from 0.123.0 to 0.124.0 (#26950)
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.123.0 to 0.124.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.123.0...v0.124.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-26 19:54:39 +00:00
Paul SchisaandPaul Gottschling cbb6b8e024 Update title for proxy peering architecture (#27014)
* Update title for proxy peering architecture

correct the title to match the other areas.  Already committed to the v13 and v12 backport

* Update docs/pages/deploy-a-cluster/deployments/aws-gslb-proxy-peering-ha-deployment.mdx

Co-authored-by: Paul Gottschling <[email protected]>

---------

Co-authored-by: Paul Gottschling <[email protected]>
2023-05-26 19:09:24 +00:00
Brian Joerger dbb9a0443e Remove workflows API example. (#26850) 2023-05-26 18:54:11 +00:00
rosstimothy 2f78bf4b7c Extend AccessCapabilities (#26968)
`tsh login` was fetching each role for a user during login to perform
calculations required to determine if auto access requests were
required. To reduce some of the login latency this logic was moved
to `proto.AuthService/GetAccessCapabilities` so that only a single
RPC to Auth is required instead of one per role.
2023-05-26 18:09:06 +00:00
Alan Parra 760ea60c52 Assign module experts in Dependabot reviews (#27023) 2023-05-26 17:50:28 +00:00
Marco André Dinis aecbc5258c Update Terraform reference docs to 13.0.3 (#26502)
* Update Terraform reference docs to 13.0.2

* add cspell exception for mygroup

* only escape lt and gt and update to 13.0.3
2023-05-26 16:55:22 +00:00
Edoardo Spadolini 571477fe5a protobuf changes in preparation for buf breaking (#26792)
* Use WIRE_JSON in buf breaking

* Add some field reservations for backwards compat
2023-05-26 13:53:07 +00:00
Steven Martin 5144750c04 remove warning on unpopulated ssh proxy address (#25921)
* remove warning on blank ssh proxy address

* fix logic

* fix warning
2023-05-26 13:32:58 +00:00
Michael Wilson 8db86033bc Search user groups by description. (#26858)
User groups are now searchable by description, which will make searching by
human readable strings possible.
2023-05-26 13:30:33 +00:00
Steven Martin 9333665340 update ui and config to refer to service as Teleport Service (#26654)
* update to refer to service as Teleport Service

* update references to Teleport SSH Service to Teleport Service

* lint fix
2023-05-26 13:24:00 +00:00
Yassine Bounekhla c2e4871725 add section for username_claim (#26876) 2023-05-26 11:38:27 +00:00
Rafał Cieślak b3e7a30f8b Remove initCommand from DocumentPtySession (#26837) 2023-05-26 09:28:00 +00:00
Hugo Shaka 69008df73f operator: allow operator to edit tokens (#26972) 2023-05-26 09:07:50 +00:00
Gavin Frazar 6bfa871dde use uri path for config dump (#26980) 2023-05-26 01:35:47 +00:00
teleport-post-release-automation[bot]andGitHub ef5d120a81 [auto] Update AMI IDs for 13.0.3 (#26985)
Co-authored-by: GitHub <[email protected]>
2023-05-26 01:03:04 +00:00
Isaiah Becker-Mayer b53a5cdf03 changes ldapDialTimeout from 5 to 15 seconds (#26971) 2023-05-26 00:38:38 +00:00
Mike Jensenanddependabot[bot] ae22690ffa Update dependencies for /integrations/kube-agent-updater (#26909)
* Bump k8s.io/apimachinery in /integrations/kube-agent-updater

Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.26.1 to 0.27.2.
- [Commits](https://github.com/kubernetes/apimachinery/compare/v0.26.1...v0.27.2)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/jonboulle/clockwork in /integrations/kube-agent-updater

Bumps [github.com/jonboulle/clockwork](https://github.com/jonboulle/clockwork) from 0.3.0 to 0.4.0.
- [Release notes](https://github.com/jonboulle/clockwork/releases)
- [Commits](https://github.com/jonboulle/clockwork/compare/v0.3.0...v0.4.0)

---
updated-dependencies:
- dependency-name: github.com/jonboulle/clockwork
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/stretchr/testify in /integrations/kube-agent-updater

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 22:33:52 +00:00
Gus Luxton a005cdeeec helm: Fail to install if clusterName contains a colon (#26615)
* helm: Fail install if clusterName contains a port

* Colons should not be allowed at all as they break public address templating
2023-05-25 22:22:56 +00:00
Nic Klaassen 0412303956 feat: label expression protobuf types (#26633)
This commit adds the protobuf types for label expressions, as described
in RFD 116.
2023-05-25 22:13:16 +00:00
Zac Bergquist b0bee3bab6 Clean up LDAP error handling (#26875)
The following error often confuses users:

    *ldap.Error LDAP Result Code 1 &#34;Operations Error&#34;: 000004DC: LdapErr: DSID-0C090ACD,
    comment: In order to perform this operation a successful bind must be completed on the connection.

Since Teleport always uses x509 certs to bind, this error indicates
that the Teleport-issued cert is not trusted (which is likely due to
Teleport's CA not being imported as a trusted root).

While fixing this, unify the LDAP error handling with a common
utility for converting between LDAP error codes and trace errors.
2023-05-25 22:04:15 +00:00
Mike Jensenanddependabot[bot] 5d953aae35 Yarn updates for terser and minimatch (#26919)
* Bump terser from 4.8.0 to 4.8.1

Bumps [terser](https://github.com/terser/terser) from 4.8.0 to 4.8.1.
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terser/terser/compare/v4.8.0...v4.8.1)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump minimatch from 3.0.4 to 3.1.2

Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.0.4 to 3.1.2.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.0.4...v3.1.2)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 21:32:37 +00:00
Nic Klaassen 0b835067d7 feat: label expression parser (#26176)
This PR builds on https://github.com/gravitational/teleport/pull/26177
to implement the label expression parser as defined in
[RFD 116](https://github.com/gravitational/teleport/blob/master/rfd/0116-label-expressions.md#expression-syntax).
2023-05-25 21:21:51 +00:00
Nic Klaassen 3a8a1b4ab9 update lib/utils/parse to leverage lib/utils/typical (#26313)
`lib/utils/typical` is a new library for building predicate parsers
based on the examples set by `lib/utils/parse` and `e/lib/loginrule`.
The commit updates `lib/utils/parse` to use the `typical` library to
implement the two parsers defined here.

This removes a lot of code in `ast.go` that was written for each
specific function to do type checking and deal with subexpressions. This
is all handled by the `typical` library now. My hope is that this will
make it much easier to add new functions in the future and to share them
with other parsers.
2023-05-25 20:27:29 +00:00
Mike JensenandAlan Parra 61448c9f0c Update Dependabot Scheduled Config (#26867)
* Update Dependabot Scheduled Config

Update Dependabot with the following:
* Add `jentfoo` to reviewers list
* Remove `crypto` ignore on `api` (no longer using forked version)
* Add configurations for missing gomod paths

* Update .github/dependabot.yml

Co-authored-by: Alan Parra <[email protected]>

* Remove `examples` from Dependabot

---------

Co-authored-by: Alan Parra <[email protected]>
2023-05-25 20:27:12 +00:00
Mike Jensenanddependabot[bot] 667e862a68 Update dependencies for assets/aws and assets/backport (#26914)
* Bump golang.org/x/oauth2 in /assets/backport

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.0.0-20211104180415-d3ed0bb246c8 to 0.8.0.
- [Commits](https://github.com/golang/oauth2/commits/v0.8.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/stretchr/testify from 1.7.0 to 1.8.3 in /assets/backport

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.0 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.0...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/gravitational/trace in /assets/backport

Bumps [github.com/gravitational/trace](https://github.com/gravitational/trace) from 1.1.15 to 1.2.1.
- [Release notes](https://github.com/gravitational/trace/releases)
- [Commits](https://github.com/gravitational/trace/compare/v1.1.15...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/gravitational/trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/aws/aws-sdk-go-v2/config in /assets/aws

Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.18.12 to 1.18.25.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.18.12...config/v1.18.25)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/aws/aws-sdk-go-v2/service/ec2 in /assets/aws

Bumps [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) from 1.77.0 to 1.98.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.77.0...service/ec2/v1.98.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 20:09:08 +00:00
Gavin Frazar cf779f0082 Remove useProfileLogin from makeClient in tsh (#26814)
* Remove useProfileLogin from makeClient in tsh

* fix test
2023-05-25 20:08:09 +00:00
Paul Gottschling 812a7ee350 Refresh port descriptions (#25560)
* Refresh port descriptions

Closes #22839

Clarify that agents do not need to have ports open to the public
internet. Also update the networking guide's use of Teleport terms,
e.g., replacing "Node" as appropriate, and separate Auth Service ports
from Proxy Service ports in the "Self-Hosted" tab since production
deployments may run these services separately.

* Respond to strideynet feedback

* Respond to strideynet feedback

* Simplify Application Service paragraph
2023-05-25 18:51:07 +00:00
Brian Joerger d746481e13 Fix bug where the system agent is not forwarded in combination with (#26879)
--add-keys-to-agent=no.
2023-05-25 18:27:47 +00:00
Steven Martin 3a5ec2e507 docs: update kube access for enterprise setting and agent updates (#26815) 2023-05-25 18:22:37 +00:00
Jakub Nyckowski 0e44ac7473 [Assist] Prevent creating messages without conversation (#26797) 2023-05-25 18:14:08 +00:00
Paul Gottschling 36b05a89e6 Add diagrams to Access Request plugin guides (#26508)
This was mainly an experiment to see how we could use partial parameters
with Mermaid diagrams, but also ensures that Access Request plugin
docs have a diagram for easier architectural understanding.

The Jira plugin works differently than the rest, so I did not include
the diagram partial.
2023-05-25 17:51:06 +00:00
Zac Bergquist fffa7c275c ci: build tctl in the build-windows job (#26865)
We don't officially support tctl on Windows yet, but it does now build
and we want to ensure it stays that way.
2023-05-25 17:28:23 +00:00
Tobiasz Heller 279b64177c athena audit logs - add metrics (#26331) 2023-05-25 17:22:40 +00:00
Lisa Kim 4d8f2d20e7 Add integration enroll usage event (#26880)
* Add integration enroll usage event

* Add new events to the frontend
2023-05-25 16:51:04 +00:00
Mike Jensenanddependabot[bot] 83a64c1eec Update dependencies for build.assets/tooling (#26907)
* Bump github.com/hashicorp/go-hclog in /build.assets/tooling

Bumps [github.com/hashicorp/go-hclog](https://github.com/hashicorp/go-hclog) from 0.9.3-0.20191025211905-234833755cb2 to 1.5.0.
- [Release notes](https://github.com/hashicorp/go-hclog/releases)
- [Commits](https://github.com/hashicorp/go-hclog/commits/v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-hclog
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump golang.org/x/oauth2 in /build.assets/tooling

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.0.0-20180821212333-d2e6202438be to 0.8.0.
- [Commits](https://github.com/golang/oauth2/commits/v0.8.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump golang.org/x/mod from 0.6.0 to 0.10.0 in /build.assets/tooling

Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.6.0 to 0.10.0.
- [Commits](https://github.com/golang/mod/compare/v0.6.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/bmatcuk/doublestar/v4 in /build.assets/tooling

Bumps [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) from 4.4.0 to 4.6.0.
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](https://github.com/bmatcuk/doublestar/compare/v4.4.0...v4.6.0)

---
updated-dependencies:
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/bradleyfalzon/ghinstallation/v2 in /build.assets/tooling

Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.1.0 to 2.4.0.
- [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases)
- [Commits](https://github.com/bradleyfalzon/ghinstallation/compare/v2.1.0...v2.4.0)

---
updated-dependencies:
- dependency-name: github.com/bradleyfalzon/ghinstallation/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/stretchr/testify in /build.assets/tooling

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/sirupsen/logrus in /build.assets/tooling

Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.8.1 to 1.9.2.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/compare/v1.8.1...v1.9.2)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump github.com/gravitational/trace in /build.assets/tooling

Bumps [github.com/gravitational/trace](https://github.com/gravitational/trace) from 1.1.15 to 1.2.1.
- [Release notes](https://github.com/gravitational/trace/releases)
- [Commits](https://github.com/gravitational/trace/compare/v1.1.15...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/gravitational/trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Update CIRCL to address CVE https://github.com/advisories/GHSA-2q89-485c-9j2x

* go.mod: Join two require sections

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-25 16:38:51 +00:00
Nic KlaassenandTim Buckley e20bc8afef feat: library for building predicate parsers (#26177)
* feat: library for building predicate parsers

Took some things I learned while building Login Rules and implemented a
library that can be used to quickly implement new and improved predicate
parsers.

Copied from the package comment:

typical (TYPed predICAte Library) is a library for building better
predicate expression parsers faster. It is built on top of
[predicate](github.com/gravitational/predicate).

typical helps you (and forces you) to separate parse and evaluation into
two distinct stages so that parsing can be cached and evaluation can be
fast. Expressions can also be parsed to check their syntax without
needing to evaluate them with some specific input.

Functions can be defined by providing implementations accepting and returning
values of ordinary types, the library handles the details that enable any
function argument to be a subexpression that evaluates to the correct type.

By default, typical provides strong type checking at parse time without any
reflection during evaluation. If you define a function that evaluates to
type any, you are opting in to evaluation-time type checking everywhere that
function is called, but types will still be checked for all other parts of
the expression. If you define a function that accepts an interface type it
will be called via reflection during evaluation, but interface satisfaction
is still checked at parse time.

* fix typo in error message

Co-authored-by: Tim Buckley <[email protected]>

---------

Co-authored-by: Tim Buckley <[email protected]>
2023-05-25 16:34:55 +00:00