gravitational/teleport
1
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-10-12 02:15:01 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
3cfabe9d09390cbe1cb18d22fbc6dcb0888efba4
teleport/api/types
T
History
Tiago Silva 05419f28b6 support where RBAC on application session recordings (#69630) 
* support `where` RBAC on application session recordings

application session recordings are backed by AppSessionChunk events, but
those events were never wired into the session recording RBAC path, so
`where` clauses on `kind: session` rules could not match them.

Fixes https://github.com/gravitational/teleport/issues/67775

Signed-off-by: Tiago Silva <[email protected]>

* fix unit test

* handle feedback

---------

Signed-off-by: Tiago Silva <[email protected]>
2026-08-13 14:29:20 +00:00
..
accessgraph
[sec_scan][24] extract AuthorizedKey's comment and type (#44643)
2024-07-29 19:33:29 +00:00
accesslist
Validate access list name length on creation (#69008)
2026-08-04 17:17:23 +00:00
accessmonitoringrule
Add initial access monitoring rule resource (#36745)
2024-03-08 15:46:00 +00:00
autoupdate
Fix license header on API submodule (#67877)
2026-06-17 13:40:28 +00:00
backendinfo
Fix major version check for stateless environment (#52837)
2025-05-05 22:51:24 +00:00
clusterconfig
Add DemoMode and Status to AccessGraphSettings (#53371)
2025-04-01 15:27:40 +00:00
common
Add AWS Roles Anywhere as valid origin label (#55214)
2025-05-29 07:31:55 +00:00
compare
Uniform equal function names to IsEqual (#40441)
2024-04-19 09:22:43 +00:00
discoveryconfig
backoff failing Azure VM installations (#68035)
2026-06-29 20:28:21 +00:00
events
support where RBAC on application session recordings (#69630)
2026-08-13 14:29:20 +00:00
externalauditstorage
Fix gRPC -> Teleport types message conversion (#56124)
2025-06-30 08:46:27 +00:00
grpcclientconfig
Fix license header on API submodule (#67877)
2026-06-17 13:40:28 +00:00
header
Fix gRPC -> Teleport types message conversion (#56124)
2025-06-30 08:46:27 +00:00
healthcheckconfig
Add health check config service (#53438)
2025-03-28 18:56:29 +00:00
installers
Add default Windows installer (#68626)
2026-08-11 07:50:14 +00:00
kubewaitingcontainer
Introduce patch_type to KubernetesWaitingContainer (#39738)
2024-03-22 19:35:46 +00:00
label
Implement persistence for db_object_import_rule resource (#37806)
2024-02-22 03:54:27 +00:00
samlsp
add Microsoft Entra ID SAML service provider preset (#53676)
2025-04-08 15:18:24 +00:00
secreports
Fix gRPC -> Teleport types message conversion (#56124)
2025-06-30 08:46:27 +00:00
summarizer
summarizer: add beam activity verdict fields and session kind (#68703)
2026-07-30 11:33:32 +00:00
trait
Extend user_login_state with SAML connector info and grants (#58581)
2025-12-10 17:20:55 +00:00
userloginstate
Remove legacy user generation label handling (#69335)
2026-08-11 08:46:02 +00:00
userprovisioning
Fix license header (#67927)
2026-06-18 15:48:41 +00:00
usertasks
discovery: surface Azure subscription resolution failures as UserTasks (#68814)
2026-07-27 14:47:36 +00:00
vnet
Add vnet_config support for terraform (#62592)
2026-03-02 18:28:08 +00:00
webauthn
Migrate MFA service from v1 to v2 (#66820)
2026-05-22 18:49:20 +00:00
wrappers
fix: populate user_roles and user_traits for ssh sessions (#58794)
2025-09-05 14:28:08 +00:00
access_request_test.go
Resolve Access Request User Displays Server-Side for Dry-Run Creates (#68604)
2026-07-16 21:16:15 +00:00
access_request.go
Search Access Requests by Requester Display Values (#68120)
2026-07-27 17:55:35 +00:00
accountrecovery.go
Fixed additional license format issues (#34726)
2023-11-17 21:14:08 +00:00
app_test.go
Add AWS region field to app spec (#68370)
2026-07-06 19:16:04 +00:00
app.go
Add Anthropic Bedrock support (#68407)
2026-07-07 19:53:20 +00:00
appresources_test.go
types: Declare all app_resources fields (#69500)
2026-08-12 05:19:01 +00:00
appresources.go
types: Declare all app_resources fields (#69500)
2026-08-12 05:19:01 +00:00
appserver_test.go
add scoped joining for app svc (#67101)
2026-06-24 18:22:29 +00:00
appserver.go
hash public_addr support for scoped apps (#68074)
2026-07-07 18:33:50 +00:00
assertion_info_test.go
Changes for tctl sso test, tctl sso configure commands [SAML] (#11508)
2022-05-04 11:48:20 +02:00
assertion_info.go
gRPC conversions - SSO Auth Connectors (#13073)
2022-06-08 01:45:06 +00:00
audit.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
authentication_authpreference_test.go
[Browser MFA] Rename browser mfa config name (#64980)
2026-03-26 08:58:33 +00:00
authentication_mfadevice_test.go
feat: SSO MFA - Add ephemeral SSO MFA device (#46704)
2024-10-16 22:24:07 +00:00
authentication_test.go
Add second_factors (#47233)
2024-10-11 00:02:39 +00:00
authentication.go
[Browser MFA] Rename browser mfa config name (#64980)
2026-03-26 08:58:33 +00:00
authority_test.go
verify cluster name of TLS peer certificates (#52128)
2025-02-13 21:25:52 +00:00
authority.go
Stop comparing CertAuthorityV2 with go-cmp (#64135)
2026-02-27 23:24:02 +00:00
cert_authority_override_test.go
Implement SubCAServiceGetter in lib/auth/authclient.ClientI (#65759)
2026-04-16 13:40:52 +00:00
cert_authority_override.go
Implement SubCAServiceGetter in lib/auth/authclient.ClientI (#65759)
2026-04-16 13:40:52 +00:00
clone_test.go
Access Requests: Add Resource-Scoped Constraints (#60123)
2026-01-27 14:51:52 +00:00
cluster_alert_test.go
Add a link text label to the ClusterAlert resource (#45972)
2024-09-05 10:24:39 +00:00
cluster_alert.go
Add a link text label to the ClusterAlert resource (#45972)
2024-09-05 10:24:39 +00:00
clustername.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
connection_diagnostic.go
Adds Origin and Label functions to ResourceHeader. (#20847)
2023-01-30 16:23:24 +00:00
constants.go
Remove app auth config (#69528)
2026-08-11 16:01:44 +00:00
database_permissions_test.go
Add DatabasePermissions field to role (#37797)
2024-02-07 20:03:11 +00:00
database_permissions.go
Bump golangci-lint to v2 (#54410)
2025-05-07 22:14:51 +00:00
database_test.go
App: Add support for AWS dualstack endpoints in IsAWSEndpoint function (#68817)
2026-07-24 15:21:32 +00:00
database.go
feat: add VNetDNSName to DatabaseStatusV3 and implement hashing logic (#65903)
2026-04-27 14:23:07 +00:00
databaseserver_test.go
Fix an issue tsh db ls shows one entry per db server instead of db name (#40784)
2024-04-22 20:21:40 +00:00
databaseserver.go
adding scope validation to SSH heartbeats (#60524)
2025-11-10 22:02:57 +00:00
databaseservice.go
Convert cache list resources implementation to store items in memory (#53355)
2025-04-28 19:01:22 +00:00
derived.gen.go
types: Declare all app_resources fields (#69500)
2026-08-12 05:19:01 +00:00
desktop_test.go
Validate desktop names (#31739)
2023-09-12 18:56:31 +00:00
desktop.go
Prevent the LDAP reconciler from picking up dynamic desktops (#66609)
2026-05-14 02:31:49 +00:00
device_test.go
Use the DeviceCollectedData.os_login_user field (#63389)
2026-02-03 14:19:37 +00:00
device.go
Update protos to enable syncing iOS/iPadOS devices through MDM integrations (#65834)
2026-06-02 13:08:26 +00:00
device.pb.go
Add the DeviceCollectedData.os_login_user field (#63341)
2026-02-03 13:47:28 +00:00
duration_test.go
Limit the maximum input length for types.ParseDuration (#68438)
2026-07-09 07:36:30 +00:00
duration.go
Limit the maximum input length for types.ParseDuration (#68438)
2026-07-09 07:36:30 +00:00
events_test.go
Migrate MFA service from v1 to v2 (#66820)
2026-05-22 18:49:20 +00:00
events.go
scoped watches & role/assignment namespacing (#68605)
2026-07-20 23:55:27 +00:00
extension.go
Add support for Protobuf Enums into Operator CRDs (#32469)
2023-09-26 13:43:50 +00:00
fuzz_test.go
Fix AWS IID TTL type in scoped tokens (#64026)
2026-02-20 20:08:09 +00:00
github_test.go
Relax validation of connector role-mapping on read paths (#69323)
2026-08-05 13:40:08 +00:00
github.go
Relax validation of connector role-mapping on read paths (#69323)
2026-08-05 13:40:08 +00:00
headlessauthn.go
Fix headless authentication matching logic for watcher (#28843)
2023-07-11 20:05:17 +00:00
installer.go
Convert installers, web tokens and ui config to new cache collections (#54497)
2025-05-06 13:36:02 +00:00
instance_test.go
Display update group in tctl inventory (#54324)
2025-05-05 20:39:27 +00:00
instance.go
Implement tctl observability (#67904)
2026-08-12 22:23:22 +00:00
integration_awsoidc.go
AWSOIDC: Compute Proxy's Endpoint for issuing a token (#37253)
2024-01-26 13:35:16 +00:00
integration_github_test.go
GitHub proxy: web apis for enrolment (#51423)
2025-02-03 19:12:08 +00:00
integration_github.go
GitHub proxy: web apis for enrolment (#51423)
2025-02-03 19:12:08 +00:00
integration_test.go
Support IntegrationV1 in terraform provider (#61764)
2025-12-02 00:16:04 +00:00
integration.go
Integration brief summaries returned by web listIntegrations. Updated integrations list issues and details to use the new fields (#62777)
2026-01-22 22:27:50 +00:00
jamf_duration.go
Fix Jamf plugin duration serialization (#65944)
2026-04-24 15:10:15 +00:00
jamf_test.go
Update protos to enable syncing iOS/iPadOS devices through MDM integrations (#65834)
2026-06-02 13:08:26 +00:00
jamf.go
Update protos to enable syncing iOS/iPadOS devices through MDM integrations (#65834)
2026-06-02 13:08:26 +00:00
jwt.go
fully port over createsessiontracker, updatesessiontracker, and generateapptoken to scoped maturity level 3 porting for create/updatesessiontracker and GenereateAppToken (#68227)
2026-07-08 00:48:12 +00:00
kubernetes_server_test.go
Fix some lint issues (#38913)
2024-03-07 18:04:51 +00:00
kubernetes_server.go
Fixing scope propagation and heartbeat enforcement for kube service (#65894)
2026-04-24 00:36:08 +00:00
kubernetes_test.go
Forbid custom namespaces in various resources (#49830)
2024-12-05 19:21:24 +00:00
kubernetes.go
scoped verbs rework (#69232)
2026-08-04 16:53:02 +00:00
license_test.go
Adds IGS related fields to feature, module, and license objects (#34868)
2023-11-27 18:22:49 +00:00
license.go
Fix license stringification (#46415)
2024-09-10 13:05:48 +00:00
lock_test.go
Make LockTarget comparable (#68874)
2026-07-22 15:48:07 +00:00
lock.go
Make LockTarget comparable (#68874)
2026-07-22 15:48:07 +00:00
maintenance_test.go
Fix CMC weekdays bug (#54076)
2025-04-16 19:25:34 +00:00
maintenance.go
Fix CMC weekdays bug (#54076)
2025-04-16 19:25:34 +00:00
matchers_accessgraph.go
Remove services.CompareResources (#65151)
2026-04-16 20:10:09 +00:00
matchers_aws_test.go
Refactor teleport/discovery/aws module to support eks (#65002)
2026-04-03 21:02:11 +00:00
matchers_aws.go
Support region wildcard in discovery EKS matchers. (#66036)
2026-04-24 18:14:50 +00:00
matchers_azure_test.go
Integrate Windows VM discovery in to Azure watcher (#68807)
2026-08-11 09:21:25 +00:00
matchers_azure.go
Integrate Windows VM discovery in to Azure watcher (#68807)
2026-08-11 09:21:25 +00:00
matchers_gcp_test.go
Add GCP Cloud SQL database discovery support (#68501)
2026-07-21 14:14:39 +00:00
matchers_gcp.go
Add GCP Cloud SQL database discovery support (#68501)
2026-07-21 14:14:39 +00:00
matchers_kube_test.go
DiscoveryMatchers: move checkandset to types package (#32857)
2023-10-04 13:48:09 +00:00
matchers_kube.go
Use pkg slices from the standard library (#35905)
2023-12-19 23:06:53 +00:00
matchers_test.go
Add support for HTTP_PROXY in Server auto discovery (#60635)
2025-11-05 15:00:39 +00:00
matchers.go
Add support for HTTP_PROXY in Server auto discovery (#60635)
2025-11-05 15:00:39 +00:00
metadata.pb.go
TDPB Message Definitions (#62100)
2025-12-31 16:59:49 +00:00
mfa_device.pb.go
[Browser MFA] Add Browser MFA to challenge request flow (#63936)
2026-03-26 12:24:12 +00:00
mfa_test.go
Stop comparing Users with go-cmp (#64127)
2026-03-12 20:45:35 +00:00
mfa.go
Stop comparing Users with go-cmp (#64127)
2026-03-12 20:45:35 +00:00
msgraph_test.go
Split MS Graph endpoint validation into separate functions (#66315)
2026-04-30 15:07:24 +00:00
msgraph.go
Split MS Graph endpoint validation into separate functions (#66315)
2026-04-30 15:07:24 +00:00
namespace.go
Forbid custom namespaces in various resources (#49830)
2024-12-05 19:21:24 +00:00
networking_test.go
Allow a custom SSH dial timeout to be set cluster wide (#45507)
2024-08-20 13:11:46 +00:00
networking.go
Allow a custom SSH dial timeout to be set cluster wide (#45507)
2024-08-20 13:11:46 +00:00
oidc_external_test.go
OIDC: validate the client_secret field (#46041)
2024-10-16 19:25:59 +00:00
oidc_external.go
Changes for tctl sso test, tctl sso configure commands [OIDC] (#12519)
2022-05-17 16:30:19 +00:00
oidc_test.go
Relax validation of connector role-mapping on read paths (#69323)
2026-08-05 13:40:08 +00:00
oidc.go
Relax validation of connector role-mapping on read paths (#69323)
2026-08-05 13:40:08 +00:00
okta_test.go
Reset Okta assignment target failure count on op change (#68188)
2026-06-30 07:45:15 +00:00
okta.go
Reset Okta assignment target failure count on op change (#68188)
2026-06-30 07:45:15 +00:00
order.go
Allow querying for audit events in either an ascending or descending order (#7425)
2021-07-12 13:14:05 +02:00
plugin_data.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
plugin_static_credentials.go
Adds protobuf description of a service for updating Plugins' static credentials. (#57690)
2025-08-26 11:42:22 +00:00
plugin_test.go
entra plugin sync intervals (#66229)
2026-05-07 02:32:49 +00:00
plugin.go
Move plugin CheckAndSetDefaults from marshal to write path (#67429)
2026-06-12 10:15:48 +00:00
presence.go
Forbid custom namespaces in various resources (#49830)
2024-12-05 19:21:24 +00:00
provisioning_test.go
Generic OIDC joining: protos (#67914)
2026-06-27 02:41:46 +00:00
provisioning.go
MWI Scopes: Github Join Method (#68939)
2026-08-03 08:17:20 +00:00
proxied_service.go
Add proxy peering support (#12359)
2022-06-02 17:08:24 +00:00
register.go
Certificate renewal bot (#10099)
2022-02-19 02:41:45 +00:00
remotecluster.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
resource_153_test.go
Migrate MFA service from v1 to v2 (#66820)
2026-05-22 18:49:20 +00:00
resource_153.go
scoped watches & role/assignment namespacing (#68605)
2026-07-20 23:55:27 +00:00
resource_constraints.go
[Access Requests] Tolerate unknown constraint kinds when decoding ResourceAccessIDs (#68785)
2026-07-31 21:08:00 +00:00
resource_ids_test.go
[Access Requests] Tolerate unknown constraint kinds when decoding ResourceAccessIDs (#68785)
2026-07-31 21:08:00 +00:00
resource_ids.go
[Access Requests] Tolerate unknown constraint kinds when decoding ResourceAccessIDs (#68785)
2026-07-31 21:08:00 +00:00
resource_test.go
delete unused app_server_or_saml_idp_sp type and its usage (#54473)
2025-05-06 22:00:47 +00:00
resource.go
types: add ResourcePrincipalSet to unified resources protos and types (#68879)
2026-08-06 23:44:07 +00:00
resources.pb.go
types: Add types for SSH Node Resource Constraints (#64287)
2026-03-06 21:13:43 +00:00
restrictions.go
Convert network restrictions to new cache mechanism (#54504)
2025-05-09 14:04:18 +00:00
role_test.go
Add web_terminal_copy_mode role option (#66597)
2026-05-28 19:58:49 +00:00
role.go
types: Declare all app_resources fields (#69500)
2026-08-12 05:19:01 +00:00
saml_idp_service_provider_test.go
aws identity center plugin config dependency (#47844)
2024-10-23 18:28:23 +00:00
saml_idp_service_provider.go
delete unused app_server_or_saml_idp_sp type and its usage (#54473)
2025-05-06 22:00:47 +00:00
saml_test.go
Add APIs for handling Entra ID groups overage on SAML connectors (#65653)
2026-04-21 13:32:53 +00:00
saml.go
Relax validation of connector role-mapping on read paths (#69323)
2026-08-05 13:40:08 +00:00
second_factor_test.go
Use second_factors for logic instead of deprecated second_factor. (#47426)
2024-10-16 19:22:39 +00:00
second_factor.go
Use second_factors for logic instead of deprecated second_factor. (#47426)
2024-10-16 19:22:39 +00:00
semaphore.go
[api] Add ListSemaphores (#60672)
2025-10-29 11:37:59 +00:00
server_info_test.go
EC2 Auto-Discovery: EICE support (#35504)
2024-03-26 16:16:20 +00:00
server_info.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
server_test.go
Add Azure label helper functions (#68023)
2026-06-26 23:14:42 +00:00
server.go
Add Azure label helper functions (#68023)
2026-06-26 23:14:42 +00:00
session_test.go
Fix Access Graph API sessions expiring at bearer-token TTL instead of session TTL (#66019)
2026-04-23 17:35:58 +00:00
session_tracker_test.go
fix: session trackers participants inconsistencies (#58853)
2025-09-08 16:07:11 +00:00
session_tracker.go
summarizer: add beam activity verdict fields and session kind (#68703)
2026-07-30 11:33:32 +00:00
session.go
Fix Access Graph API sessions expiring at bearer-token TTL instead of session TTL (#66019)
2026-04-23 17:35:58 +00:00
sessionrecording_test.go
Fix license header on API submodule (#67877)
2026-06-17 13:40:28 +00:00
sessionrecording.go
Add missing handling for recording encryption configs and keys (#57279)
2025-08-13 15:14:20 +00:00
signaturealgorithmsuite.go
refactor new join flow (#59331)
2025-09-30 16:33:35 +00:00
sortby_test.go
[connect] access requests for Teleport Connect (#16694)
2022-10-11 18:52:16 -05:00
sortby.go
Use new access request filters in webUI (#39625)
2024-03-27 18:21:55 +00:00
statictokens.go
Add support for in memory caching (#52210)
2025-04-10 21:18:24 +00:00
struct.go
Add generic_oidc join method (#67991)
2026-07-11 00:03:17 +00:00
system_role_test.go
prevent unauthorized uploads via encrypted recordings service (#66081)
2026-04-27 09:40:39 +00:00
system_role.go
Try to avoid capturing stack traces when checking system roles (#68808)
2026-07-21 13:00:54 +00:00
target_health_test.go
Aggregate health status in unified resource cache (#54868)
2025-06-04 21:54:30 +00:00
target_health.go
Refactor healthcheck for Kubernetes extensibility with HealthChecker interface (#59396)
2025-09-24 21:31:07 +00:00
traits.go
Changes for tctl sso test, tctl sso configure commands [SAML] (#11508)
2022-05-04 11:48:20 +02:00
trust_test.go
Make use of the newly-introduced WindowsCA (#63035)
2026-01-22 18:12:54 +00:00
trust.go
Add AppClient CA (#66273)
2026-04-30 19:05:23 +00:00
trusted_device_requirement.pb.go
Show device trust status in Connect (#49508)
2024-11-29 10:11:30 +00:00
trustedcluster.go
Add UpsertTrustedClusterV2 RPC (#49789)
2024-12-21 04:24:29 +00:00
tunnel_strategy_test.go
reversetunnel: support tracker discovery ttl and disconnects (#65419)
2026-06-12 18:22:01 +00:00
tunnel_strategy.go
Enable GCI linter (#17894)
2022-10-28 20:20:28 +00:00
tunnel.go
Convert resource to use in memory cache collections (#54322)
2025-04-29 11:58:54 +00:00
tunnelconn.go
Update (*TunnelConnectionV2) Clone to do a full copy (#54661)
2025-05-09 13:03:10 +00:00
types.pb.go
Implement tctl observability (#67904)
2026-08-12 22:23:22 +00:00
ui_config.go
terraform: Add ui_config resource to terraform provider (#65201)
2026-04-15 18:26:35 +00:00
user_display.go
Add Display to the Access List Member and Owner API Surface #67636 (#67790)
2026-06-29 22:42:15 +00:00
user_test.go
Add User Display Helpers to the API User Type (#67100)
2026-05-29 16:32:17 +00:00
user.go
Remove legacy user generation label handling (#69335)
2026-08-11 08:46:02 +00:00
usergroup_test.go
Add mapping between user groups and applications. (#27812)
2023-06-16 17:52:31 +00:00
usergroup.go
Expose IsEqual for more resource types (#64520)
2026-03-11 17:54:10 +00:00
usertoken.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
usertokensecrets.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00
validated_mfa_challenge_filter_test.go
Fix resource filtering for ValidatedMFAChallenge resources (#68348)
2026-07-08 01:17:39 +00:00
validated_mfa_challenge_filter.go
Fix resource filtering for ValidatedMFAChallenge resources (#68348)
2026-07-08 01:17:39 +00:00
watch_status.go
remote Metadata.ID and Lease.ID fields (#41732)
2024-05-23 15:08:46 +00:00