mirror of
https://github.com/gravitational/teleport.git
synced 2026-10-11 22:49:54 +00:00
* Fix google.protobuf.Struct handling in the Kubernetes operator This fixes a bug in the Kubernetes operator where nested fields in a `google.protobuf.Struct` object would be silently pruned by the validator. This matters to the `generic_oidc` join method where the `must_match_fields` field (which accepts structured fields to match against an incoming JWT) could get pruned and then silently ignored, bypassing join rules. Note that use of nested fields _usually_ results in an error, but only in strict mode. It's the default now, but could still plausibly be disabled causing silent loss of rules. * Reword comment * Add a pruning test beyond just schema validation * Use older reference syntax (new() isn't available in v18)
Examples
Daemon Configuration
AWS examples
Kubernetes - Helm Charts
SSO Connector Examples and Trusted Cluster Examples
SSO Resources
- Active Directory - YAML Resource
- OIDC Connector, like "keycloak". - YAML Resource
- SAML Connector, like "Okta". - YAML Resource