Code

[v16] Backport Secrets scanner #44799

Code

Merged

tigrato merged 26 commits intobranch/v16gravitational/teleport:branch/v16from tigrato/sec-scan-v16gravitational/teleport:tigrato/sec-scan-v16Copy head branch name to clipboardAug 13, 2024

+14,570-2,954

Commits

Commits on Jul 30, 2024

• Add the device assertion protos (#43804)

  Show description for df768bd
  

  codingllama

  authored and

  tigrato

  committed
  df768bd

• Add a client-side API to assert devices (#43890)

  Show description for 2988021
  

  codingllama

  authored and

  tigrato

  committed
  2988021

• Define server-side device assertion interfaces (#44036)

  Show description for 3ef73ba
  

  codingllama

  authored and

  tigrato

  committed
  3ef73ba

• [sec_scan][1] Add teleport.access_graph.v1.SecretsScannerService (#43462)

  Show description for 986419a
  tigrato

  committed
  986419a

• [sec_scan][2] expose ssh_scan_enabled in AccessGraphConfig response (#43467)

  Show description for f95e4d8
  tigrato

  committed
  f95e4d8

• [sec_scan][3] add PrivateKey, AuthorizedKey and Device to Access Graph resources (#43468)

  Show description for e60ed86
  tigrato

  committed
  e60ed86

• fix: fix nextKey values when using multiple prefixes (#43486)

  Show description for e1912f0
  tigrato

  committed
  e1912f0

• [sec_scan][5] add secrets backend service (#43543)

  Show description for 63d25ee
  tigrato

  committed
  63d25ee

• [sec_scan][6] add device events (#43905)

  Show description for 2874ca5
  tigrato

  committed
  2874ca5

• [sec_scan][7] add authorizedKeys and privateKeys events support (#43906)

  Show description for bf86094
  tigrato

  committed
  bf86094

• [sec_scan][9] add access_graph_settings protobuf (#44010)

  Show description for 559020c
  tigrato

  committed
  559020c

• [sec_scan][10] add AccessGraphSettingsUpdate audit event (#44011)

  Show description for 0c0ea0d
  tigrato

  committed
  0c0ea0d

• [sec_scan][11] add AccessGraphSettings backend service (#44014)

  Show description for 58161ff
  tigrato

  committed
  58161ff

• [sec_scan][12] add cache and events support for AccessGraphSettings (#44016)

  Show description for b266260
  tigrato

  committed
  b266260

• [sec_scan][13] add AccessGraphSettings gRPC implementation (#44021)

  Show description for 72018c9
  tigrato

  committed
  72018c9

• [sec_scan][14] create AccessGraphSettings on first auth init (#44032)

  Show description for fe41289
  tigrato

  committed
  fe41289

• [sec_scan][15] add support for edits to AccessGraphSettings via tctl (#44055)

  Show description for 57ed57d
  tigrato

  committed
  57ed57d

• [sec_scan][16] add methods to store/retrieve device assertion functions (#44081)

  Show description for a42ee9e
  tigrato

  committed
  a42ee9e

• [sec_scan][17] add AssertDevice to FakeDeviceService (#44159)

  Show description for 5353c6b
  

  tigrato

  and

  codingllama

  committed
  5353c6b

• [sec_scan][20] add ReportSecrets forwarder to proxy's gRPC insecure server (#44324)

  Show description for a1f4041
  tigrato

  committed
  a1f4041

• [sec_scan][19] add tsh scan keys implementation (#44220)

  Show description for 1ea66fe
  tigrato

  committed
  1ea66fe

• [sec_scan][22] add authorized keys reporter (#44523)

  Show description for 22b6489
  tigrato

  committed
  22b6489

• [sec_scan][24] extract AuthorizedKey's comment and type (#44643)

  Show description for 1028828
  tigrato

  committed
  1028828

• fix api module

  tigrato

  committed
  16e8f68

Commits on Aug 8, 2024

• [sec_scan][27] add support for LDAP users and macOS (#45109)

  Show description for 1ef60c9
  tigrato

  committed
  1ef60c9

Commits on Aug 13, 2024

• Merge branch 'branch/v16' into tigrato/sec-scan-v16

  tigrato

  committed
  88399d1