Skip to content

[v14] Add dynamic/ prefix to server info labels (#36219)#36595

Merged
atburke merged 1 commit intobranch/v14from
atburke/v14/deny-dynamic-labels
Jan 11, 2024
Merged

[v14] Add dynamic/ prefix to server info labels (#36219)#36595
atburke merged 1 commit intobranch/v14from
atburke/v14/deny-dynamic-labels

Conversation

@atburke
Copy link
Copy Markdown
Contributor

@atburke atburke commented Jan 11, 2024

Backport #36219 to branch/v14

Changelog: Forbid labels prefixed with dynamic/ from being used in deny rules

This change:
- Adds the dynamic/ prefix to labels from a server_info resource created with tctl
- Forbids labels with the dynamic/ prefix form being used in deny rules for new roles.
  Existing roles will generate warnings in tctl as well as a cluster alert.
@github-actions github-actions Bot added backport size/md tctl tctl - Teleport admin tool labels Jan 11, 2024
@atburke atburke added this pull request to the merge queue Jan 11, 2024
Merged via the queue into branch/v14 with commit a759708 Jan 11, 2024
@atburke atburke deleted the atburke/v14/deny-dynamic-labels branch January 11, 2024 22:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport size/md tctl tctl - Teleport admin tool

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants