Skip to content

autoupdate canary support: modulate proxy response#56468

Merged
hugoShaka merged 1 commit intomasterfrom
hugo/canary-pt-4-proxy-response
Jul 8, 2025
Merged

autoupdate canary support: modulate proxy response#56468
hugoShaka merged 1 commit intomasterfrom
hugo/canary-pt-4-proxy-response

Conversation

@hugoShaka
Copy link
Copy Markdown
Contributor

@hugoShaka hugoShaka commented Jul 4, 2025

This PR makes the Teleport Proxy service find and pind endpoints fetch the updater ID from the request parameters and lookup if the requestor is a canary. If it is, the requestor will be told to update.

Part 4 of the canary support as described in RFD 184

You can find the meta canary PR here, I'm upstreaming it bit by bit to make the review more palatable.

Goal (internal): https://github.com/gravitational/cloud/issues/13207

@hugoShaka hugoShaka added the no-changelog Indicates that a PR does not require a changelog entry label Jul 4, 2025
@hugoShaka hugoShaka requested review from sclevine and vapopov July 4, 2025 17:45
@github-actions github-actions bot requested a review from GavinFrazar July 4, 2025 17:46
@github-actions github-actions bot requested a review from zmb3 July 4, 2025 17:46
@hugoShaka
autoupdate canary support: modulate proxy response
51c66ad 
This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.
@hugoShaka hugoShaka force-pushed the hugo/canary-pt-4-proxy-response branch from 74e4086 to 51c66ad Compare July 4, 2025 17:48
sclevine
sclevine approved these changes Jul 6, 2025
View reviewed changes
Comment thread lib/web/autoupdate_common.go
if updaterUUID == "" {
return false
}
for _, canary := range group.GetCanaries() {
Copy link
Copy Markdown
Member

@sclevine sclevine Jul 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: Could use slices.ContainsFunc to save a few lines

Copy link
Copy Markdown
Contributor Author

@hugoShaka hugoShaka Jul 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I tried the ContainsFunc variant and find it adds more complexity for a return condition this trivial, I'm not gaining much space from rewriting this so I'd prefer leaving the for loop.

@public-teleport-github-review-bot public-teleport-github-review-bot bot removed the request for review from vapopov July 8, 2025 19:37
@hugoShaka hugoShaka enabled auto-merge July 8, 2025 19:40
@hugoShaka hugoShaka added this pull request to the merge queue Jul 8, 2025
Merged via the queue into master with commit ea2a70f Jul 8, 2025
40 checks passed
@hugoShaka hugoShaka deleted the hugo/canary-pt-4-proxy-response branch July 8, 2025 20:03
hugoShaka added a commit that referenced this pull request Jul 18, 2025
@hugoShaka
autoupdate canary support: modulate proxy response (#56468)
8f2b281 
This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.
@hugoShaka hugoShaka mentioned this pull request Jul 18, 2025
Merged
hugoShaka added a commit that referenced this pull request Jul 18, 2025
@hugoShaka
autoupdate canary support: modulate proxy response (#56468)
65cfa73 
This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.
hugoShaka added a commit that referenced this pull request Jul 24, 2025
@hugoShaka
autoupdate canary support: modulate proxy response (#56468)
8381822 
This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.
hugoShaka added a commit that referenced this pull request Jul 24, 2025
@hugoShaka
autoupdate canary support: modulate proxy response (#56468)
0b114cb 
This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.
hugoShaka added a commit that referenced this pull request Jul 24, 2025
@hugoShaka
autoupdate canary support: modulate proxy response (#56468)
0c5a458 
This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.
github-merge-queue bot pushed a commit that referenced this pull request Jul 25, 2025
@hugoShaka @sclevine
[v18] Managed Updates v2: canary updates (#56955)
2e902a7 
* autoupdate canary support: proto messages (#56259)

* autoupdate canary support: inventory and auth primitives (#56261)

* autoupdate canary support: tctl (#56473)

* autoupdate canary support: tctl support

This commits makes `tctl autoupdate agents status` display groups in the
canary state properly.

* add `--force` flag to `tctl autoupdate agents start-update`

* autoupdate canary support: modulate proxy response (#56468)

This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.

* autoupdate canary support: rollout controller (#56467)

* autoupdate canary support: rollout controller

This commit adds canary support to the autoupdate_agent_rollout
controller when the strategy is "halt-on-error".

* Apply suggestions from code review

* Tune the canary logic (#56926)

- Users can now specify how many canaries they want
- Instead of looking at the current group size, we rely on user input
- max canary 10 -> 5 (I have not done the max message size yet)
- fix a bug causing the start date to be reset when doing canary ->
  active

* Fix autoupdate canary sampling for the catch-all group

* Reliably detect update.yaml after soft reloads

* Fix detection on initial install

* fix log

* Fix tests after rebase

* Always persist new configuration

* cleanup

* fix tests

---------

Co-authored-by: Stephen Levine <stephen.levine@goteleport.com>
hugoShaka added a commit that referenced this pull request Jul 25, 2025
@hugoShaka
autoupdate canary support: modulate proxy response (#56468)
7f017f1 
This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.
github-merge-queue bot pushed a commit that referenced this pull request Jul 28, 2025
@hugoShaka @sclevine @espadolini
[v17] Managed Updates v2: canary updates (#56956)
19d4f18 
* Add rollout mutation functions (#52930)

* Add Trigger, Rollback, ForceDone autoupdate RPCs (#52931)

* Add Trigger, Rollback, ForceDone autoupdate RPCs

* Add all_started_groups bool + switch to group set

* fix error type

* Align semver libs (#52795)

* Convert autoupdate version handling to coreos/go-semver

* get the right version in installer endpoint + get rid of x/mod/semver

* depguard x/mod/semver

* Add nolint rules for existing x/mod/semver usages

* Add depguard explanation

* Add autoupdate trigger/mark-done/rollback commands (#52933)

* Add updater info in Hello (#53911)

* Introduce autoupdate_agent_report proto types (#54175)

* Introduce autoupdate_agent_report proto types

* Fix tests + remove delete all RPC

* Move updater info proto from authclient to types (#54236)

* Report updater info in Hello (#53938)

* Report updater info in Hello

* Add UUID to Hello

* lint

* Fix after rebase

---------

Co-authored-by: Stephen Levine <stephen.levine@goteleport.com>

* Send goodbye even when doing soft-reload (#54176)

* Send goodbye even when doing soft-reload

* Save and replay Goodbye on connect

* Add SoftReload flag to Goodbye

* SendGoodbye -> SetAndSendGoodbye

* Display update group in `tctl inventory` (#54324)

* Add autoupdate manual rollout audit events (#52934)

* Add autoupdate trigger/merk-done/rollback audit events

* Remove useless resource metadata and add groups to audit event

* Add events to web UI

* Add autoupdate_agent_report backend service (#54333)

* Add autoupdate_agent_report backend service

* Saner resource validation

* Add agent rollout cache + service + client (#54772)

* Add agent rollout cache + service + client

* fix after rebase

* add event in tests

* fix autoupdateagenmtreport event streaming

* lint

* Fix backport: slog -> logrus

* Generate autoupdate agent report periodically (#54865)

* Generate autoupdate agent report periodically

* address edoardo's feedback

* Apply suggestions from code review

Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com>

* fix proto field lookup + address feedback

* fix tests + add license

---------

Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com>

* Add omission info in autoupdate report (#55001)

* Add agent counters to autoupdate_agent_rollout proto (#55096)

* Add agent counters to autoupdate_agent_rollout proto

* int64 -> uint64

* Add reports to client and rewrite mockClient using testify (#55097)

* Add reports to client and rewrite mockClient using testify

When adding the ListAutoUpdateAgentReports() function to the Client interface
I realized that the mock client was not supporting List endpoints.
Instead of expanding the custom mock system, I rewrote the mock client to use
the standard testify/mock library.

* checkIfEmpty -> checkIfCallsWereDone

* Make halt-on-error autoupdate strategy use agent reports (#55116)

* Make half-on-error autoupdate strategy use agent reports

* Make report helpers reusable for time-based strategy

* address edoardo's feedback

* Set the agent count when reconciling time-based rollouts (#55152)

* Set the agent count when reconciling time-based rollouts

* Apply suggestions from code review

Co-authored-by: Stephen Levine <stephen.levine@goteleport.com>

---------

Co-authored-by: Stephen Levine <stephen.levine@goteleport.com>

* Fix flaky `TestServer_generateAgentVersionReport` (#56015)

* [v18] Add autoupdate agent report commands (#56495)

* Add autoupdate agent report commands

* Address feedback

* autoupdate canary support: proto messages (#56259)

* autoupdate canary support: inventory and auth primitives (#56261)

* autoupdate canary support: tctl (#56473)

* autoupdate canary support: tctl support

This commits makes `tctl autoupdate agents status` display groups in the
canary state properly.

* add `--force` flag to `tctl autoupdate agents start-update`

* autoupdate canary support: modulate proxy response (#56468)

This commit makes the TEleport Proxcy service find and pind endpoints
fetch the updater ID from the request parameters and lookup if the
requestor is a canary. If it is, the requestor will be told to update.

* autoupdate canary support: rollout controller (#56467)

* autoupdate canary support: rollout controller

This commit adds canary support to the autoupdate_agent_rollout
controller when the strategy is "halt-on-error".

* Apply suggestions from code review

* Fix backport: add inventory clock + deal with edoardo breaking everything

* Fix tests after backport

* fixup! Fix tests after backport

* fixup! fixup! Fix tests after backport

* lint authproto -> clientproto

* Fix autoupdate canary sampling for the catch-all group

* Tune the canary logic (#56926)

- Users can now specify how many canaries they want
- Instead of looking at the current group size, we rely on user input
- max canary 10 -> 5 (I have not done the max message size yet)
- fix a bug causing the start date to be reset when doing canary ->
  active

* Reliably detect update.yaml after soft reloads

* always send group in agent hello (#55071)

* Fix detection on initial install

* fix log

* Always persist new configuration

* cleanup

* fix tests

* fix tests relying on go 1.24

* fix crd snapshot tests + fix linter issue

---------

Co-authored-by: Stephen Levine <stephen.levine@goteleport.com>
Co-authored-by: Edoardo Spadolini <edoardo.spadolini@goteleport.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sclevine sclevine sclevine approved these changes

@zmb3 zmb3 zmb3 approved these changes

@GavinFrazar GavinFrazar GavinFrazar approved these changes

Assignees

No one assigned

Labels

no-changelog Indicates that a PR does not require a changelog entry size/md

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

4 participants

@hugoShaka @sclevine @zmb3 @GavinFrazar