Skip to content

[AWSIC] Adds RoleSyncMode selection to tctl plugins tooling#58046

Merged
tcsc merged 2 commits intomasterfrom
tcsc/tctl-set-role-sync-mode
Sep 4, 2025
Merged

[AWSIC] Adds RoleSyncMode selection to tctl plugins tooling#58046
tcsc merged 2 commits intomasterfrom
tcsc/tctl-set-role-sync-mode

Conversation

@tcsc
Copy link
Copy Markdown
Contributor

@tcsc tcsc commented Aug 19, 2025

Allows the user to specify a RolesSyncMode on the command line when installing or editing the
Identity Center integration.

Also prevents the user from specifying group import filters on installation when roleSyncMode == NONE, because allowing them will make an invalid plugin configuration.

Changelog: Added ability for user to select whether IC integration creates roles for all possible Account Assignments

@tcsc tcsc added tctl tctl - Teleport admin tool aws-iam-identity-center labels Aug 19, 2025
@github-actions github-actions bot requested review from gzdunek and kimlisa August 19, 2025 15:44
@r0mant r0mant requested review from kopiczko and smallinsky and removed request for gzdunek and kimlisa August 19, 2025 16:53
Copy link
Copy Markdown
Collaborator

@r0mant r0mant left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@tcsc Can you please include documentation in this PR as well.

Copy link
Copy Markdown
Collaborator

@r0mant r0mant left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Changelog: Added RolesSyncMode selection to tctl AWSIC plugin installer

@tcsc Also, this changelog entry will not make sense to anyone outside of IG team and certainly not users reading this who are the primary consumers of the changelog. Can you rephrase it to be more human readable?

@tcsc tcsc changed the title [AWSIC] Adds RoleSyncMode selection to tctl plugins install awsic [AWSIC] Adds RoleSyncMode selection to tctl plugins tooling Aug 25, 2025
@tcsc
Copy link
Copy Markdown
Contributor Author

tcsc commented Aug 26, 2025

Accompanying documentation is in #58345

Copy link
Copy Markdown
Collaborator

@r0mant r0mant left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm with some wording suggestions

Comment thread tool/tctl/common/plugin/awsic.go Outdated
Comment thread tool/tctl/common/plugin/awsic.go Outdated
Comment thread tool/tctl/common/plugin/awsic.go Outdated
Comment thread tool/tctl/common/plugin/plugins_command.go Outdated
Comment thread tool/tctl/common/plugin/awsic.go Outdated
@public-teleport-github-review-bot public-teleport-github-review-bot bot removed the request for review from kopiczko August 26, 2025 18:30
Comment thread tool/tctl/common/plugin/awsic.go Outdated
Allows the user to specify a RolesSyncMode on the command line when installing or
editing the Identity Center integration. Also prevents the user from specifying
group import filters when rolesSyncMode == NONE, because allowing them will make
an invalid plugin configuration.
@tcsc tcsc force-pushed the tcsc/tctl-set-role-sync-mode branch from 2b9f4f1 to a1dec18 Compare August 28, 2025 07:39
@tcsc tcsc added this pull request to the merge queue Sep 4, 2025
Merged via the queue into master with commit 3d6b975 Sep 4, 2025
43 checks passed
@tcsc tcsc deleted the tcsc/tctl-set-role-sync-mode branch September 4, 2025 02:06
@backport-bot-workflows
Copy link
Copy Markdown
Contributor

@tcsc See the table below for backport results.

Branch Result
branch/v17 Create PR
branch/v18 Create PR

cthach pushed a commit that referenced this pull request Sep 4, 2025
…58046)

Allows the user to specify a RolesSyncMode on the command line when installing or
editing the Identity Center integration. Also prevents the user from specifying
group import filters when rolesSyncMode == NONE, because allowing them will make
an invalid plugin configuration.
@r0mant
Copy link
Copy Markdown
Collaborator

r0mant commented Sep 5, 2025

@tcsc Was this backported?

mmcallister pushed a commit that referenced this pull request Sep 22, 2025
…58046)

Allows the user to specify a RolesSyncMode on the command line when installing or
editing the Identity Center integration. Also prevents the user from specifying
group import filters when rolesSyncMode == NONE, because allowing them will make
an invalid plugin configuration.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants