Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v16] Machine ID: Add bitbucket join method for Bitbucket Pipelines joining #49337

Merged
merged 3 commits into from
Nov 27, 2024

Conversation

timothyb89
Copy link
Contributor

Backport of #48724 for branch/v16


  • Add bitbucket join method for Bitbucket Pipelines joining

This adds a new bitbucket join method that Machine ID bots can use to authenticate to Teleport from Bitbucket Pipelines CI runs.

  • Add unit tests for bitbucket joining

This also fully adds deployment_environment_uuid which was found to be missing.

  • Fix imports

  • Update tf docs

  • Docs update

  • Update generated TF resources

  • Attempt to work around docs linter

  • Add provision token tests

  • Remove pipeline_uuid and step_uuid from protos

Also, fix deploment_environment_uuid field name.

  • Remove references to removed fields in tests

  • Switch to go-oidc/v3 and remove now-redundant nbf check

  • Fix go.mod imports for the TF provider

  • Fix event-handler go.mod

  • Address review feedback; add 15s timeout to fetch provider metadata

  • Update lib/bitbucket/token_validator.go

  • Fix build after constant rename


changelog: Support delegated joining for Bitbucket Pipelines in Machine ID

…ng (#48724)

* Add `bitbucket` join method for Bitbucket Pipelines joining

This adds a new `bitbucket` join method that Machine ID bots can use
to authenticate to Teleport from Bitbucket Pipelines CI runs.

* Add unit tests for bitbucket joining

This also fully adds `deployment_environment_uuid` which was found to
be missing.

* Fix imports

* Update tf docs

* Docs update

* Update generated TF resources

* Attempt to work around docs linter

* Add provision token tests

* Remove pipeline_uuid and step_uuid from protos

Also, fix deploment_environment_uuid field name.

* Remove references to removed fields in tests

* Switch to go-oidc/v3 and remove now-redundant nbf check

* Fix go.mod imports for the TF provider

* Fix event-handler go.mod

* Address review feedback; add 15s timeout to fetch provider metadata

* Update lib/bitbucket/token_validator.go

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>

* Fix build after constant rename

---------

Co-authored-by: rosstimothy <39066650+rosstimothy@users.noreply.github.com>
@public-teleport-github-review-bot

@timothyb89 - this PR will require admin approval to merge due to its size. Consider breaking it up into a series smaller changes.

Copy link

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-49337.d212ksyjt6y4yg.amplifyapp.com

@zmb3 zmb3 changed the title Machine ID: Add bitbucket join method for Bitbucket Pipelines joining (#48724) [v16] Machine ID: Add bitbucket join method for Bitbucket Pipelines joining Nov 22, 2024
Copy link

🤖 Vercel preview here: https://docs-41fp79jj8-goteleport.vercel.app/docs

Copy link

🤖 Vercel preview here: https://docs-3yn0tmu0j-goteleport.vercel.app/docs

@timothyb89
Copy link
Contributor Author

Successfully retested this backport on my test cluster. Custom build at https://builds.cursed.industries/teleport-v16.4.8-linux-amd64-bin.tar.gz for anyone curious. Only minor changes from master and v17, though go mod tidy insisted on giving go-oidc/v3 its own require block for reasons I can't comprehend.

@timothyb89 timothyb89 added this pull request to the merge queue Nov 27, 2024
Merged via the queue into branch/v16 with commit 5bfc4d8 Nov 27, 2024
44 checks passed
@timothyb89 timothyb89 deleted the timothyb89/v16/bitbucket-pipelines-joining branch November 27, 2024 03:35
@doggydogworld doggydogworld mentioned this pull request Dec 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants