Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[v15] Issue cert.create events during device authentication #40872

Merged
merged 2 commits into from
Apr 24, 2024
Merged

[v15] Issue cert.create events during device authentication #40872

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0e7c4d8
Issue cert.create events during device authentication (#40848)
codingllama Apr 24, 2024
9c3a099
Fix compilation issues
codingllama Apr 24, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
17 changes: 17 additions & 0 deletions api/proto/teleport/legacy/types/events/events.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4188,6 +4188,9 @@ message Identity {
// BotName indicates the name of the Machine ID bot this identity was issued
// to, if any.
string BotName = 27 [(gogoproto.jsontag) = "bot_name,omitempty"];
// DeviceExtensions holds the device trust device extensions for the identity,
// if any.
DeviceExtensions DeviceExtensions = 28 [(gogoproto.jsontag) = "device_extensions,omitempty"];
}

// RouteToApp contains parameters for application access certificate requests.
Expand Down Expand Up @@ -4222,6 +4225,20 @@ message RouteToDatabase {
repeated string Roles = 5 [(gogoproto.jsontag) = "roles,omitempty"];
}

// DeviceExtensions holds certificate extensions (X.509 and SSH) for device
// trust.
//
// Mimics tlsca.DeviceExtensions.
message DeviceExtensions {
// DeviceID is the trusted device identifier.
string device_id = 1 [(gogoproto.jsontag) = "device_id,omitempty"];
// AssetTag is the device inventory identifier.
string asset_tag = 2 [(gogoproto.jsontag) = "asset_tag,omitempty"];
// CredentialID is the identifier for the credential used by the device to
// authenticate itself.
string credential_id = 3 [(gogoproto.jsontag) = "credential_id,omitempty"];
}

// AccessRequestResourceSearch is emitted when a user searches for resources as
// part of a search-based access request
message AccessRequestResourceSearch {
Expand Down