Run integration tests on proto changes (#46218)

Integration tests only run on `api/types` changes so they don't end up validating if the crds are out of sync with protos.

Signed-off-by: Tiago Silva <tiago.silva@goteleport.com>

.github/workflows/unit-tests-integrations.yaml

@@ -28,6 +28,8 @@ jobs:
                - 'go.mod'
                - 'go.sum'
                - 'integrations/**'
+               - 'api/proto/**'
+               - 'proto/**'
                - 'api/types/**'
                - 'gen/**'
                - 'lib/tbot/**'

integrations/operator/crdgen/testdata/golden/resources.teleport.dev_accesslists.yaml

@@ -40,16 +40,37 @@ spec:
                   be audited.
                 nullable: true
                 properties:
-                  frequency:
-                    description: frequency is a duration that describes how often
-                      an access list must be audited.
-                    format: duration
-                    type: string
                   next_audit_date:
                     description: next_audit_date is when the next audit date should
                       be done by.
                     format: date-time
                     type: string
+                  notifications:
+                    description: notifications is the configuration for notifying
+                      users.
+                    nullable: true
+                    properties:
+                      start:
+                        description: start specifies when to start notifying users
+                          that the next audit date is coming up.
+                        format: duration
+                        type: string
+                    type: object
+                  recurrence:
+                    description: recurrence is the recurrence definition
+                    nullable: true
+                    properties:
+                      day_of_month:
+                        description: day_of_month is the day of month that reviews
+                          will be scheduled on. Supported values are 0, 1, 15, and
+                          31.
+                        x-kubernetes-int-or-string: true
+                      frequency:
+                        description: frequency is the frequency of reviews. This represents
+                          the period in months between two reviews. Supported values
+                          are 0, 1, 3, 6, and 12.
+                        x-kubernetes-int-or-string: true
+                    type: object
                 type: object
               description:
                 description: description is an optional plaintext description of the
@@ -76,34 +97,6 @@ spec:
                       are members of the access list.
                     type: object
                 type: object
-              members:
-                description: 'members describes the current members of the access
-                  list. TODO(mdwn): Remove this once members are independent objects.'
-                items:
-                  properties:
-                    added_by:
-                      description: added_by is the user that added this user to the
-                        access list.
-                      type: string
-                    expires:
-                      description: expires is when the user's membership to the access
-                        list expires.
-                      format: date-time
-                      type: string
-                    joined:
-                      description: joined is when the user joined the access list.
-                      format: date-time
-                      type: string
-                    name:
-                      description: name is the name of the member of the access list.
-                      type: string
-                    reason:
-                      description: reason is the reason this user was added to the
-                        access list.
-                      type: string
-                  type: object
-                nullable: true
-                type: array
               membership_requires:
                 description: membership_requires describes the requirements for a
                   user to be a member of the access list. For a membership to an access
@@ -127,6 +120,27 @@ spec:
                       user to obtain access.
                     type: object
                 type: object
+              owner_grants:
+                description: owner_grants describes the access granted by owners to
+                  this access list.
+                nullable: true
+                properties:
+                  roles:
+                    description: roles are the roles that are granted to users who
+                      are members of the access list.
+                    items:
+                      type: string
+                    nullable: true
+                    type: array
+                  traits:
+                    additionalProperties:
+                      items:
+                        type: string
+                      type: array
+                    description: traits are the traits that are granted to users who
+                      are members of the access list.
+                    type: object
+                type: object
               owners:
                 description: owners is a list of owners of the access list.
                 items:
@@ -135,6 +149,10 @@ spec:
                       description: description is the plaintext description of the
                         owner and why they are an owner.
                       type: string
+                    ineligible_status:
+                      description: ineligible_status describes if this owner is eligible
+                        or not and if not, describes how they're lacking eligibility.
+                      x-kubernetes-int-or-string: true
                     name:
                       description: name is the username of the owner.
                       type: string

integrations/operator/crdgen/testdata/golden/resources.teleport.dev_githubconnectors.yaml

@@ -42,6 +42,27 @@ spec:
               client_id:
                 description: ClientID is the Github OAuth app client ID.
                 type: string
+              client_redirect_settings:
+                description: ClientRedirectSettings defines which client redirect
+                  URLs are allowed for non-browser SSO logins other than the standard
+                  localhost ones.
+                nullable: true
+                properties:
+                  allowed_https_hostnames:
+                    description: a list of hostnames allowed for https client redirect
+                      URLs
+                    items:
+                      type: string
+                    nullable: true
+                    type: array
+                  insecure_allowed_cidr_ranges:
+                    description: a list of CIDRs allowed for HTTP or HTTPS client
+                      redirect URLs
+                    items:
+                      type: string
+                    nullable: true
+                    type: array
+                type: object
               client_secret:
                 description: ClientSecret is the Github OAuth app client secret.
                 type: string

integrations/operator/crdgen/testdata/golden/resources.teleport.dev_oidcconnectors.yaml

@@ -67,6 +67,27 @@ spec:
                 description: ClientID is the id of the authentication client (Teleport
                   Auth server).
                 type: string
+              client_redirect_settings:
+                description: ClientRedirectSettings defines which client redirect
+                  URLs are allowed for non-browser SSO logins other than the standard
+                  localhost ones.
+                nullable: true
+                properties:
+                  allowed_https_hostnames:
+                    description: a list of hostnames allowed for https client redirect
+                      URLs
+                    items:
+                      type: string
+                    nullable: true
+                    type: array
+                  insecure_allowed_cidr_ranges:
+                    description: a list of CIDRs allowed for HTTP or HTTPS client
+                      redirect URLs
+                    items:
+                      type: string
+                    nullable: true
+                    type: array
+                type: object
               client_secret:
                 description: ClientSecret is used to authenticate the client.
                 type: string

integrations/operator/crdgen/testdata/golden/resources.teleport.dev_openssheiceserversv2.yaml

@@ -102,10 +102,6 @@ spec:
                   type: string
                 nullable: true
                 type: array
-              public_addr:
-                description: PublicAddr is the public address where this server can
-                  be reached. DELETE IN 15.0. (joerger) Deprecated in favor of public_addrs.
-                type: string
               public_addrs:
                 description: PublicAddrs is a list of public addresses where this
                   server can be reached.

integrations/operator/crdgen/testdata/golden/resources.teleport.dev_opensshserversv2.yaml

@@ -101,10 +101,6 @@ spec:
                   type: string
                 nullable: true
                 type: array
-              public_addr:
-                description: PublicAddr is the public address where this server can
-                  be reached. DELETE IN 15.0. (joerger) Deprecated in favor of public_addrs.
-                type: string
               public_addrs:
                 description: PublicAddrs is a list of public addresses where this
                   server can be reached.