GitHub proxy

[greedy52]

RFD:

• RFD 0178: GitHub proxy #44527

17.2:

• github integration resource
  • GitHub Proxy part 1: github integration resource #48999
  • GitHub proxy part 1.5: integration in web ui #49561
• git_server resource and RBAC
  • GitHub Proxy part 2: git_server resource, service, and RBAC #49393
  • GitHub proxy part 2.5: git_server cache #49564
• GitHub user cert generation and CA export
  • GitHub Proxy part 3: gen github user cert and export CA #49396
  • GitHub Proxy part 3.5: caching PluginStaticCredentials #49472
• tsh git ls and unified resource in UI
  • GitHub proxy part 4: tsh git ls with unified resource #49596
  • GitHub proxy part 4.5: git server in UI #49644
• GitHub OAuth flow (and tsh git login)
  • GitHub proxy part 5: OAuth flow to retrieve GitHub identity #49849
• SSH transport and RBAC (and tsh proxy git, tsh git config)
  • GitHub proxy part 6: proxing Git using SSH transport #49980
  • GitHub proxy part 6.5: tsh git ssh/clone/config #50044
  • GitHub proxy: download GitHub server keys #50891
• audit events and reporting
  • GitHub proxy part 7: audit events #49923
  • GitHub proxy: git command recorder #50505
• entitlements
  • https://github.com/gravitational/cloud/issues/11212
  • https://github.com/gravitational/cloud/pull/11260
• Doc guide
  • [docs] GitHub proxy admin guide and tsh reference #50772

17.3 or later:

• per-session MFA
• Submodule support
• Web UI enrolment
• Usage collection
• HSM support

enhancements:

• openssh config integration and/or Git protocol v2
• CA rotation
• integration test