Zac Bergquist

Another occurrence: https://console.cloud.google.com/cloud-build/builds/f66ca556-26ff-4ee8-948c-a5d77ccd35b1;step=0?project=ci-account

v12 hit today: https://github.com/gravitational/teleport/actions/runs/5286024048/jobs/9565053964?pr=27923 ``` apiserver_test.go:1322: Error Trace: /__w/teleport/teleport/lib/web/apiserver_test.go:1322 Error: Received unexpected error: websocket: bad handshake Test: TestResizeTerminal ```

I am able to reproduce this on master. Sometimes in a few minutes, other times it takes hours. I have seen the `bad handshake` error twice, and I've also seen...

``` apiserver_test.go:1648: Error Trace: /Users/zmb/src/teleport/lib/web/apiserver_test.go:1648 Error: Received unexpected error: websocket dialstatus code 404; body: { "error": { "message": "key \"/session_tracker/1f9fbc3e-4777-4a80-82a2-c734b2bfa7bc\" is not found" } } websocket: bad handshake Test: TestResizeTerminal...

> the system should correctly parse string literals within the conditions for the filter, whether they are enclosed in single or double quotes Our predicate language is based on Go...

As a side note - the same issue applies for label expressions. They aren't evaluated on create/update, so Teleport will accept a role update with an invalid label expression only...

I can confirm I do see this issue on macOS (Apple Silicon) on version 0.0.39 but I do not see it on 0.0.37.

@vapopov I've changed the title a bit so that it describes what the change does, not what the change _should_ do. I also removed the corresponding issue from the PR...

Do we have any idea how prevalent the deprecated format is in the wild? CI/CD tends to be set and forget, so I wouldn't be surprised if this change catches...

@strideynet should we merge this for v18?