gravitational/teleport v15.4.22

Teleport 15.4.22

on GitHub

Description

• Added a search input to the cluster dropdown in the Web UI when there's more than five clusters to show. #48800
• Fixed bug in Kubernetes session recordings where both root and leaf cluster recorded the same Kubernetes session. Recordings of leaf resources are only available in leaf clusters. #48739
• Machine ID can now be forced to use the explicitly configured proxy address using the TBOT_USE_PROXY_ADDR environment variable. This should better support split proxy address operation. #48677
• Fixed undefined error in open source version when clicking on Add Application tile in the Enroll Resources page in the Web UI. #48617
• Updated Go to 1.22.9. #48582
• The teleport-cluster Helm chart now uses the configured serviceAccount.name from chart values for its pre-deploy configuration check Jobs. #48578
• Fixed a bug that prevented the Teleport UI from properly displaying Plugin Audit log details. #48463
• Fixed showing the list of access requests in Teleport Connect when a leaf cluster is selected in the cluster selector. #48442
• Fixed a rare "internal error" on older U2F authenticators when using tsh. #48403
• Fixed tsh play not skipping idle time when --skip-idle-time was provided. #48398
• Added a warning to tctl edit about dynamic edits to statically configured resources. #48393
• Fixed a Teleport Kubernetes Operator bug that happened for OIDCConnector resources with non-nil max_age. #48377
• Updated host user creation to prevent local password expiration policies from affecting Teleport managed users. #48162
• During the Set Up Access of the Enroll New Resource flows, Okta users will be asked to change the role instead of entering the principals and getting an error afterwards. #47958
• Fixed teleport_connected_resource metric overshooting after keepalive errors. #47950
• Fixed an issue preventing connections with users whose configured home directories were inaccessible. #47917
• Added a resolve command to tsh that may be used as the target for a Match exec condition in an SSH config. #47867
• Postgres database session start events now include the Postgres backend PID for the session. #47644
• Updated tsh ssh to support the -- delimiter similar to openssh. It is now possible to execute a command via tsh ssh user@host -- echo test or tsh ssh -- host uptime. #47494

Enterprise:

• Jamf requests from Teleport set "teleport/$version" as the User-Agent.

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

• Slack Linux amd64 | Linux arm64
• Mattermost Linux amd64 | Linux arm64
• Discord Linux amd64 | Linux arm64
• Terraform Provider Linux amd64 | Linux arm64 | macOS amd64 | macOS arm64 | macOS universal
• Event Handler Linux amd64 | Linux arm64 | macOS amd64
• PagerDuty Linux amd64 | Linux arm64
• Jira Linux amd64 | Linux arm64
• Email Linux amd64 | Linux arm64
• Microsoft Teams Linux amd64 | Linux arm64