github gravitational/teleport v17.7.3
Teleport 17.7.3

latest releases: v19.0.0-dev.removewasmpack.14, api/v19.0.0-dev.removewasmpack.14, v19.0.0-dev.removewasmpack.13...
3 days ago

Description

  • Aa namespace can now be specified for the tbot Kubernetes Secret destination. #58553
  • Fixed nested access list hierarchy propagation in case of tctl using UpsertAccessList API call. #58550
  • Added support for setting "*" in role kubernetes_users. #58478
  • Reduced audit log clutter by compacting contiguous shared directory read/write events into a single audit log event. #58445
  • Fixed an issue where VNet could not start because of "VNet is already running" error. #58389
  • Fixed incorrect scp exit status between OpenSSH clients and servers. #58328
  • Fixed sftp readdir failing due to broken symlinks. #58321
  • The following Helm charts now support obtaining the plugin credentials using tbot: teleport-plugin-discord, teleport-plugin-email, teleport-plugin-jira, teleport-plugin-mattermost, teleport-plugin-msteams, teleport-plugin-pagerduty, teleport-plugin-event-handler. #58300
  • Enabled separate request_object_mode setting for MFA flow in OIDC connectors. #58280
  • Teleport Connect now supports managed updates. #58261
  • Teleport Connect now brings focus back from the browser to itself after a successful SSO login. #58261
  • Fixed failure to close user accounting session. #58164
  • Fixed an uncaught exception in Teleport Connect on Windows when closing the app while the TELEPORT_TOOLS_VERSION environment variable is set. #58132
  • Fixed a Teleport Connect crash that occurred when assuming an access request while an application or database connection was active. #58110
  • Added paginated API ListDatabases, deprecate GetDatabases. #58104
  • Fixed modifier keys getting stuck during remote desktop sessions. #58102
  • Enable Azure joining with VMSS. #58093
  • Windows desktop LDAP discovery now auto-populates the resource's description field. #58081
  • TBot now emits a log message stating the current version on startup. #58057
  • Added experimental bound keypair joining method, disabled by default behind a flag. #57961
  • Updated Go to 1.24.6. #57860
  • Added new oidc joining mode for Kubernetes delegated joining to support providers that can be configured to provide public OIDC endpoints, like EKS, AKS, and GKE. #57800
  • Newly enrolled Kubernetes agents in will now use Managed Updates by default. #57783

Enterprise:

  • For OIDC SSO, the IdP app/client configured for MFA checks is no longer expected to return claims that map to Teleport roles. Valid claim to role mappings are only required for login flows.
  • Fixed SSO MFA method for applications when Teleport is the SAML identity provider and Per-Session MFA is enabled.
  • Fix: Handle disabling okta-requester role assignment.

Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

Plugins

Download the current release of Teleport plugins from the links below.

Don't miss a new teleport release

NewReleases is sending notifications on new releases.