gravitational/teleport v8.1.5

Teleport 8.1.5

on GitHub

Description

This release of Teleport contains a fix.

• Fixed an issue impacting clusters that upgraded to 8.1.3 that broke the Web UI and audit log search functionality. #10193

Note this release contains 8.1.3 and 8.1.4 which were pulled due to the above issues. Those releases included the following.

8.1.4

This release of Teleport contains a few improvements and fixes.

• Rolled back session.connect event. #10156
• Add new teleport_build_info Prometheus metric. #10135
• Improvements to dynamically resolving tunnel address in reverse tunnel agents. #10139

8.1.3

Kubernetes Access security fix

• Fixed issue where labels of the target Kubernetes Service were ignored when calculating kubernetes_users and kubernetes_groups. #9955

We recommend all Kubernetes Access users to upgrade their Proxies and Kubernetes Services.

Other improvements and fixes

• Added support for locking Access Requests. #9478
• Added support for jitter and backoff to prevent thundering herd situations. #9133
• Added support for nested groups with Google SSO. #9697
• Added support for pulling multiple domain groups from Google Workspace. #9697
• Added event session.connect which is emitted when connecting to a non-Teleport server. #9370
• Added Access Request information to audit events. #9758
• Added client certificate authentication support for GCP Cloud SQL #9991
• Added support for canned AWS S3 ACLs. #9042
• Improved ACME support to automatically renew certificates affected by the Let's Encrypt TLS-ALPN-01 issues. #9984
• Improved Desktop Access performance. #9817
• Improved network utilization by replacing cluster periodics with watchers. #9609
• Fixed reverse tunneling for Windows Desktop Connections. #9740
• Fixed issue where database auto-discovery could fail with databases created by CloudFormation. #9742
• Fixed issue with Application Access in High Availability (HA) configurations. #9288
• Fixed issue where Database Access could fail to connect to RDS instance in ca-central-1. #9890
• Fixed issue with auto-discovery and RDS or Aurora permissions. #9426
• Fixed issue with Desktop Access token type name inconsistencies. #9756
• Fixed issue where prefixing an application name with "kube" would make the proxy route it as a Kubernetes cluster. #9777
• Fixed issue where tsh db ls could show incorrect information. #9386
• Fixed issue where Database Access would not register Aurora reader instances. #9668
• Fixed issue with AWS credential brokering with federated accounts. #9792
• Fixed regression in Kubernetes Access performance introduced in Teleport 8.1.1. #10011
• Fixed an issue where OIDC UserInfo were not respected. #9951

Download

Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.