Description
Teleport 9.1 is a minor release that brings several new features, security and bug fixes.
Security
Teleport build infrastructure was updated to use Go v1.17.9 to fix CVE-2022-24675, CVE-2022-28327 and CVE-2022-27536.
SQL backend (preview)
Teleport users can now use PostgreSQL or CockroachDB for storing auth server data.
See the documentation for more information:
https://goteleport.com/docs/setup/reference/backends/#postgresqlcockroachdb-preview
Server-side filtering and pagination
Searching and filtering resources is now handled on the server, improving the efficiency of queries with tsh
, tctl
, or the web UI.
The web UI loads resources faster by leveraging server-side pagination. Additionally, the web UI supports bookmarking searches by including the query in the URL.
Other improvements and fixes
- Fixed issue with stdin being ignored after refreshing expired credentials. #11847
- Fixed issue with
tsh
requiring host login when using identity files for some commands. #11793 - Added support for calling proxy over plain HTTP in insecure mode. #11403
- Fixed multiple issues that could lead to sessions output freezing. #11853
- Added optional gRPC client/server latency metrics. #11773
- Fixed issue with connecting to self-hosted databases in TLS insecure mode. #11758
- Improved error message when incorrect auth connector name is used. #11884
- Implemented multiple moderated session stability improvements. #11803, #11890
- Added authenticated tunnel mode to
tsh proxy db
command. #11808 - Fixed issue with application sessions not being deleted upon web logout. #11956
- Improved MySQL audit logging to include support for additional commands. #11949
- Improved reliability of Teleport services restart. #11795
- Fixed issue with Okta OIDC auth connector not working. #11718
- Added support for
json
andyaml
formatting to alltsh
commands. #12050 - Added support for setting
kubernetes_users
,kubernetes_groups
,db_names
,db_users
andaws_role_arns
traits when creating users. #12133 - Fixed potential CA rotation panic. #12004
- Updated
tsh db ls
to display allowed database usernames. #11942 - Fixed goroutine leak in OIDC client. #12078
Download
Download the current and previous releases of Teleport at https://gravitational.com/teleport/download.