Major new features

Session approvals (JIT access) - #2563

You can set up targets to require an admin to approve each session before the connection is allowed, with configurable timeout and approval caching

MFA enforcement policy - #2555

A global setting to require or prompt enrollment of a second factor for all users, with an option to exempt SSO users

Default credential policy setting for new users - #2557

Editable under Config → Policies, the new policy applies to all new users by default

Changes

• Support tickets for Kubernetes access by @LarsSven in #2562
• Sessions are now split into user sessions and target sessions, so a single HTTP session lists all its target connections together in the admin UI by @Eugeny in #2499
• Kubernetes exec, attach, port-forward and debug container usage is now logged in the structured audit log by @huguesgr in #2558
• SSH host keys are now stored in the database instead of the data directory. Existing key files are imported automatically. in #2570

Security fixes

[Minor] GHSA-hrfx-fm67-gv64 - Kubernetes clients see detailed error messages

Affected versions: up to 0.29.0

Kubernetes clients see exact reasons for certificate validation failures and possibly database errors.

[Moderate] GHSA-m2h4-9m63-6vqp - Stale HTTP sessions can access a recreated account

Affected versions: up to 0.29

If a user account is deleted and later recreated, existing HTTP sessions for the deleted user remain logged in.

[Moderate] GHSA-pw7m-635x-pmx7 - Stale Kubernetes sessions can access a recreated account

Affected versions: up to 0.29

If a user account is deleted and later recreated, existing Kubernetes sessions for the deleted user remain logged in.

[Moderate] GHSA-xr7p-gw3r-m3jx - Deleting a user does not close native sessions

Affected versions: up to 0.29

If a user account is deleted while having open native protocol sessions, those sessions remain active until close.

Fixes

• fixed #2597 - the public key and SSO credential update endpoints allowed moving credentials between users by @Eugeny in cee6464
• fixed #2598 - commands and subsystems started through a pending session approval were not recorded by @fukajan in 4b5f9c7
• A malformed external_host (a URL, a host:port pair) is now parsed (best effort) or produces a config warning by @Eugeny in 5b5cabf
• Admin and gateway API error responses now log the reason for the failure by @Eugeny in 79182c0
• 3xx HTTP responses are no longer logged as errors by @Eugeny in 4c0d046
• Deleting a user now closes all of their active sessions by @Eugeny in 7ad4017
• fixed #2590 - a race when running SQLite migrations by @Eugeny in #2595
• fixed #2594 - TOTP secrets created in the admin UI are now generated with a CSPRNG by @Eugeny in 79bbe01
• SSH: when a target dies, the client is now sent a disconnect instead of being left hanging (#2520) by @janisdombr in #2549
• Live UI updates (sessions/approvals) now work across cluster nodes by @Eugeny in #2587
• fixed #2585 - a malformed RDP handshake could spin a CPU core by @Eugeny in #2591
• Internal error details (database, LDAP, TLS, upstream errors) are now hidden in HTTP responses; end users will see a correlation ID that can be cross-referenced to the server logs by @janisdombr in #2547
• SSH: sessions with a large amount of output could end without the client being told the channel was closed, leaving ssh hanging by @janisdombr in #2521
• fixed #2536 - do not record keypresses during interactive RDP logon, add an option to disable keyboard recording completely by @Eugeny in #2537
• Keep the auto-reconnect secret out of the RDP logon log line by @janisdombr in #2542

Other

• Docker images migrated from Debian bullseye to bookworm by @janisdombr in #2550

Full Changelog: v0.28.6...v0.29.0