Release 13.2.2 by r0mant · Pull Request #29158 · gravitational/teleport

r0mant · 2023-07-14T23:11:14Z

helm: default to distroless images ([v13] helm: default to distroless images #24708)
Release 13.0.0-alpha.1 (Release 13.0.0-alpha.1 #24707)
[v13] Make audit log details dialog larger. ([v13] Make audit log details dialog larger. #24723)
Prevent multiple discovery agents to race against each other ([v13] Prevent multiple discovery agents to race against each other #24715)
Document discovery_group parameter ([v13] Document discovery_group parameter #24712)
[v13] Kubernetes License check for Kubernetes Proxies ([v13] Kubernetes License check for Kubernetes Proxies #24714)
[v13] Tweak protogen to not change protos from cloud ([v13] Tweak protogen to not change protos from cloud #24738)
[v13] Use CompareAndSwap for OktaAssignments instead of lock. ([v13] Use CompareAndSwap for OktaAssignments instead of lock. #24749)
Satisfy the messaging linter (Backport #24603 to branch/v13 #24767)
Fix memory leak on Kubernetes port-forwarding ([v13] Fix memory leak on Kubernetes port-forwarding #24764)
Remove duplicate imports ([v13] Remove duplicate imports #24758)
Acquire user certs from root cluster during web file transfers ([v13] Acquire user certs from root cluster during web file transfers #24775)
Updated promotion pipelines to publish OS packages in series (Updated promotion pipelines to publish OS packages in series #24753) (OS packaging and auto updates backport - v13 #24779)
[v13] Revert usage of session.SetEnvs ([v13] Revert usage of session.SetEnvs #24801)
Fix markdown headers in changelog ([v13] Fix markdown headers in changelog #24800)
Remove quay.io image promotion ((v13) Remove quay.io image promotion #24776)
[v13] Add docs subsection about joining services ([v13] Add docs subsection about joining services #24755)
[v13] docs: make consistent access request plugins helm configuration and instructions ([v13] docs: make consistent access request plugins helm configuration and instructions #24759)
docs: bump cloud to 12.2.3 (docs: bump cloud to 12.2.3 #24769) ([v13] docs: bump cloud to 12.2.3 #24836)
[v13] Checks proxy server and token set for join openssh ([v13] Checks proxy server and token set for join openssh #24744)
[v13] docs: document error with older SSM agent version ([v13] docs: document error with older SSM agent version #24832)
[v13] docs: provider faq answer for configurable maintenance times for cloud ([v13] docs: provider faq answer for configurable maintenance times for cloud #24854)
Add lock target matcher and fix button themes ([v13] [web] Add lock target matcher and fix button themes #24859)
Do not change proto user on make grpc ([v13] Do not change proto user on make grpc #24848)
Rename device attestation types ([v13] Rename device attestation types #24731)
[v13] Integrations: AWS OIDC - ListDatabases action ([v13] Integrations: AWS OIDC - ListDatabases action #24814)
refactor how 'tsh scp' destinations are parsed ([v13] refactor how 'tsh scp' destinations are parsed #24860)
Remove unnecessary sudo from Connect uninstall docs ([v13] Remove unnecessary sudo from Connect uninstall docs #24887)
Update crewjam/saml dependency. ([v13] Update crewjam/saml dependency. #24897)
[v13] Edit Homebrew installation instructions ([v13] Edit Homebrew installation instructions #24825)
Update Cloud FAQ doc to remove latency note ([v13] Update Cloud FAQ doc to remove latency note #24892)
Update e ref ([v13] Update e ref #24895)
Use apt.releases to fetch pub key ([v13] Use apt.releases to fetch pub key #24876)
[v13] docs: remove duplicate content in oracle guide ([v13] docs: remove duplicate content in oracle guide #24906)
[v13] docs: provide warning on Amazon Linux 2023 installations ([v13] docs: provide warning on Amazon Linux 2023 installations #24852)
[v13] Makes the Per Role per session mfa example accurate ([v13] Makes the Per Role per session mfa example accurate #24926)
docs: remove unneeded sudo for removing user data dirs ([v13] docs: remove unneeded sudo for removing user data dirs #24917)
[v13] SQL Server access with PKINIT documentation page ([v13] SQL Server access with PKINIT documentation page #24838)
docs: make adopters table markdown for cleaner look ([v13] docs: make adopters table markdown for cleaner look #24950)
clarify tctl command location and secret destination ([v13] docs: MySQL secrets clarification #24981)
replace 'machine' with 'host' or 'workstation' ([v13] docs: replace 'machine' with 'host' or 'workstation' #24985)
don't rely on info in SSH user cert when connecting to agentless nodes ([v13] don't rely on info in SSH user cert when connecting to agentless nodes #24991)
[v13] local proxy not required for mysql separate port ([v13] local proxy not required for mysql separate port #24826)
Pass the auth.Server itself to inventory.NewController ([v13] Pass the auth.Server itself to inventory.NewController #25008)
Unify errors returned from ProxyClient when targets are ambiguous ([v13] Unify errors returned from ProxyClient when targets are ambiguous #25009)
docs: Adds common Teleport configure,start and helm charts for non-iam db access guides ([v13] docs: Adds common Teleport configure,start and helm charts for non-iam db access guides #24999)
docs: fix directory instruction for docs contributing ([v13] docs: fix directory instruction for docs contributing #24993)
[v13] docs: Change listen_addr to web_listen_addr in custom Helm deployment guide ([v13] docs: Change listen_addr to web_listen_addr in custom Helm deployment guide #24975)
update go.mod and golangci to go1.20 ([v13] update go.mod and golangci to go1.20 #24970)
Add the favicon back ([v13] Add the favicon back #24966)
[v13] Fix disconnect_expired_cert when Kube Identity forwarding is used ([v13] Fix disconnect_expired_cert when Kube Identity forwarding is used #25058)
Go spell fixes ([v13] Log and test spell fixes #25060)
[v13] fix reverse tunnel cannot connect if proxy address contains https ([v13] fix reverse tunnel cannot connect if proxy address contains https #25062)
Log informative messages for device authn failures ([v13] Log informative messages for device authn failures #24911)
docs: fix spelling and remove misspelled word from spellcheck skip ([v13] docs: fix spelling and remove misspelled word from spellcheck skip #25028)
Hide tsh bench commands ([v13] Hide tsh bench commands #25092)
[v13] Order sudoers file lines by role name ([v13] Order sudoers file lines by role name #24793)
OktaAssignment and UserGroup in auth cache. ([v13] OktaAssignment and UserGroup in auth cache. #25066)
Fixes for teleport-kube-agent-updater (Fixes for teleport-kube-agent-updater #24746) ([v13] Fixes for teleport-kube-agent-updater #25029)
[v13] Fixes cache init problem with missing kube_service ([v13] Fixes cache init problem with missing kube_service #25006)
Add full IP pinning enforcement (Add full IP pinning enforcement #24743) ([v13] Add full IP pinning enforcement #25053)
Add in group labels for role conditions. ([v13] Add in group labels for role conditions. #25081)
docs: Add warning about TLS multiplexing to Kubernetes IAM joining ([v13] docs: Add warning about TLS multiplexing to Kubernetes IAM joining #24821)
Join Script: fix tarball folder for ent builds ([v13] Join Script: fix tarball folder for ent builds #25077)
[v13] helm: mount kube ca certs through projected volumes ([v13] helm: mount kube ca certs through projected volumes #25103)
ensure forwarded SSH agent is always closed ([v13] ensure forwarded SSH agent is always closed #25074)
[v13] Create locks using the correct property ([v13] Create locks using the correct property #25127)
Update e-ref (Update e-ref #25132)
[v13] Add auto-enroll toggle to device trust config ([v13] Add auto-enroll toggle to device trust config #24934)
[v13] docs: append cluster name for example ansible hosts list ([v13] docs: append cluster name for example ansible hosts list #25123)
[v13] Document relative link paths in partials ([v13] Document relative link paths in partials #25118)
Return auto-enroll status on Ping (Return auto-enroll status on Ping #24752) ([v13] Return auto-enroll status on Ping #25142)
Add login hooks. (Add login hooks. #24828) ([v13] Add login hooks. #25106)
fix session recordings from Web UI to agentless nodes having name set as node UUID ([v13] fix session recordings from Web UI to agentless nodes having name set as node UUID #25140)
Release 13.0.0-alpha.2 (Release 13.0.0-alpha.2 #25094)
Headless Login explicit username (Headless Login explicit username #24689) ([v13] Headless Login explicit username #25111)
[v13] Avoid prompting users for mfa when using tsh ssh --headless ([v13] Avoid prompting users for mfa when using tsh ssh --headless #25164)
[v13] WebDiscover: Finish implementing Enroll Database Screen ([v13] WebDiscover: Finish implementing Enroll Database Screen #25108)
Add headings to the Cloud FAQ ([v13] Add headings to the Cloud FAQ #25122)
fix github url formatting ([v13] fix github url formatting #25104)
[v13] Simplify Okta assignment statuses. ([v13] Simplify Okta assignment statuses. #25188)
[v13] Connect: Fix logout sequence ([v13] Connect: Fix logout sequence #25181)
[v13] Update e ref. ([v13] Update e ref. #25204)
fix: avoid inadvertent deletion of active HSM keys ([v13] fix: avoid inadvertent deletion of active HSM keys #25207)
- Save ssh_service.public_addr values to Server.PublicAddrs instead of discarding them ([v13] Use ssh_service.public_addrs in IsMFARequired check #25219)
Add key attestation to generate user certs to catch non-login flows. ([v13] Add hardware key attestation flow to GenerateUserCerts #24955)
Alphabetize the GUI Client page ([v13] Alphabetize the GUI Client page #25121)
Move db cert renewal message to debug log ([v13] Move db cert renewal message to debug log #25221)
[v13] Show <1m for remaining tsh status valid time for last minute ([v13] Show <1m for remaining tsh status valid time for last minute #25224)
Addresses Using terraform code for aws ha-cluster with graviton ami does not start cluster #23554 (Addresses #23554 #25245)
[v13] docs: Login Rule k8s operator docs ([v13] docs: Login Rule k8s operator docs #25157)
[v13] Fix underlying reader not a terminal issues ([v13] Fix underlying reader not a terminal issues #25241)
Use the correct emitter in auth.TLSServer ([v13] Use the correct emitter in auth.TLSServer #25273)
[v13] Clean up Drone slack notifcations ([v13] Clean up Drone slack notifcations #25216)
Bump gh-trigger-workflow timeout to 2h30m ([v13] Bump gh-trigger-workflow timeout to 2h30m #25169)
Do not try to verify PROXY signature for non-Teleport TLVs ([v13] Do not try to verify PROXY signature for non-Teleport TLVs #25303)
Extend cross-account discovery for EKS clusters ([v13] Extend cross-account discovery for EKS clusters #25254)
[v13] Retry search in Connect if current workspace cert has expired ([v13] Retry search in Connect if current workspace cert has expired #25179)
Properly handle SAML IdP enable/disable. ([v13] Properly handle SAML IdP enable/disable. #25310)
[v13] TLS routing behind LB support for IAM join ([v13] TLS routing behind LB support for IAM join #25144)
[v13] Record and verify WebAuthn RPIDs ([v13] Record and verify WebAuthn RPIDs #25282)
Fix TestAuthSignKubeconfig test ([v13] Fix TestAuthSignKubeconfig test #25268)
Add option to override kube context on tsh kube login ([v13] Add option to override kube context on tsh kube login #25252)
[v13] Fuzz TDP protocol, fix two issues. ([v13] Fuzz TDP protocol, fix two issues. #25307)
[v13] Update headless tsh command descriptions ([v13] Update headless tsh command descriptions #25146)
Fix cluster alerts timeout ([v13] Fix cluster alerts timeout #25299)
docs: update onelogin screenshot ([v13] docs: update onelogin screenshot #25332)
Define distinct types for all device events ([v13] Define distinct types for all device events #25319)
terraform: enable ACLs in the certs bucket ([v13] terraform: enable ACLs in the certs bucket #25336)
fix file copy check not happening for agentless SSH connections ([v13] fix file copy check not happening for agentless SSH connections #25347)
docs: add information on viewing status and logs for systemd service ([v13] docs: add information on viewing status and logs for systemd service #25198)
[v13] Update e ref ([v13] Update e ref #25350)
helm: fix updater readiness port ([v13] helm: fix updater readiness port #25351)
Windows user creation (Windows user creation #24780) ([v13] Windows user creation (#24780) #25349)
webapi cleanup (webapi cleanup #24363) ([v13] webapi cleanup (#24363) #25367)
[v13] docs: update docker guide to allow for server access and show troubleshooting ([v13] docs: update docker guide to allow for server access and show troubleshooting #25343)
docs: remove dynamic database resource in example aws dynamodb ([v13] docs: remove dynamic database resource in example aws dynamodb #25339)
IP pinning is now supported for all types of access ([v13] [docs] IP pinning is now supported for all types of access #25369)
Get safe destination address when proxying to cluster ([v13] Get safe destination address when proxying to cluster #25417)
WebDiscover: Hookup AWS RDS Flow (WebDiscover: Hookup AWS RDS Flow #24873) ([v13] WebDiscover: Hookup AWS RDS Flow (#24873) #25435)
[v13] docs: update YubiHSM2 docs ([v13] docs: update YubiHSM2 docs #25358)
Redo web lock feature (Web: Redo locking feature #25305) ([v13] Redo web lock feature (#25305) #25439)
Add missing Connection header for ALPN connection upgrade ([v13] Add missing Connection header for ALPN connection upgrade #25410)
[v13] Update Azure AD SSO screenshot ([v13] Update Azure AD SSO screenshot #25361)
Update e-ref (Update e-ref #25448)
[v13] WebAPI: thumbprint endpoint ([v13] WebAPI: thumbprint endpoint #25337)
docs: automatic user creation for windows desktops ([v13] docs: automatic user creation for windows desktops #25363)
docs: correct gcp install headers ([v13] docs: correct gcp install headers #25425)
Return friendly errors when sessions are prevented due to a lock ([v13] Return friendly errors when sessions are prevented due to a lock #25483)
[v13] Update e ref. ([v13] Update e ref. #25473)
Fix backwards compatability of GenerateUserSingleUseCerts ([v13] Fix backwards compatibility of GenerateUserSingleUseCerts #25485)
Allow unknown fields when unmarshaling types.MFADevice ([v13] Allow unknown fields when unmarshaling types.MFADevice #25444)
[v13] fix connecting to agentless leaf nodes ([v13] fix connecting to agentless leaf nodes #25496)
[v13] chore: Bump Go to 1.20.4 ([v13] chore: Bump Go to 1.20.4 #25504)
[v13] darwin: Use notarytool to notarize instead of altool ([v13] darwin: Use notarytool to notarize instead of altool #25454)
[v13] Fix TestKubernetesLicenseEnforcement data race ([v13] Fix TestKubernetesLicenseEnforcement data race #25478)
Sync CHANGELOG.md with branch/v12 ([v13] Sync CHANGELOG.md with branch/v12 #25500)
[v13] Only pass process.env.NODE_ENV through vite ([v13] Only pass process.env.NODE_ENV through vite #25510)
Updates distroless Dockerfile to handle fips realeases ([v13] Updates distroless Dockerfile to handle FIPS releases #25452)
Remove Origin from cloud converters ([v13] Remove Origin from Database cloud converters #25458)
Allow RoleRemoteProxy to list 'kube_servers` when no Kube license ([v13] Allow RoleRemoteProxy to list kube_servers when cluster isn't licensed for Kubernetes #25492)
[v13] Use web address when appropriate for a jump host ([v13] Use web address when appropriate for a jump host #25512)
Capitalize Teleport in command/args ([v13] Capitalize Teleport in command/args #25544)
Remove lib/auth dependency from servicecfg ([v13] Remove lib/auth dependency from servicecfg #25547)
[v13] Document HA for Access Request plugins ([v13] Document HA for Access Request plugins #25550)
[v13] banner dependencies ([v13] banner dependencies #25196)
add billing to navigation (add support for teleport.e #1206 #25192) ([v13] add billing to navigation (#25192) #25488)
[v13] WebDiscover: Put back IamPolicy screen and some tweaks ([v13] WebDiscover: Put back IamPolicy screen and some tweaks #25491)
Disallow OktaAssignment deletion from tctl. ([v13] Disallow OktaAssignment deletion from tctl. #25464)
[v13] Support UI methods for user groups, label match user groups in API. ([v13] Support UI methods for user groups, label match user groups in API. #25576)
Make ProtoPostgres support PROXY protocol ([v13] Make ProtoPostgres support PROXY protocol #25528)
docs: update CloudHSM docs ([v13] docs: update CloudHSM docs #25569)
theme-related fixes ([Web] Theme-related fixes #25119) ([v13] Theme-related fixes #25575)
Update metrics docs ([v13] Update metrics docs #25590)
Fix kube agent names ([v13] Fix kube agent property names #25589)
update eref ([v13] Update e ref #25600)
[v13] Update WebUI database type ([v13] Update WebUI database type #25471)
[v13] Account for request errors when displaying "no results" message in the search bar ([v13] Account for request errors when displaying "no results" message in the search bar #25324)
[v13] Add missing user groups entry to getEmptyResource state. ([v13] Add missing user groups entry to getEmptyResource state. #25613)
[v13] Use new device event layout in Web UI ([v13] Use new device event layout in Web UI #25554)
[v13] Define a new DeviceEvent proto with the usual embeds ([v13] Define a new DeviceEvent proto with the usual embeds #25553)
[v13] Update e ref. ([v13] Update e ref. #25638)
[v13] Theme fixes (Theme fixes #24883) ([v13] Theme fixes (#24883) #25640)
[v13] Update e ref. ([v13] Update e ref. #25649)
Reuse auth connection for Okta client ([v13] Reuse auth connection for Okta client #25645)
redesign participant modes join menu ([Web] Add descriptions to session join modes menu #24961) ([v13] Add descriptions to session join modes menu #25652)
Update role-templates.mdx ([v13] Update role-templates.mdx to include clarity around local users and custom traits #25629)
docs: mention Machine ID where tctl auth sign is used ([v13] docs: mention Machine ID where tctl auth sign is used #25609)
[v13] build: Support arm64 and universal binaries for MacOS ([v13] build: Support arm64 and universal binaries for MacOS #25679)
[v13] Proto changes for TPM Platform Attestation flow ([v13] Proto changes for TPM Platform Attestation flow #25673)
[v13] Ensure useDocumentGateway creates the gateway only on mount ([v13] Ensure useDocumentGateway creates the gateway only on mount #25623)
[v13] UI improvements for empty search input ([v13] UI improvements for empty search input #25621)
Remove logging of search results in Connect ([v13] Remove logging of search results in Connect #25688)
[v13] Close search bar in Connect on blur ([v13] Close search bar in Connect on blur #25690)
Add kube local proxy bound MFA sessions ([v13] Add kube local proxy bound MFA sessions #25680)
[v13] Add specific message for network errors on app launch (Web UI) ([v13] Add specific message for network errors on app launch (Web UI) #25607)
[v13] Add client compatibility to installation guide ([v13] Add client compatibility to installation guide #25684)
[v13] Add SFTP approval process to web during moderated sessions ([v13] Add SFTP approval process to web during moderated sessions #25596)
Add UserGroups to RequestableResourceKinds. ([v13] Add UserGroups to RequestableResourceKinds. #25709)
[v13] Use solid color for table row border to fix Safari rendering issue ([v13] Use solid color for table row border to fix Safari rendering issue #25711)
use "google.golang.org/protobuf" to clone protobuf messages ([v13] use "google.golang.org/protobuf" to clone protobuf messages #25712)
Update e ref (Update e ref #25726)
Release 13.0.0-rc.1 (Release 13.0.0-rc.1 #25734)
[v13] docs: move docs links from absolute to relative ([v13] docs: move docs links from absolute to relative #25735)
[v13] docs: update cloud proxy service architecture language ([v13] docs: update cloud proxy service architecture language #25723)
[v13] docs: fix claims to roles description in access controls reference ([v13] docs: fix claims to roles description in access controls reference #25632)
[v13] Refresh the HA guide ([v13] Refresh the HA guide #25671)
[v13] Improve API client connection failure feedback ([v13] Improve API client connection failure feedback #25562)
[v13] Support additional expected instance roles. ([v13] Support additional expected instance roles. #25741)
[v13] Use the GHA base container for Lint (Docs) ([v13] Use the GHA base container for Lint (Docs) #25715)
Add logger to the authorizer. ([v13] Add logger to the authorizer. #25757)
[v13] docs: provide instructions on getting enterprise file from new license Teleport Account ([v13] docs: provide instructions on getting enterprise file from new license Teleport Account #25752)
[v13] dronegen: Call release-mac for universal builds ([v13] dronegen: Call release-mac for universal builds #25681)
[v13] Log troubleshooting information when InvalidInstanceID errors are found during EC2 discovery ([v13] Log troubleshooting information when InvalidInstanceID errors are found during EC2 discovery #25642)
[v13] docs: document "and" logic for labels ([v13] docs: document "and" logic for labels #25749)
Make notification more readable ([v13] Connect: Make notification more readable #25792)
Update docs related to the search bar (Update docs related to the search bar #24515) ([v13] Update docs related to the search bar (#24515) #25790)
[v13] Show errors if fetching ParameterPicker suggestions fails ([v13] Show errors if fetching ParameterPicker suggestions fails #25788)
add agent config scaling section ([v13] add agent config scaling section #25797)
Reuse resources for tsh bench ssh --random ([v13] Reuse resources for tsh bench ssh --random #25698)
[v13] Auto-enroll devices on user login ([v13] Auto-enroll devices on user login #25704)
[v13] Add SetFeatures method to modules ([v13] Add SetFeatures method to modules #25654)
[v13] Update e ref. ([v13] Update e ref. #25813)
Correct SAML IdP session read permission. ([v13] Correct SAML IdP session read permission. #25799)
usermgmt: Use actual Teleport service group name rather than hardcoded string ([v13] usermgmt: Use actual Teleport service group name rather than hardcoded string #25826)
update docs ([v13] [Docs] Update Web UI active sessions instructions screenshot #25664)
make some chatty dynamodb logs trace ([v13] Convert Some DynamoDB logs to Trace #25822)
[v13]Include teleport-windows-auth in OSS releases ([v13] Include teleport-windows-auth in OSS releases #25839)
[v13] Fix access to leaf resources ([v13] Fix access to leaf resources #25852)
fix auditlog error ([v13] [Web] Fix audit log date matcher error #25842)
Update e ref ([v13] Update e ref #25830)
[v13] Move upcoming releases to Home section to make it more visible ([v13] Move upcoming releases to Home section to make it more visible #25859)
[v13] Prevent panic when fileTransferRequestC is closed. ([v13] Prevent panic when fileTransferRequestC is closed. #25861)
desktop discovery theme fixes ([v13] [Web] Desktop Discovery UI fixes #25841)
Release 13.0.0 (Release 13.0.0 #25834)
Update docs version vars for v13 ([v13] Update docs version vars for v13 #25352)
Fix application resource headers rewrite spec ([v13] [docs] Fix application resource headers rewrite spec #25863)
Remove not a valid Unix login logging ([v13] Remove not a valid Unix login logging #25838)
Add ability to enable trace logging level ([v13] Add ability to enable trace logging level #25833)
Fix application resource headers rewrite spec ([v13] [docs] Fix application resource headers rewrite spec #25863)
Remove not a valid Unix login logging ([v13] Remove not a valid Unix login logging #25838)
Add ability to enable trace logging level ([v13] Add ability to enable trace logging level #25833)
[v13] enable acl in single aws terraform s3 ([v13] enable acl in single aws terraform s3 #25854)
[v13] Fix flaky resolveNetworkAddress test ([v13] Fix flaky resolveNetworkAddress test #25874)
[v13] Make TS a dev dep of root package.json, fix design dev deps ([v13] Make TS a dev dep of root package.json, fix design dev deps #25875)
Simplify the Getting Started experience ([v13] Simplify the Getting Started experience #25519)
[v13] Remove code related to the command bar from Connect ([v13] Remove code related to the command bar from Connect #25898)
Add IsUsageBased to features and send it to web UI (Add IsUsageBased to features and send it to web UI #25465) ([v13] Add IsUsageBased to features and send it to web UI (#25465) #25860)
provide starting message for tar ball install ([v13] provide starting message for tar ball install #25904)
[v13] check for correct kube and ssh listen address in starting message ([v13] check for correct kube and ssh listen address in starting message #25907)
docs: document the updater (docs: document the updater #24628) ([v13] docs: document the updater #25913)
Makefile: cache go env values ([v13] Makefile: cache go env values #25894)
[v13] Add the debug command tsh fido2 attobj ([v13] Add the debug command tsh fido2 attobj #25923)
Add t_source to be standard ([v13] Add t_source to be standard #25720)
[v13] Team plan CTAs (Team plan CTAs #25073) ([v13] Team plan CTAs (#25073) #25701)
[v13] Okta documentation. ([v13] Okta documentation. #25940)
[v13] backport team plan CSP and RBAC ([v13] backport team plan CSP and RBAC #25928)
[v13] docs: instruct users to use apt/yum/dnf instead of dpkg/rpm ([v13] docs: instruct users to use apt/yum/dnf instead of dpkg/rpm #25937)
helm: warn about teleportVersionOverride and scratch risks (Improve chart documentation and best practices #25601) ([v13] Improve chart documentation and best practices #25914)
Update the supported versions table ([v13] Update the supported versions table #25902)
Bump Buf to 1.18.0 ([v13] Bump Buf to 1.18.0 #25888)
[v13] don't delete unit schedule file ([v13] don't delete unit schedule file #25943)
[v13] warn about v13 repos not containing v14 Teleport ([v13] warn about v13 repos not containing v14 Teleport #25954)
build: Scope RUST_VERSION var to single target ([v13] build: Scope RUST_VERSION var to single target #25962)
[v13] add redirect to windows user creation instructions to host user creation doc ([v13] add redirect to windows user creation instructions to host user creation doc #25965)
Remove test case which uses local profile. ([v13] Fix flaky test TestLoadConfigFromProfile #25969)
[v13] Introduce inventory service counts. ([v13] Introduce inventory service counts. #25944)
[v13] Upgrade TypeScript to 5.0.4 ([v13] Upgrade TypeScript to 5.0.4 #25983)
[v13] Allow adding 'locked' features to menu items and routes ([v13] Allow adding 'locked' features to menu items and routes #25952)
[v13] TLS Routing behind ALB Connect support for SSH and Database access. ([v13] TLS Routing behind ALB Connect support for SSH and Database access. #25899)
Add events to cta clicks (Add events to cta clicks #25325) ([v13] Add events to cta clicks (#25325) #25986)
Provide client address information in transport request ([v13] Provide client address information in transport request #25993)
Install Scripts: add updater package ([v13] Install Scripts: add updater package #25971)
[v13] fix: use errors.Is for all EOF comparisons ([v13] fix: use errors.Is for all EOF comparisons #26017)
[v13] Note that the SAML IdP now supports HSM. ([v13] Note that the SAML IdP now supports HSM. #26005)
[v13] fix: truncate YubiHSM2 key IDs ([v13] fix: truncate YubiHSM2 key IDs #25816)
[v13] Okta assignment targets/statuses are human readable in the CLI. ([v13] Okta assignment targets/statuses are human readable in the CLI. #26023)
[v13] Change Helm reference --set formatting ([v13] Change Helm reference --set formatting #25509)
gh-trigger-workflow: Retry transient server errors ([v13] drone: gh-trigger-workflow: Retry transient server errors #25972)
Add docker cli to buildbox ([v13] Add Docker CLI to buildbox #25975)
[v13] Add in Okta audit events. ([v13] Add in Okta audit events. #26000)
docs: Update MySQL Server Version ([v13] docs: Update MySQL Server Version #26052)
[v13] tctl: improve alert ack flows ([v13] tctl: improve alert ack flows #26040)
Improve AWS OIDC Integration extensibility ([v13] Improve AWS OIDC Integration code extensibility #26050)
docs: AWS OpenSearch ([v13] docs: AWS OpenSearch #26051)
[v13] Document how to open a local terminal in Teleport Connect ([v13] Document how to open a local terminal in Teleport Connect #26061)
Clean up staticConfig mocks ([v13] Clean up staticConfig mocks #26059)
[v13] docs: clarify host labeling for Windows desktops ([v13] docs: clarify host labeling for Windows desktops #25524)
create e-imports package (create e-imports package #25992) ([v13] create e-imports package (#25992) #26044)
[v13] Show resource search errors in search bar when fetching a preview ([v13] Show resource search errors in search bar when fetching a preview #26073)
Use the correct value for DeviceAuthenticateEvent ([v13] Use the correct value for DeviceAuthenticateEvent #26068)
push the feature check to ctx.init (billing banner appears on application load #26007) ([v13] billing banner appears on application load (#26007) #26071)
[v13] usagereporter: split the ssh_port session start into ssh_port_v2, k8s_port ([v13] usagereporter: split the ssh_port session start into ssh_port_v2, k8s_port #26062)
[v13] [docs] TLS routing behind l7 load balancer preview ([v13] [docs] TLS routing behind l7 load balancer preview #26077)
bump e-ref ([v13] bump e-ref #26101)
[v13] Use os.UserHomeDir where possible ([v13] Use os.UserHomeDir where possible #25999)
[v13] Moderation Session docs update ([v13] Moderation Session docs update #26082)
docs: add note about curl on Windows ([v13] docs: add note about curl on Windows #26088)
Return a better message on "lacks registered credentials" errors ([v13] Return a better message on "lacks registered credentials" errors #26103)
[v13] Fixes a SharedDirectoryAnnounce incompatibility ([v13] Fixes a SharedDirectoryAnnounce incompatibility #26090)
[v13] provides info on Oracle Wallet location when using Oracle Orapki generation ([v13] provides info on Oracle Wallet location when using Oracle Orapki generation #26133)
[v13] docs: update plugin and docker version ([v13] docs: update plugin and docker version #26113)
[v13] Fix GoRoutine leak in authclient.Connect ([v13] Fix GoRoutine leak in authclient.Connect #26125)
Move the favicon so Teleport serves the static file ([v13] Move the favicon so Teleport serves the static file #26144)
Backport Assist UI ([v13] Backport Assist UI #26145)
[v13] Search bar: Take cluster filter into account when listing offline clusters ([v13] Search bar: Take cluster filter into account when listing offline clusters #26127)
Set Cloud version to 12.3.3 ([v13] Set Cloud version to 12.3.3 #26036)
TLS Routing behind ALB: access request Kube Pod search ([v13] TLS Routing behind ALB: access request Kube Pod search #26128)
Modify error messages for customer portal to Teleport account ([v13] Modify error messages for customer portal to Teleport account #26139)
docs: fix invalid characters in kubernetes service example in discovery troubleshooting ([v13] docs: fix invalid characters in kubernetes service example in discovery troubleshooting #26157)
Update e ref ([v13] Update e ref #26163)
[v13] Clarify Auth Service backend permissions ([v13] Clarify Auth Service backend permissions #26076)
[v13] Fix panic when using proxy peering ([v13] Fix panic when using proxy peering #26174)
Fix Helm chart Join token secret creation (Fix Helm chart Join token secret creation #26055) ([v13] Fix Helm chart Join token secret creation #26175)
docs: Fix link to standalone Windows auth service ([v13] docs: Fix link to standalone Windows auth service #26179)
[v13] Add pprof diagnostics endpoints to tbot ([v13] Add pprof diagnostics endpoints to tbot #26117)
athena audit logs - query ([v13] athena audit logs - query #24740)
[v13] only show windows domain in audit log ui if applicable ([v13] only show windows domain in audit log ui if applicable #26078)
[v13] Remove privileged APIs from window after app initialization ([v13] Remove privileged APIs from window after app initialization #26213)
Get rid of update on unmounted component in ResultList ([v13] Get rid of unmounted component update in ResultList #26230)
athena audit logs - sqs receive ([v13] athena audit logs - sqs receive #26220)
[v13] docs: reword dynamic guides language to more active ([v13] docs: reword dynamic guides language to more active #26227)
athena audit logs - support athena engine v2 ([v13] athena audit logs - support athena engine v2 #26222)
[v13] Add GCP Join Method ([v13] Add GCP Join Method #26165)
[v13] Populate the time locked status value when local user locked ([v13] Populate the time locked status value when local user locked #26255)
Restore Kubernetes Integration tests ([v13] Restore Kubernetes Integration tests #26186)
[docs] Include File Transfers in moderated sessions docs ([docs] Include File Transfers in moderated sessions docs #26032) ([v13] [docs] Include File Transfers in moderated sessions docs (#26032) #26265)
[v13] - Backport docker distribution update Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /integrations/kube-agent-updater #26108 and Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible in /examples/service-discovery-api-client #26109 ([v13] - Backport docker distribution update #26108 and #26109 #26249)
[v13] docs: add tip on Kubernetes resources ([v13] docs: add tip on Kubernetes resources #26278)
[v13] docs: expand admonition for additional DB types ([v13] docs: expand admonition for additional DB types #26260)
Make PAM user creation script copy/pasteable ([v13] Make PAM user creation script copy/pasteable #26275)
[v13] docs: Make Amazon Linux name usage consistent ([v13] docs: Make Amazon Linux name usage consistent #26192)
Revert usage of grpc error interceptors in lib/client ([v13] Revert usage of grpc error interceptors in lib/client #26271)
Allow aws svg icon to take on the themes main color ([v13] Web: Allow aws svg icon to take on the themes main color #26039)
Decrease test timeout ([v13] Decrease PromptMFA test timeout #26267)
Update e ref (Update e ref #26306)
[v13] TLS Routing behind ALB: tsh kube join ([v13] TLS Routing behind ALB: tsh kube join #26283)
Fix twoClustersTunnel flakiness ([v13] Fix twoClustersTunnel flakiness #26254)
athena audit logs - query rate limiter ([v13] athena audit logs - query rate limiter #26221)
[v13] Disable "Open new terminal" if there's no active workspace ([v13] Disable "Open new terminal" if there's no active workspace #26333)
[v13] Replace GetConnectCommandNoAbsPath with os.exec.Cmd.Args ([v13] Replace GetConnectCommandNoAbsPath with os.exec.Cmd.Args #26328)
[v13] Update electron and electron-builder ([v13] Update electron and electron-builder #26327)
Remove our replacement for Logrus (Remove our replacement for Logrus #26241) ([v13] - Remove our replacement for Logrus (#26241) #26304)
[v13] docs: enroll auto updates fixes ([v13] docs: enroll auto updates fixes #26352)
[v13] docs: add mongo port in high availability and k8s operator doc ([v13] docs: add mongo port in high availability and k8s operator doc #26357)
bump e-ref ([v13] bump e-ref #26355)
Update config.json (Backport Preview Redirect for v13 #26258)
[v13] Proto and Go module changes for Windows TPM support (Proto and Go module changes for Windows TPM support #26325) ([v13] Proto and Go module changes for Windows TPM support (#26325) #26348)
[v13] fix azure db user auth check ([v13] fix azure db user auth check #26317)
Add params to CTA redirect URL (Add params to CTA redirect URL #26086) ([v13] Add params to CTA redirect URL (#26086) #26340)
[v13] Web: Integrations touchups ([v13] Web: Integrations touchups #26152)
update video banner ([v13] update video banner #26384)
Refresh the teleport-cluster Helm guide ([v13] Refresh the teleport-cluster Helm guide #26172)
check for empty name part in role arn ([v13] check for empty name part in role arn #26376)
Update e ref ([v13] Update e ref #26389)
remove opened var when set to false ([v13] Docs: Remove opened var when set to false #26367)
Remove the Adopters page ([v13] Remove the Adopters page #26362)
Update version in tsh.app Info.plist ([v13] Update version in tsh.app Info.plist #26314)
[v13] Change TestDeleteMFADeviceSync to do per-delete assertions ([v13] Change TestDeleteMFADeviceSync to do per-delete assertions #26390)
bump eref ([v13] bump eref #26406)
Release 13.0.1 (Release 13.0.1 #26418)
athena audit logs - parquet writer ([v13] athena audit logs - parquet writer #26240)
[v13] athena audit logs - delete from sqs ([v13] athena audit logs - delete from sqs #26424)
athena audit logs - run on single auth ([v13] athena audit logs - single consumer on auth #26443)
[v13] docs: fix curl usage ([v13] docs: fix curl usage #26411)
[v13] Add in plugin bearer token credentials. ([v13] Add in plugin bearer token credentials. #26436)
fix tsh db connect to active cassandra db ([v13] fix tsh db connect to active cassandra db #26378)
[v13] Web: Provide accurate actionable steps with duplicate db name error ([v13] Web: Provide accurate actionable steps with duplicate db name error #26399)
changelog spellfixes ([v13] changelog spellfixes #26431)
[v13] docs: include DynamoDB streams as required in storage backend ([v13] docs: include DynamoDB streams as required in storage backend #26381)
Release 13.0.2 (Release 13.0.2 #26469)
bump docs for cloud to 12.4.2 (Backport #26419 to branch/v13 #26466)
bump eref ([v13] bump e-ref #26465)
[v13] add list of applied login rules to user login event ([v13] add list of applied login rules to user login event #26474)
Install Node Script: respect version variable ([v13] Install Node Script: respect version variable #26322)
[v13] Add and map the MDM system role ([v13] Add and map the MDM system role #26471)
bypass lint and os-compatibility for md and mdx files ([v13] bypass lint and os-compatibility for md and mdx files #26480)
[v13] add assume_role_arn and external_id docs reference ([v13] add assume_role_arn and external_id docs reference #26030)
athena audit logs - integration tests ([v13] athena audit logs - integration tests #26494)
[v13] Docs: Adjust curl examples ([v13] Docs: Adjust curl examples #26472)
Update AMI usage instructions ([v13] Update AMI usage instructions #26453)
Install Script: add Darwin ARM64 support ([v13] Install Script: add MacOS ARM64 support #26504)
[v13] Add in extra Okta audit event fields. ([v13] Add in extra Okta audit event fields. #26370)
Add the JamfSpecV1 proto (Add the JamfSpecV1 proto #26391) ([v13] Add the JamfSpecV1 proto #26448)
Update gravitational/protobuf fork tag (Update gravitational/protobuf fork tag #26373) ([v13]: Update gravitational/protobuf fork tag (#26373) #26488)
docs: update version ([v13] docs: update version #26509)
add AWS cross-account db access guide ([v13] docs: add AWS cross-account db access guide #26468)
bump-e-ref ([v13] bump-e-ref #26545)
[v13] WebDiscover: Revert deleting the app wizard ([v13] WebDiscover: Revert deleting the app wizard #26457)
update db and app service role permissions ([v13] update db and app service authz permissions #26519)
Show dev-related tools only in dev mode ([v13] Connect: Enable dev-related tools only in dev mode #26495)
[v13] Do not run the uploader with the MDM role ([v13] Do not run the uploader with the MDM role #26514)
Add in Okta plugin type. ([v13] Add in Okta plugin type. #26458)
Bump golangci-lint to v1.52.2 ([v13] chore: Bump golangci-lint to v1.52.2 #26593)
Update backends.mdx to remove incorrect comment ([v13] Update backends.mdx to remove incorrect comment #26600)
Add RoleInstance to TestLocalServiceRolesHavePermissionsForUploaderService ([v13] Add RoleInstance to TestLocalServiceRolesHavePermissionsForUploaderService #26597)
[v13] Desktop access improvements ([v13] Desktop access improvements #26413)
[docs] Amazon Athena guide for Application Access ([docs] Amazon Athena guide for Application Access #25329) ([v13][docs] Amazon Athena guide for Application Access #26505)
[v13] changes openssh addr validation to allow hosts ([v13] changes openssh addr validation to allow hosts #26549)
[v13] docs: remove starting from messages older then 10.0 ([v13] docs: remove starting from messages older then 10.0 #26553)
suggest machine id in plugins partial ([v13] Docs: suggest machine id in plugins partial #26624)
[v13] Docs: mark Okta application access as preview ([v13] Docs: mark Okta application access as preview #26627)
[v13] Add Teleport Team docs ([v13] Add Teleport Team docs #26639)
[v13] Update SyncInventory RPC documentation ([v13] Update SyncInventory RPC documentation #26629)
expose firehose emulator host env in tests ([v13] expose firehose emulator host env in tests #26592)
[v13] auditlog - pass context and rework search params ([v13] auditlog - pass context and rework search params #26587)
Update e ref ([v13] update e ref #26664)
Extend kubectl auth can-i support for kubernetes_resources RBAC rules ([v13] Extend kubectl auth can-i support for kubernetes_resources RBAC rules #26584)
[v13] athena audit logs - pass teleport user as top level field ([v13] athena audit logs - pass teleport user as top level field #26661)
chore: Bump Buf to v1.19.0 ([v13] chore: Bump Buf to v1.19.0 #26645)
docs: update reference to Teleport systemd ([v13] docs: update reference to Teleport systemd #26680)
[v13] docs: Add Msft SQL Server client examples and link in sql server guide ([v13] docs: Add Msft SQL Server client examples and link in sql server guide #26558)
[V13] Add certificate rotation to teleport join openssh oneshot command ([V13] Add certificate rotation to teleport join openssh oneshot command #26674)
[v13] Docs: Patch Register Cluster page ([v13] Docs: Patch Register Cluster page #26686)
[v13] Adds an admonition about Teleport not currently supporting Azure AD ([v13] Adds an admonition about Teleport not currently supporting Azure AD #26556)
[v13] Make the Linux Server guide less SSH-centric ([v13] Make the Linux Server guide less SSH-centric #26631)
Remove intel label from macOS ([v13] Web: Remove intel label from macOS #26698)
[v13] refactor tsh db ([v13] refactor tsh db #26651)
[v13] Edit the docs UI reference ([v13] Edit the docs UI reference #26533)
[v13] Refresh Kubernetes Access Getting Started diagram ([v13] Refresh Kubernetes Access Getting Started diagram #26536)
Fix port forwarding when using a label based target ([v13] Fix port forwarding when using a label based target #26701)
[v13] operator: ProvisionToken support ([v13] operator: ProvisionToken support #26618)
Define the "jamf_service" configuration (Define the "jamf_service" configuration #26478) ([v13] Define the "jamf_service" configuration #26700)
add upgrader to inventory hello (add upgrader to inventory hello #26454) ([v13] add upgrader to inventory hello (#26454) #26479)
Describe tsh ls support for multiple labels ([v13] Describe tsh ls support for multiple labels #26539)
docs: remove old starting from message ([v13] docs: remove old starting from message #26717)
[v13] Add mermaid diagram to the HA guide ([v13] Add mermaid diagram to the HA guide #26697)
Fix link to CA Pinning information ([v13] Fix link to CA Pinning information #26690)
Windows TPM enrollment support (Windows TPM enrollment support #25801) ([v13] Windows TPM enrollment support (#25801) #26736)
docs: update agent updates ([v13] docs: update agent updates #26731)
[v13] Don't unmount cgroup2 when restarting ([v13] Don't unmount cgroup2 when restarting #26728)
Amazon RDS converter: extract Subnets (Amazon RDS converter: extract Subnets #26621) ([v13] Amazon RDS converter: extract Subnets #26675)
athena audit logs - sent checksum on s3 write ([v13] athena audit logs - sent checksum on s3 write #26748)
docs: add missing server_name to LDAP config ([v13] docs: add missing server_name to LDAP config #26692)
fix TestALPNProxyHTTPProxyBasicAuthDial flakiness ([v13] fix TestALPNProxyHTTPProxyBasicAuthDial flakiness #26713)
Introduce group and app name Okta import rule regexes. ([v13] Introduce group and app name Okta import rule regexes. #26799)
[v13] [docs] add image for moderated file transfer ([v13] [docs] add image for moderated file transfer #26808)
Remove 'preview' from tcp app access guides ([v13] Remove 'preview' from tcp app access guides #26813)
[v13] docs: update to machine-id file list and edits ([v13] docs: update to machine-id file list and edits #26800)
athena audit logs - always pass utc to query ([v13] athena audit logs - always pass utc to query #26821)
add polyfill for randomuuid ([v13] [Web] Add polyfill for crypto.randomUUID #26611)
include db in tsh play and consistent description ends ([v13] tsh updates: include db in tsh play and consistent command descriptions #26816)
[v13] Add a few convenience toggles to genproto.sh ([v13] Add a few convenience toggles to genproto.sh #26672)
[v13] use stable/cloud repo for cloud tenants ([v13] use stable/cloud repo for cloud tenants #26841)
docs: correct faq answer on editions ([v13] docs: correct faq answer on editions #26842)
add rbac for cluster alerts (add rbac for cluster alerts #26423) ([v13] add rbac for cluster alerts #26789)
Release 13.0.3 (Release 13.0.3 #26846)
Bump github.com/docker/distribution (Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #26107) ([v13] - Backport Bump github.com/docker/distribution (#26107) #26855)
[v13] docs: include Enterprise in tctl version for ent, cloud prereq ([v13] docs: include Enterprise in tctl version for ent, cloud prereq #26847)
app access: improve error logging ([v13] app access: improve error logging #26869)
[v13] Proxy Templates update: cluster switching and tsh ssh parity ([v13] Proxy Templates update: cluster switching and tsh ssh parity #26852)
[v13] Add a codegen-focused buildbox ([v13] Add a codegen-focused buildbox #26739)
correct discovery bootstrap command description ([v13] correct discovery bootstrap command description #26894)
bump cloud to 12.4.3 ([v13] Bump cloud to 12.4.3 #26899)
[v13] Spawn gateway CLI client directly ([v13] Spawn gateway CLI client directly #26751)
[v13] skip rdpclient build in integration tests ([v13] skip rdpclient build in integration tests #26526)
[v13] Web: Add back buttons and remove exit buttons (discover & integrations) ([v13] Web: Add back buttons and remove exit buttons (discover & integrations) #26727)
Backport Uncomment Mermaid diagram specs #26366 to branch/v13 (Backport #26366 to branch/v13 #26738)
[v13] integrations/operator: Use a dedicated scheme in tests ([v13] integrations/operator: Use a dedicated scheme in tests #26883)
[v13] Collect MDM data from macOS ([v13] Collect MDM data from macOS #26897)
fix GitHub connector API endpoint URL path getting ignored when making HTTP requests ([v13] Fix GitHub connector API endpoint URL path getting ignored when making HTTP requests #26863)
Update dependencies for build.assets/tooling (Update dependencies for build.assets/tooling #26907) ([v13] Update dependencies for build.assets/tooling (#26907) #26918)
Add diagrams to Access Request plugin guides ([v13] Add diagrams to Access Request plugin guides #26924)
Fix bug where the system agent is not forwarded in combination with ([v13] Fix agent forwarding with --add-keys-to-agent=no #26929)
Add integration enroll usage event (Add integration enroll usage event #26880) ([v13] Add integration enroll usage event #26930)
[v13] Add MDM and TPM fields to device resources ([v13] Add MDM and TPM fields to device resources #26838)
Add a watcher for agentless EC2 nodes ([v13] Add a watcher for rotating agentless EC2 nodes #26888)
[v13] helm: Fail to install if clusterName contains a colon ([v13] helm: Fail to install if clusterName contains a colon #26973)
[v13] athena audit logs - add metrics ([v13] athena audit logs - add metrics #26920)
[v13] Remove useProfileLogin from makeClient in tsh ([v13] Remove useProfileLogin from makeClient in tsh #26975)
[v13] athena audit logs - use otel traces in querier ([v13] athena audit logs - use otel traces in querier #26900)
fix console node list scroll and close session join dialog ([Web] Fix scrolling in Node list in web terminal #26622) ([v13] Fix scrolling in Node list in web terminal #26906)
docs: update version ([v13] docs: update version #26988)
Use WIRE_JSON in buf breaking ([v13] protobuf changes in preparation for buf breaking #26793)
Add a guide to reviewing docs PRs ([v13] Add a guide to reviewing docs PRs #26913)
[v13] AWS Route 53 GSLB Multi-Region Proxy Peering High Availability Deployment Guide ([v13] AWS Route 53 GSLB Multi-Region Proxy Peering High Availability Deployment Guide #26743)
[v13] update ui and config to refer to service as Teleport Service (#27011)
[v13] remove warning on unpopulated ssh proxy address (#27015)
Use root client for headless authentication. (#26878)
Make tctl command descriptions consistent (#26937)
Yarn updates for terser and minimatch (#26919) (#27025)
docs: mention missing delete permission for GCS buckets (#26735)
Clean up LDAP error handling (#26984)
Docs: replace static mermaid images with rendered charts (#23458) (#26094)
operator: allow operator to edit tokens (#27001)
Update CHANGELOG.md to include Helm image change (#26822) (#27000)
[v13] Update kube operator with more details and troubleshooting (#27050)
[v13] feat: library for building predicate parsers (#26915)
use uri path for config dump (#26992)
[v13] update lib/utils/parse to leverage lib/utils/typical (#26967)
Search user groups by description. (#27021)
Remove initCommand from DocumentPtySession (#27003)
Device Trust: TPM Enrollment support EKCerts (#27070) (#27082)
[v13] Update kingpin & allow autocompletion (#26238) (#26999)
Update e (#27087)
[v13] Expand Go docs for label prefixes (#27102)
Close clients when done. (#27104)
[v13] Windows TPM Device Authentication (#27085)
docs: update kube access for enterprise setting and agent updates (#26941)
docs: offer alternative aws methods for joining for aws db guides (#26939)
[v13] Automatically perform tsh app login. (#26820)
Fix "unnecessary conversion" in lib/devicetrust/native (#27077)
[v13] Support ElastiCache Redis IAM auth (#26990)
[v13] Refresh port descriptions (#26936)
Fix TestKube/Join data race (#26619) (#27124)
Okta Import Rules use Teleport style regexes. (#27126)
changes ldapDialTimeout from 5 to 15 seconds (#27045)
chore: Bump OpenSSL to 3.0.9 (#27123)
[v13] docs: Update GSLB docs for changes missed from master (#27132)
[v13] Add tsh kubectl support for tracer exporter (#27130)
Switch to recommending identity file in terraform guide (#27068)
Refactor test globals out of lib/devicetrust/enroll (#27133)
[v13] Update title for proxy peering architecture (#27041)
[v13] docs: remove duplicative k8s access guide (#27128)
Fetch ClusterAlerts a single time during login (#27110)
[v13] buf breaking CI action (#26833)
[v13] helm: Tidy standalone cluster setup docs (#27154)
TLS Routing behind ALB: tsh kube subcommands UX (#26305) (#27155)
[v13] docs: correction and note on direct mode for desktop (#27149)
[v13] feat: label expression parser (#26970)
Correct grammar in role removal error message (#27142)
[v13] Update Terraform reference docs to 13.0.3 (#27034)
Added 05/25 Upcoming Releases Update (#26910)
Introduce the Plugin Static Credentials object. (#27121) (#27163)
Release 13.0.4 (#27190)
[v13] helm: Switch custom deployment guide to standalone rather than scratch (#27177)
add section for username_claim (#27006)
[v13] Add docs for shell completion (#27093)
return an error if a moderated session is created for an agentless node (#25721)
Update cloud version to 12.4.5 (#27214)
Add information about the cert-format flag (#27167)
docs: update version (#27219)
Updated Cloud SQL guides with more info about 'Allow only SSL connections' option (#27224)
Add elasticache:Connect AWS permission to auto-IAM (#27188)
[v13] docs: update fluentd output and correct docs link (#27202)
Add static credentials reference to plugin credentials. (#27225)
update access controls table (#27226)
tncon.c: Switch all size variables to size_t (#27234)
[v13] Fix headless server access requests (#27241)
docs: add troubleshooting step for standard RDP security (#27245)
docs: mention locking as an alternative to CA rotation for revoking access (#27248)
[v13] lib/kube/proxy/server.go: Fix potential mutex deadlock on error (#27237)
Add support for automatic database users for Postgres (#26555)
Ignore ENOENT error on group check (#27231)
backport device trust and okta provider docs (#27218)
Dont load ForwardedPorts from profile, only recieve them from the cli (#27208)
Fix TeleportClient.ConnectToProxy logic error with closed context. (#27140)
tctl: allow creating desktops from YAML file (#27250)
Speedup OpenSSL build (#27056) (#27261)
[v13] Pin golangci-lint to v1.53.1 and upgrade depguard config to v2 (#27293)
Disable GHA cache (#27305) (#27315)
[v13] Web: Fix local storage clearing (#27296)
Replace global testing variables for device trust with pluggable ceremony interface. (#27239)
[v13] Assist backport (#27243)
Only wait for headless authentication watcher initialization in tests. (#27298)
[v13] flaky test detector: override skipped tests (#27274)
[v13] Get locks in tctl get all (#27294)
[v13] Assist bug fixes (#27356)
Get fresh cluster features to config.js (#26785) (#27362)
[v13] Use the proper check for the SAML IdP session. (#27314)
Add kube credentials lockfile to prevent possibility of excessive login attempts (#27366)
[v13] Docs: Update GitHub SSO (#27273)
Add endpoints to export AuditEvents as unstructured data (#27290)
[v13] docs: update enrollment steps for active dir (#27357)
[v13] Assist docs (#27260)
Reply with a user-friendly message on verification errors (#27270)
[v13] Update e ref (#27375)
add circle icon helper (#27185) (#27286)
[v13] cache parsed role template expressions (#27326)
[v13] Web: Emit integration events (aws oidc) and touch ups (#27172)
[v13] WebPublicAddr includes user specified port. (#27376)
Minor updates to Server Access Getting Started (#27253)
Add plugin static credentials getter. (#27301)
tncon: Remove unused return variables (#27386)
[v13] Update e ref. (#27388)
[v13] docs: Formatting/grammar fixes for TLS routing (#27391)
specify supported architectures (#27279)
Move and update Proxy Template docs. (#27350)
[v13] Add IAM auth info to ElastiCache guide (#27306)
chore: Bump Buf to v1.20.0 (#27400)
[v13] Adds info on exporting requirements for impersonated certs (#27403)
[v13] Add Assist to the access role (#27424)
[v13] Update e (#27430)
[v13] [Assist] Do not parse event data is there is none (#27435)
Release 13.1.0 (#27418)
[v13] Add docs for database auto user provisioning (#27289)
Add prometheus endpoint to tbot (#27432)
[v13] loadtesting automation improvements (#27438)
Jamf config for PluginSpecV1 (#26374) (#27459)
[v13] WebDiscover: Check for RDS length before setting a limit for listing DBs (#27415)
chore: Bump golangci-lint to v1.53.2 (#27456)
Build change for when go caching should be used (#27209) (#27284)
Extend host lock enforcement to other built in roles besides Node (#27018) (#27442)
docs: update version (#27473)
[v13] docs: add enterprise value for kube agent reference (#27472)
[v13] Document new Okta import rule regexes. (#27453)
Propagate proxy public addr in Web UI ssh session. (#27058) (#27420)
[v13] Docs: improve Postgres in GCP (#27471)
Create api handler specifically for FormData (#27408)
[v13] Document all installer script template vars (#27482)
Fix SEO issues (#27242)
[v13] Docs: GCP join method (#27487)
[v13] include changelog for docs tests (#27479)
[v13] Backport hardened AMI resources (#27454)
[v13] Implement leaf app access: tsh app login --cluster=leaf (#27197)
Bump e (#27501)
Support authenticating with AWS IAM role for MongoDB Atlas (#26439) (#27494)
Only fallback to SSH_TELEPORT_ env variables for proxy, user, and cluster name when used with headless. (#27507)
Fix the default teleport-kube-agent upgrade server (#27572)
Primarily changes "match: '^..dev.example.com$'" to "match: '^..dev.example.com'" so that users aren't mistakenly guided towards eliminating the implicit ":3389" from their regex matches (#27516)
[v13] Fix not being able to "login" with auth type set to sso but no connectors set yet (#27589)
docs: adds configuration and helm chart to app access getting started (#27529)
docs: add headless auth as faq question (#27584)
[v13] Proxy Templates overwrite CLI cluster value (#27581)
[v13] use proxy port in openssh config (#27545)
[v13] Docs: Trusted Clusters - Mention the correct expiration time as per tctl command (Buddy PR) (#27498)
Update github.com/gravitational/predicate to v1.3.1 (#27483)
[v13] docs: provide information on local user locks from login attempts (#27609)
[v13] Update docker images (#27502)
[v13] update agentless docs to use 'teleport join openssh' (#27624)
[v13] Add deprecation note to PAM user creation guide (#27626)
fix: record applied login rules in github login event (#27607)
[v13] feat: label expression protobuf types (#26977)
[v13] Web: Plugin tweaks and new plugin icons #27427 (#27576)
[Docs] Assist - remove MFA section (#27603)
[Docs] Assist built-in role access (#27602)
[v13] Bump cloud version to v13.1.0 (#27633)
Update e (#27640)
[v13] Update description of Roles UI (#27539)
Added 06/08 Upcoming Releases Update (#27631)
[v13] export etcd event processing metrics (#27220)
add new CTA event property (#27216) (#27643)
Fix redirects (#27593)
Bump vite from 4.2.0 to 4.2.3 (#27670)
[v13] feat: label expressions (#27641)
usagereporter: add context check in RunSubmitter (#27678)
Fix TestAuthorizeWithLocksForLocalUser flakiness (#27687)
Set UID/GID for ARC runner builds (#27638) (#27689)
add styles to tooltip for team pages (#27417) (#27642)
[v13] docs: update navigation instructions for sso audit log troubleshooting (#27675)
[v13] helm: Add conditional RBAC/ServiceAccount to teleport-kube-agent post-delete hook (#27637)
Add scaling warning re: DynamoDB (#27600)
[v13] Abort reverse tunnel connections early if the proxy is already claimed (#27699)
Fix Teleport Connect assume roles (#27723)
Add UI node lock to use server_id instead (#27621)
Implement in-memory vector DB (#27587)
[v13] Change Campaign to utm_campaign (#27706)
[v13] docs: update desktop session recording reference (#27749)
remove confusing variable delineation (#27746)
docs: Fix curl commands on Windows (#27759)
[v13] MongoDB Protocol Hardening (#27741)
[v13] Fix flaky test TestHeadlessAuthenticationWatcher_WaitForUpdate (#27765)
[v13] Docs: document labels for trusted clusters (#27738)
Don't use WithError() when logging "Missing session cookie" (#27768)
app access: fix broken docs link in error message (#27766)
[v13] bump e-ref (#27736)
Default to SymlinksTrySecure rather than SymlinksSecure (#27784)
Fix: time.Since should not be used directly after a defer statement (#27795)
[v13] Fix an issue kube local proxy requirement is wrong in separate port mode (#27732)
[v13] Delete proxy heartbeats on graceful shutdown (#27786)
bump e (#27806)
[v13] Add Proto types for storing TPM Platform Attestation in Collected Data (#27757)
[v13] bump e (#27818)
Move Cloud Matchers to proto (#27162) (#27530)
[v13] Trim yum release version in install-linux.mdx (#27777)
Set default limit for ListResourcesRequest (#27839)
[v13] Fix an issue ALPN handshake test does not respect "HTTPS_PROXY" (#27810)
Release 13.1.1 (#27847)
[v13] Update Locking docs to refer server-id (#27845)
[v13] fix: Observe accurate backend_read_seconds duration (#27857)
Fix TestDiagnoseSSHConnection flakiness (#27762) (#27849)
[v13] Omit empty fields from DeviceCredential resources (#27869)
[v13] chore: Bump Buf and Go versions (#27860)
[v13] docs: Fix more installation commands on Windows (#27877)
[v13] Add the notion of friendly names to access request details. (#27803)
[v13] Update e ref. (#27883)
[v13] docs: document label expressions (#27878)
[v13] [Assist] New UI & rewrite (#27791)
[v13] Pass context through UpsertAuthServer (#27887)
[v13] Docs: Update ADFS SSO guide (#27891)
docs: update version (#27917)
Added 06/15 Upcoming Releases Update (#27901)
[v13] MongoDB Atlas IAM authentication docs (#27493)
chore: Bump golangci-lint to v1.53.3 (#27898) (#27911)
[v13] Add Machine ID tip when tctl auth sign is used (#27928)
[v13] CHANGELOG spelling fixes (#27955)
[v13] Make use of keepAliveInterval in terminal handler (#27914)
design updates for team gated features (#27756) (#27897)
[v13] Fixes the "Run as different user" window freezing (#27874)
[v13] Device Trust: tsh privilege elevation for TPM enrollment (#27959)
Add more accurate info to cloud download page re: tbot (#27946)
Ensure SSH_SESSION_WEBPROXY_ADDR is set for all sessions (#27865)
Temporarily ignore Device Trust deprecation warnings (#27969)
Add a diagram to the Linux Server guide (#27808)
Make Teleport config instructions easier to follow (#27968)
[v13] docs: update cloud downloads (#27963)
[v13] helm: add hostAliases support (#27880)
[v13] Vendors the pagerduty plugin source into teleport (#27612)
[v13] helm: Use local auth server address in auth pod to prevent extra connections (#27980)
OpenSearch AWS autodiscovery (#27537) (#27942)
[v13] Gracefully handle errors in Assist frontend (#27669) (#27935)
docs: include tsh install in connect your client tsh page (#27971)
[v13] Update e ref. (#28036)
add saml wizard to ui (#27949)
[v13] Fix tsh relogin on not found errors (#27974)
[v13] Update Electron to 25.1 and TypeScript to 5.1 (#28027)
Reorder resource filters in the search bar (#28034)
[v13] Connect: Fix overlapping placeholder and keyboard shortcut in the search bar (#28048)
[v13] Fix Assist import so it does not break storybook (#28047)
update eref (#28044)
Add HasPluginType to plugins interface. (#28052)
[v13] Add a delete confirmation step to SyncInventory (#27961)
Add mapping between user groups and applications. (#27962)
[v13] Update e ref. (#28060)
Provide client login IP when SSO initiated in a browser. (#27896)
docs: mention required scope for GitHub app (#27910)
[v13] Docs: Update Okta SSO Guide (#27950)
[v13] Okta service docs only show in enterprise and cloud. (#28069)
Add reviewer and requester roles. (#28076)
Update ssh-approval-slack.mdx (#28081)
fix: Ignore staticcheck false positive on darwin (#28042)
AWS OIDC Integration: Deploy DB Service in a single click (#27035) (#28051)
Fix invalid command example. (#28018)
bump e (#28101)
Add skip-confirm flag for headless approval. (#27823) (#27864)
[v13] update message on empty tsh ls results (#28120)
Release 13.1.2 (#28124)
[v13] Integrate AMI buids into drone (#27354) (#28127)
Remove deprecated/unused device trust protos (#27975) (#28075)
[branch/v13] Bumped e ref (#28144)
[v13] feat: adds motd to the ui (#27922)
Correct the backend_requests metric help text (#28107)
feat: add support for label expressions to k8s operator (#28156)
bump docs to 13.1.1 (#28153)
docs: Fix syntax error (#28142)
[v13] Use the one-liner in install-linux.mdx (#27907)
[v13] docs: update macos tsh install instructions (#28135)
[v13] permission-warning.mdx: Advise NOT TO give access,editor to users (#28132)
[v13] Add Opsgenie plugin (#28098)
[v13] Update teleport cloud faq.mdx (#28174)
docs: remove note about supporting any platform supporting Go (#28178)
docs: fix kubernetes guide (#28164)
Bump 'e' ref (#28206)
[v13] Specify how host user creation invokes useradd (#28194)
[v13] update helm docs (#28068)
[v13] InstallScripts: pin teleport version using ServerVersion (#28149) (#28208)
[v13] Edit the server access Getting Started guide (#28172)
Added 06/22 Upcoming Releases (#28155)
Warn about clamshell-related touch ID unavailability (#28214)
log why the TeleportReady event is not being emitted (#28239)
[v13] bump e-ref (#28241)
Release 13.1.3 (#28243)
[v13] Windows Device Trust documentation (#28050)
Support assume_role_arn for database dynamic resources (#28039) (#28210)
Always collect deny arm of kubernetes_resources (#28285)
[v13] docs: default https ports for tsh login (#28288)
[v13] Use supplied tarball when building AMIs (#28128)
Improve the upload completer logs (#28211)
Move "Device Trust" to a top-level docs item (#28108) (#28199)
[v13] Add associated applications and user groups to UI objects. (#28303)
Converts the default Content-Security-Policy representation to a map (#27182) (#28307)
[v13] Preserve applications original URL's query (#28218)
Don't add keys to agent during headless login. (#28236)
Respect client idle timeout setting (#28202)
docs: include desktops for cloud faq reverse tunnel (#28305)
only apply stripe csp for team/usage users (#28198) (#28308)
Returned Vars to the code output (#28225)
Pass teleport-reversetunnelv2 for auth connections (#28316)
Use the long-form --config flag in shell example (#28299)
Reduce debug log spam for TeleportReady events (#28319)
Docs: Update recommended role (#28278)
Fix audit log report of kubernetes_users and kubernetes_groups (#28323)
Release 13.1.4 (#28327)
[v13] Allow setting max_session_ttl from clusterauth preferences (#28130)
[v13] Fix TestSQSMessagesCollectorErrorsOnReceive flakiness (#28184)
[v13] Clarify permissions for Okta API tokens. (#28294)
Release 13.1.5 (#28364)
[v13] Restore resource requests guide with an admonition. (#28348)
Add opsgenie static credentials check and test (#27655) (#28326)
update installation video (#28370)
[v13] docs: backports (#28331)
[v13] Add username to headless authentication backend key (#28380)
docs: update version (#28389)
[v13] Add a note on the admin database permission requirement for MongoDB (#28362)
[v13] Remove absolute goteleport.com/docs links (#28395)
Teleport One Off Script (#27852) (#28347)
[v13] Connect: Light theme (#28277)
Update e (#28406)
[v13] Machine ID: Add usage event for bot creation (#28366)
[v13] k8s operator supports Okta import rules. (#28377)
chore: Bump Buf to v1.22.0 (#28381)
athena audit logs - use sqs attribute as oldest metric (#28274)
Hide wait subcommands (#28416)
copy edits (#28423)
Clarify the disablesse S3 backend setting (#28401)
Machine ID: Add support for BotJoin analytics event (#28293) (#28425)
[v13] Expand Docker installation instructions (#28447)
[v13] Drain database connections on graceful shutdown (#28369)
use teleport.sh instead of dashboard.goteleport.com for license retrieval (#28426)
Replace xitongsys/parquet-go with segment-io lib (#28472)
Update tsh scp command description to match ssh node commands (#28467)
docs: bump cloud to 13.1.5 (#28404) (#28450)
[v13] Docs: Update Google Workspace SSO Guide (#28475)
Remove most t.Log() from tests (#28471)
[v13] Fix moderated session presence checking (#28456)
Describe subject flags in Event Handler guides (#28431)
[v13] Add security notes to the session recording guide (#28462)
adding name to docker run command (#28502)
docs: fix upcoming release descriptions (#28504)
Emit default role editor changes (#28209) (#28481)
Add omitempty to new ResourceMatcherAWS block for best backwards compat (#28419)
[v13] Web terminal themes (light & dark) (#28408)
[v13] Discover: Add deployed method field to deploy service event (#28507)
[v13] Docs: Document that root clusters can't populate OS users from leaves. (#28531)
docs: replace "Golang" with "Go" (#28171)
Promote IAC docs for agents and dynamic resources (#28526)
Add unauthenticated rate limiter constants (#28538)
update device trust guide (#28365) (#28523)
Added 06/29 Upcoming Releases Update (#28478)
remove sentence fragment and link (#28483)
clarify source of user cert TTL (#28534)
Fix the username on self-hosted DB doc pages (#28521)
Fix header levels in the authorization docs page (#28495)
[v13] fix: Use correct sync defaults and validation (#28553)
[v13] integrations/operator: Try to delete bot role (#28543)
Disable disk-based logger for web tests (#28557)
athena audit logs - add migration script (#28182)
Change copy "Go To Dashboard" for "Go To Cluster" on new account screen (#28434) (#28520)
[v13] Add light & dark themes to YAML editor (#28517)
dynamodbbk: don't delete non-expired items on Get (#28600)
AWS OIDC - DeployService: configure IAM (#28088) (#28597)
Update e (#28605)
backport jamf default checks to branch/v13 (#28558)
[v13] Web related tweaks for access request user groups (#28545)
Improve copy on the integrations page (#28611)
[v13] Backport Assist related changes (#28480)
[v13] Web: Improve no access message and remove hard coded color (#28550)
[v13] Add custom component prop type for react-select (#28617)
[v13] Update e ref. (#28615)
Add option to allow for host users not to be deleted (#28432)
Teleport Proxy Behind ALB support for IP Pinning (#26623) (#28466)
[v13] Move database validation to gRPC methods (#28638)
[v13] lib/teleterm: Remove misleading error log after LocalAgent.GetKey (#28664)
Script to configure IAM for the DeployService (#28436) (#28643)
tsh db connect should prefer mongosh (#28668)
improve startup with empty db or discovery config (#28622)
Update e reference (#28684)
Update agentless mode description (#28682)
update eref (#28699)
Rename database_labels to db_labels (#28687)
Fix Machine ID guide index and adjust FAQ (#28700)
Release 13.2.0 (#28696)
[v13] User groups in access requests will expand list of applications. (#28603)
docs: correct docker installation table (#28652)
docs: edits to the headless webauthn guide (#28733)
[v13] Connect: Add docs for theme (#28407)
specify enterprise in commercial prereq cloud tab... (#28524)
[v13] Docs: Update GitLab SSO docs (#28693)
Document Jamf service and auto-enroll (#28167) (#28393)
Support GCP joining when google claim is not present (#28759)
Document Jamf exit_on_sync toggle (#28394) (#28415)
add docs for idp-initiated sso for grafana (#28645)
[v13] Machine ID: GCP Delegated Joining support (#28762)
[v13] Firestore backend improvements (#28737)
[v13] Update assist docs (#28732)
Add t.Parallel() to several tsh tests (#28613)
[v13] document create_host_users_mode (#28639)
[v13] update attributes to roles (#28695)
Increased the gh-trigger-workflow polling period (#28783)
Added 07/03 Upcoming Releases Update (#28796)
[v13] Fixed CPIO digest mismatch on RHEL 8 (#28794)
Fix Okta docs that mentioned "Application Service" (#28792)
Change signup links to mention Teleport Team (#28680)
Use more restrictive S3 object permissions (#28765)
Edit playbook user in the Ansible guide (#28791)
Fix tsh kube credentials lock when no-login is required (#28811)
removed cloud warning (#28815)
docs: bump cloud to 13.2.0 (#28788)
[v13] Fix theme not loading on first login & overflowing command result summary (#28770)
typo correction (#28827)
Update keep_alive comments auth-service.yaml (#28820)
Add redirects introduced by docs reorganization (#28822)
Minor wording change (#28778)
Support specifying assume_role_arn for Kube cluster matchers (#28282) (#28832)
rework instance hbs to be more scalable and to track upgraders (#27895) (#28847)
teleport-connect.mdx: Fix typo (you with -> you wish) (#28875)
docs: use -o file instead of sudo tee (#28771)
Add IDToken attributes to GCP join audit event (#28673) (#28882)
Machine ID: Add guides to the Enroll Integration page (#28646) (#28888)
DeployService: use correct version when auto-upgrades are enabled (#28874)
[v13] DeployService: auto upsert IAM Join Token (#28799)
[v13] docs: Add clarification on event types in enhanced recording mode (#28893)
chore: Bump Buf to v1.23.1 (#28894)
[v13] Backports PagerDuty hosted plugin (#28883)
tctl alert ls: Always show alert ID (#28906)
[v13] add Athena URL parameter to configure AWS region (#28912)
Update tough-cookie and @grpc/grpc-js (#28914)
Fix ssh env var parsing by checking after cf.AuthConnector is guaranteed to be set. (#28922)
Remove preview from several features (#28924) (#28928)
feat(dbcmd): add sqlcmd support (#28944)
supports newline and whitespace in motd: (#28937)
docs: update version (#28933)
[v13] docs: openssh updates (#28726)
[v13] include endpoint_url parameter for tctl sso configure github (#28968)
[v13] [Docs] Add missing 'resources' config field to application service docs (#28971)
desktop access: clean up error handling (#28974)
Fix listing servers when creating a new lock via webui (#28963)
tctl alerts ack: Make --reason optional (#28955)
Install Script: don't enable Automatic Upgrades for non-systemd systems. (#28987)
Set lower temperature to ChatGPT calls (#28959)
[v13] Mention agentless in the OpenSSH guide for better SEO (#28923)
remove alert maximums (#28967) (#28983)
Fix Azure join for identities across resource groups (#28961)
fix operator crashing on first startup (#29013)
Ignore SIGQUIT in exec sessions. (#29020)
[v13] Dont allow cloud tenants to update certain cluster networking config fields (#28992)
Release 13.2.1. (#29021)
Add test that verifies sessions are unaffected by Auth restarts (#29000)
Docs: Update/Refresh OneLogin SSO guide (#28444) (#28768)
[v13] Add ProxyGroup support to reverse tunnels (#28930)
[v13] Update e ref to enable PagerDuty plugin (#28986)
[v13] Deduplicate resources for tsh request search when replicas>1 (#28889)
[v13] [Assist] Only parse messages from Assist as markdown (#28911)
[v13] Add an option to bootstrap database service to teleport discovery boostrap (#29002)
Add usage-based feature values for Device Trust (#28919) (#28964)
docs: proxy peering out of preview (#29037)
[v13] DeployService: use teleport-ent image for ent clusters (#29045)
Document backend_write_requests_total (#28980)
Correct the clock passed to dynamicCredsConfig (#29058)
[v13] assist: fix flaky assist test (#29051)
[v13] Add more details about specifying a CA pin (#28886)
[v13] update database and kube name validation (#29035)
[v13] fix: suppress search events (#29063)
[v13] chore: Bump Go to 1.20.6 (#29073)
Added 07/13 Upcoming Releases Update (#29064)
Log the value of EventsBufferSize instead of the pointer address (#29082)
DeployService IAM Configure: unescape arguments (#29044)
[v13] Encode URI for sqlite properly (#29099)
[v13] helm: Add ingress support (#29084)
Minor clarifications in the Azure AD guide (#28802)
tsh play error handling (#29077)
chore: Bump Buf to v1.24.0 (#29120)
[v13] Allow configuring number of parallel execution workers (#29061)
Remove session condition from Firestore events query (#29114)
docs: version update (#29096)
[v13] [Assist] UI tweaks (#29067)
[v13] resolveNetworkAddress: Listen for close instead of exit; Fix FailedApp theme (#29108)
Extend DatabaseSessionStart posthog event (#28931) (#29106)
[v13] v13.2.2 Assist backports (#29125)
[v13] Allow relative file URIs to sqlite (#29130)
[v13] [doc] database labels reference (#29118)
[v13] [docs] add proxy_service.trust_x_forwarded_for option (#29117)
[v13] tsh recordings export session-id desc update (#29128)
upload completer: suppress stack trace for access denied errors (#29078)
[v13] Docs: Refresh Azure AD SSO Guide (#29138)
[v13] assist: support recording non-interactive forwarded sessions (#29137)
Edit forScopes configurations and edit guides (#28742)
Reduce embedding period to 20 minutes (#29153)
fix mutualtls textarea (#29091)
Release 13.2.2

The plugins interface now supports HasPluginType, which returns true if a plugin of the given type has been detected within the backend.

* Change SyncInventory streams to track missing devices * Update generated protos * Convert new device profile fields * Update fileconf.go example

Within Okta, user groups can assign permission to many applications and applications can belong to many user groups. This commit establishes that mapping so that the Okta service can perform more user friendly access requests by adding all applications from a user group to the access request and additionally allowing application access requests to request associated user groups as well.

The e ref has been updated to pull in the modifications to the NewUserGroup function and to not use deprecated device trust components.

At a minimum, the GitHub app that Teleport uses must have the read:org scope so that we can identify which users are members of which teams. Closes #14825

* make dynamic edit first * expand scope... So that dynamic resource is still the default option for all scopes * add local auth tip... Since we're telling the reader to switch to SAML before it's configured, we should provide a way to log in again using local auth. * provide full path to key... Since updated docs using <code>tctl sso configure</code> won't always include the key for easy reference in its output. * update okta guide to use tctl sso configure * Specify enterprise/cloud tctl downloads... Because <code>tctl sso configure saml</code> is only available in the enterprise tctl versions. This makes this PR dependent on #26124 * strongly encourage testing * use preset flag

* Okta service docs only show in enterprise and cloud. The docs describing the Okta service now only display in the enterprise and cloud scopes. Additionally, some of the wording and variable usage was corrected in the Okta guide. * Update docs/pages/application-access/okta/guide.mdx Co-authored-by: Steven Martin <steven@goteleport.com> --------- Co-authored-by: Steven Martin <steven@goteleport.com>

Reviewer and requester roles have been added to allow for easy defaults for reviewing and requesting applications and user groups for the Okta service.

remove messaging indicating approvals happen directly in slack as that was removed for security concerns

…28051) * AWS OIDC Integration: Deploy DB Service in a single click This PR adds a new AWS OIDC Integration action: deploy database service This uses Amazon ECS to deploy a Database and a Discovery Service in a single click. Please read `lib/integrations/awsoidc.DeployDBService` for more information. * set discovery group to uuid * add agent matcher labels * add tags to indicate ownership * create deployment mode * allow for dot named clusters * rename service and taskdefinition to include deployment mode * add ECS service dashboard url to the response * change ownership tags * remove delete service api call * fix json indent in comment and iam token name

* update message on empty tsh ls results * Update message to have no docs * update verbiage Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> --------- Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

Backports Drone changes from master

* Remove device trust linter exemptions * Remove deprecated/unused device trust protos * Update generated protos

* feat: adds motd to the ui * address review suggestions: - update MOTD to Motd - moved motd state to useLogin - added behaviour tests * add motd test to apiserver_test.go webconfig. update snapshot test to address motd warning * git mv to update MOTD to Motd * multiple fix: - add unmount test - remove motd title - group states together in useLogin - update arrow func to classic js func * remove unused waitForElementToBeRemoved

Closes #9865 Teleport increments this metric whenever there is a request to the backend, not just when there is a write request (see lib/backend/report.go for all the times we call `trackRequest()` to increment this metric). This change updates the metric help text and documentation.

This is the result of running `make manifests` in integrations/operator to update the CRDs with the latest role spec definition, which includes label expressions.

Signed-off-by: Evan Freed <evan.freed@goteleport.com>

`auth_service` is a top level key in the config file, not under `teleport`.

* Use the one-liner in install-linux.mdx Closes #25505 We now have a one-line installation command for Teleport Community Edition. Since the script the command runs already checks the user's OS and attempts to use the appropriate package manager, there is no need for the tabbed installation instructions in the Community Edition tab of `install-linux.mdx`. * Linter fix

* docs: update macos tsh install instructions * spellfix * update verbiage Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> * Update docs/pages/includes/install-tsh.mdx Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com> --------- Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> Co-authored-by: Zac Bergquist <zac.bergquist@goteleport.com>

…rs (#28132) * permission-warning.mdx: Advise NOT TO give access,editor to users * Give users an alternative rather than indicating what not to do Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com> --------- Co-authored-by: Paul Gottschling <paul.gottschling@goteleport.com>

* Add initial opsgenie client (#23707) * Add initial opsgenie client * Embed opsgenie client config in client and move some helper funcs * Fix mod and sum and call to opsgenie client buildalertbody * Add more godocs and use vendored teleport plugins lib * Rename opsgenie client and config to prevent repetition * Fix struct tag in opsgenie alertbody * Fix misleading comment * Add tests to opsgenie client to check note bodies are formatted * Wrap errs with more descriptive types * Close response bodies and fix error handling * Add missing godoc and fix defer and return order * Add missing godocs to opsgenie types * Change opsgenie client test to not depend on json indent etc * Add example of api url to godoc * Undo unnecessary mod and sum changes * Fix go sum * Move opsgenie client code to integrations/lib * Fix typos * Add opsgenie plugin (#25995)

* Update teleport cloud faq.mdx add note indicating automatic upgrades are not triggered if incompatible agents are detected * Update docs/pages/choose-an-edition/teleport-cloud/faq.mdx Co-authored-by: Evan Freed <2314084+evanfreed@users.noreply.github.com> --------- Co-authored-by: Evan Freed <2314084+evanfreed@users.noreply.github.com>

public-teleport-github-review-bot · 2023-07-14T23:11:53Z

@r0mant - this PR will require admin approval to merge due to its size. Consider breaking it up into a series smaller changes.

mdwn and others added 30 commits June 20, 2023 13:46

Add HasPluginType to plugins interface. (#28052)

472ae39

The plugins interface now supports HasPluginType, which returns true if a plugin of the given type has been detected within the backend.

[v13] Add a delete confirmation step to SyncInventory (#27961)

6586150

* Change SyncInventory streams to track missing devices * Update generated protos * Convert new device profile fields * Update fileconf.go example

[v13] Update e ref. (#28060)

4351782

The e ref has been updated to pull in the modifications to the NewUserGroup function and to not use deprecated device trust components.

Provide client login IP when SSO initiated in a browser. (#27896)

11ad461

docs: mention required scope for GitHub app (#27910)

3c9423c

At a minimum, the GitHub app that Teleport uses must have the read:org scope so that we can identify which users are members of which teams. Closes #14825

Add reviewer and requester roles. (#28076)

c9d04ff

Reviewer and requester roles have been added to allow for easy defaults for reviewing and requesting applications and user groups for the Okta service.

Update ssh-approval-slack.mdx (#28081)

b3a087b

remove messaging indicating approvals happen directly in slack as that was removed for security concerns

fix: Ignore staticcheck false positive on darwin (#28042)

eff4503

Fix invalid command example. (#28018)

b57b798

bump e (#28101)

346306a

Add skip-confirm flag for headless approval. (#27823) (#27864)

947f665

Release 13.1.2 (#28124)

6571273

[v13] Integrate AMI buids into drone (#27354) (#28127)

ec4ee47

Backports Drone changes from master

Remove deprecated/unused device trust protos (#27975) (#28075)

3aeef7c

* Remove device trust linter exemptions * Remove deprecated/unused device trust protos * Update generated protos

[branch/v13] Bumped e ref (#28144)

c446247

feat: add support for label expressions to k8s operator (#28156)

8d88f7c

This is the result of running `make manifests` in integrations/operator to update the CRDs with the latest role spec definition, which includes label expressions.

bump docs to 13.1.1 (#28153)

fa38291

Signed-off-by: Evan Freed <evan.freed@goteleport.com>

docs: Fix syntax error (#28142)

f8c8109

`auth_service` is a top level key in the config file, not under `teleport`.

github-actions Bot requested a review from alexfornuto July 14, 2023 23:11

github-actions Bot added database-access Database access related issues and PRs desktop-access discovery labels Jul 14, 2023

github-actions Bot requested a review from codingllama July 14, 2023 23:11

github-actions Bot added the documentation label Jul 14, 2023

github-actions Bot requested a review from fspmarshall July 14, 2023 23:11

github-actions Bot added the helm label Jul 14, 2023

github-actions Bot requested a review from gzdunek July 14, 2023 23:11

github-actions Bot added the kubernetes-access label Jul 14, 2023

github-actions Bot requested a review from lsgunn-teleport July 14, 2023 23:11

github-actions Bot added machine-id rdp labels Jul 14, 2023

github-actions Bot requested a review from marcoandredinis July 14, 2023 23:11

github-actions Bot added the rfd Request for Discussion label Jul 14, 2023

github-actions Bot requested a review from ptgott July 14, 2023 23:11

github-actions Bot added the size/xl label Jul 14, 2023

github-actions Bot requested a review from ryanclark July 14, 2023 23:11

github-actions Bot added tctl tctl - Teleport admin tool tsh tsh - Teleport's command line tool for logging into nodes running Teleport. labels Jul 14, 2023

github-actions Bot requested a review from strideynet July 14, 2023 23:11

github-actions Bot added the ui label Jul 14, 2023

github-actions Bot requested a review from xinding33 July 14, 2023 23:11

r0mant closed this Jul 14, 2023

r0mant deleted the release/13.2.2 branch July 14, 2023 23:12

r0mant restored the release/13.2.2 branch July 14, 2023 23:19

marcoandredinis removed request for alexfornuto, lsgunn-teleport and marcoandredinis December 11, 2023 10:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Release 13.2.2#29158

Release 13.2.2#29158
r0mant wants to merge 940 commits intomasterfrom
release/13.2.2

r0mant commented Jul 14, 2023

Uh oh!

public-teleport-github-review-bot Bot commented Jul 14, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants

Conversation

r0mant commented Jul 14, 2023

Uh oh!

public-teleport-github-review-bot Bot commented Jul 14, 2023

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

20 participants