Release 15.4.22

[camscale]

• Added a search input to the cluster dropdown in the Web UI when there's more than five clusters to show. #48800
• Fixed bug in Kubernetes session recordings where both root and leaf cluster recorded the same Kubernetes session. Recordings of leaf resources are only available in leaf clusters. #48739
• Machine ID can now be forced to use the explicitly configured proxy address using the TBOT_USE_PROXY_ADDR environment variable. This should better support split proxy address operation. #48677
• Fixed undefined error in open source version when clicking on Add Application tile in the Enroll Resources page in the Web UI. #48617
• Updated Go to 1.22.9. #48582
• The teleport-cluster Helm chart now uses the configured serviceAccount.name from chart values for its pre-deploy configuration check Jobs. #48578
• Fixed a bug that prevented the Teleport UI from properly displaying Plugin Audit log details. #48463
• Fixed showing the list of access requests in Teleport Connect when a leaf cluster is selected in the cluster selector. #48442
• Fixed a rare "internal error" on older U2F authenticators when using tsh. #48403
• Fixed tsh play not skipping idle time when --skip-idle-time was provided. #48398
• Added a warning to tctl edit about dynamic edits to statically configured resources. #48393
• Fixed a Teleport Kubernetes Operator bug that happened for OIDCConnector resources with non-nil max_age. #48377
• Updated host user creation to prevent local password expiration policies from affecting Teleport managed users. #48162
• During the Set Up Access of the Enroll New Resource flows, Okta users will be asked to change the role instead of entering the principals and getting an error afterwards. #47958
• Fixed teleport_connected_resource metric overshooting after keepalive errors. #47950
• Fixed an issue preventing connections with users whose configured home directories were inaccessible. #47917
• Added a resolve command to tsh that may be used as the target for a Match exec condition in an SSH config. #47867
• Postgres database session start events now include the Postgres backend PID for the session. #47644
• Updated tsh ssh to support the -- delimiter similar to openssh. It is now possible to execute a command via tsh ssh user@host -- echo test or tsh ssh -- host uptime. #47494

Enterprise:

• Jamf requests from Teleport set "teleport/$version" as the User-Agent.

[aws-amplify-us-west-2]

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-48866.d1v2yqnl3ruxch.amplifyapp.com

[github-actions]

🤖 Vercel preview here: https://docs-59lak7pei-goteleport.vercel.app/docs/ver/preview