Release 16.4.13

[doggydogworld]

• Fixes an issue causing Azure join method to fail due to throttling. #50929
• Prevent quoting errors in log messages. #50822
• Fix an issue "tsh aws ssm start-session" fails when KMS encryption is enabled. #50797
• Updates the UI login redirection service to honor redirection to enterprise/saml-idp/sso path even if user is already authenticated with Teleport. #50794
• Fixed a Postgres database-access auto-user provisioning syntax error that caused a misleading debug level error log in most cases, unless the database admin is not a superuser and the database was upgraded from Postgres v15 or lower to Postgres v16 or higher, in which case the role "teleport-auto-user" must be granted to the database admin with the ADMIN option manually. #50783
• Fixes a bug where S3 bucket details fail to fetch due to incorrect bucket region. #50764
• Prevent panicking during shutdown when SQS consumer is disabled. #50647
• Add a --labels flag to the tctl tokens ls command. #50625
• Fix a bug in the tbot Helm chart causing invalid configuration when both default and custom outputs were used. #50527
• Restore the ability to play session recordings in the web UI without specifying the session duration in the URL. #50461
• Fix missing roles in access lists causing users to be locked out of their account. #50460
• Fixed an issue that could cause some antivirus tools to block Teleport's Device Trust feature on Windows machines. #50454
• Reverted a change that caused the Kubernetes cluster name to be displayed at the end of the tab title in Teleport Connect. #50390

Enterprise:

• Fix missing cleanup actions if the Oracle db connection is closed in its initial phases.
• Fixed an issue where the Access Graph HTTP endpoint resolution failed to retry after the initial failure.