Release 17.3.5

[doggydogworld]

• Added static_jwks field to the GitLab join method configuration to support cases where Teleport Auth Service cannot reach the GitLab instance. #53413
• Introduce workload-identity-aws-ra service for generating AWS credentials using Roles Anywhere directly from tbot. #53408
• Helm chart now supports specifying a second factor list, this simplifies setting up SSO MFA with the teleport-cluster chart. #53319
• Improve resource consumption when retrieving resources via the Web UI or tsh ls. #53302
• Add support for topologySpreadConstraints to the teleport-cluster Helm chart. #53287
• Fixed rare high CPU usage bug in reverse tunnel agents. #53281
• Fix an issue PostgreSQL via WebUI fails when IP pinning is enabled. PostgreSQL via WebUI no longer requires Proxy to dial its own public address. #53250
• Add support for SendEnv OpenSSH option in tsh. #53216
• Add support for using DynamoDB Streams FIPS endpoints. #53201
• Allow AD and non-AD logins to single Windows desktop. #53199

Enterprise:

• Fixed Slack plugin failing to enroll with "need auth" error in the web UI.
• Add support for Kerberos auth for Oracle, enabling Oracle RDS usage.

[rosstimothy]

Can we please hold off on this to include #53419?

[camscale]

This PR include https://github.com/gravitational/teleport.e/pull/6133 which was only meant to go out in 17.4.0. It looks like it got merged early maybe? @Tener

[Tener]

Yes, I was told that merge yesterday would lead to release in 17.4.0 as the release was due to come out this week.

[camscale]

I'm closing this in favour of the 17.4.0 release PR: #53436 - we'll release that one in a day or so.