diff --git a/CHANGELOG.md b/CHANGELOG.md
index c8d6945091dba..c9db84e9b88e1 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,34 @@
# Changelog
+## 16.5.13 (07/02/25)
+
+### Security fixes
+
+This release also includes fixes for the following security issues:
+
+#### [Critical] Remote authentication bypass
+
+* Removed special handling for `*ssh.Certificate` authorities in the `IsHostAuthority` and `IsUserAuthority` callbacks used by `x/crypto/ssh.CertChecker`. [#56253](https://github.com/gravitational/teleport/pull/56253)
+
+Resolved an issue that allowed remote SSH authentication bypass on servers with Teleport SSH agents, OpenSSH-integrated deployments and Teleport Git proxy deployments. [CVE-2025-49825](https://github.com/gravitational/teleport/security/advisories/GHSA-8cqv-pj7f-pwpc). Refer to the [RCA](https://trust.goteleport.com/resources?s=32t147ja8aawd6px7irxat&name=cve-2025-49825-rca) for the full details.
+
+### Other fixes and improvements
+
+* Trait role templating is now supported in the `workload_identity_labels` Role resource field. [#56298](https://github.com/gravitational/teleport/pull/56298)
+* Updated the WindowsDesktop and WindowsDesktopService APIs to use pagination to avoid exceeding message size limitations. [#56233](https://github.com/gravitational/teleport/pull/56233)
+* Fixed duplicated entries in `tctl inventory list` when using DynamoDB as cluster state storage. [#56183](https://github.com/gravitational/teleport/pull/56183)
+* Fixed an issue that could prevent Windows desktop sessions from terminating when the idle timeout was exceeded. [#56049](https://github.com/gravitational/teleport/pull/56049)
+* Added the the `teleport-update status --is-up-to-date` flag to change the return code based on the update status. [#55951](https://github.com/gravitational/teleport/pull/55951)
+* Fixed Hardware Key Support for YubiKey firmware versions 5.7.x. [#55902](https://github.com/gravitational/teleport/pull/55902)
+* Fixed an error when creating or updating join tokens in the web UI when admin action is enabled (second_factor set to webauthn). [#55852](https://github.com/gravitational/teleport/pull/55852)
+* Fixes a memory leak in Kubernetes Access caused by resources not being cleaned up when clients terminate watch streams. [#55768](https://github.com/gravitational/teleport/pull/55768)
+* Fixed a bug that could cause Kubernetes exec requests to fail when the Kubernetes cluster had the WebSocket-based exec protocol disabled. [#55733](https://github.com/gravitational/teleport/pull/55733)
+* Fixed an issue where the output from `tctl sso configure github` could not be used with `tctl create -f` in OSS Teleport. [#55728](https://github.com/gravitational/teleport/pull/55728)
+* Fixed an issue that prevented changes to default shell from propagating for host users and static host users. [#55649](https://github.com/gravitational/teleport/pull/55649)
+* Updated Go to 1.23.10. [#55603](https://github.com/gravitational/teleport/pull/55603)
+* Fixed updating the default PIN and PUK for hardware key support in Teleport Connect. [#55509](https://github.com/gravitational/teleport/pull/55509)
+* The `tbot` client now ensures the `O_CLOEXEC` flag is used when opening files on Linux hosts. [#55504](https://github.com/gravitational/teleport/pull/55504)
+
## 16.5.11 (06/05/25)
### Security fixes
diff --git a/Makefile b/Makefile
index 6e74c81ff01a3..02a3562f9fffd 100644
--- a/Makefile
+++ b/Makefile
@@ -11,7 +11,7 @@
# Stable releases: "1.0.0"
# Pre-releases: "1.0.0-alpha.1", "1.0.0-beta.2", "1.0.0-rc.3"
# Master/dev branch: "1.0.0-dev"
-VERSION=16.5.11
+VERSION=16.5.13
DOCKER_IMAGE ?= teleport
diff --git a/api/version.go b/api/version.go
index 553a698719603..ece45e694a6a0 100644
--- a/api/version.go
+++ b/api/version.go
@@ -2,10 +2,10 @@
package api
-const Version = "16.5.11"
+const Version = "16.5.13"
const VersionMajor = 16
const VersionMinor = 5
-const VersionPatch = 11
+const VersionPatch = 13
const VersionPreRelease = ""
const VersionMetadata = ""
diff --git a/build.assets/macos/tsh/tsh.app/Contents/Info.plist b/build.assets/macos/tsh/tsh.app/Contents/Info.plist
index 39b5ac882183a..9c351b211e80a 100644
--- a/build.assets/macos/tsh/tsh.app/Contents/Info.plist
+++ b/build.assets/macos/tsh/tsh.app/Contents/Info.plist
@@ -19,13 +19,13 @@
CFBundlePackageType
APPL
CFBundleShortVersionString
- 16.5.11
+ 16.5.13
CFBundleSupportedPlatforms
MacOSX
CFBundleVersion
- 16.5.11
+ 16.5.13
DTCompiler
com.apple.compilers.llvm.clang.1_0
DTPlatformBuild
diff --git a/build.assets/macos/tshdev/tsh.app/Contents/Info.plist b/build.assets/macos/tshdev/tsh.app/Contents/Info.plist
index e033639c514c3..7135d12580c7d 100644
--- a/build.assets/macos/tshdev/tsh.app/Contents/Info.plist
+++ b/build.assets/macos/tshdev/tsh.app/Contents/Info.plist
@@ -17,13 +17,13 @@
CFBundlePackageType
APPL
CFBundleShortVersionString
- 16.5.11
+ 16.5.13
CFBundleSupportedPlatforms
MacOSX
CFBundleVersion
- 16.5.11
+ 16.5.13
DTCompiler
com.apple.compilers.llvm.clang.1_0
DTPlatformBuild
diff --git a/docs/cspell.json b/docs/cspell.json
index 289a29b118acd..821ccfb1bc2c5 100644
--- a/docs/cspell.json
+++ b/docs/cspell.json
@@ -160,6 +160,8 @@
"NOPASSWD",
"NVGJ",
"Näme",
+ "O_CLOEXEC",
+ "OCID",
"ODBC",
"OIDC",
"OTLP",
diff --git a/e b/e
index e21ffbdbea386..5bdc24ff0ba05 160000
--- a/e
+++ b/e
@@ -1 +1 @@
-Subproject commit e21ffbdbea38647e435d0a0bb5143bd468098bc6
+Subproject commit 5bdc24ff0ba05a942dd75a61bec45c900f6d07ea
diff --git a/examples/chart/access/datadog/Chart.yaml b/examples/chart/access/datadog/Chart.yaml
index aa85e09b43a09..d95db87b66d9c 100644
--- a/examples/chart/access/datadog/Chart.yaml
+++ b/examples/chart/access/datadog/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-datadog
diff --git a/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap
index 8423568cf86ae..fe139d19871e0 100644
--- a/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap
@@ -26,6 +26,6 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-datadog
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-datadog-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-datadog-16.5.13
name: RELEASE-NAME-teleport-plugin-datadog
diff --git a/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap
index 18d58c1b6d4a8..d3a4f93cb8fee 100644
--- a/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-datadog
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-datadog-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-datadog-16.5.13
name: RELEASE-NAME-teleport-plugin-datadog
spec:
replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-datadog
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-datadog-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-datadog-16.5.13
spec:
containers:
- command:
diff --git a/examples/chart/access/discord/Chart.yaml b/examples/chart/access/discord/Chart.yaml
index bee5d1026d421..0c47a8e7084e0 100644
--- a/examples/chart/access/discord/Chart.yaml
+++ b/examples/chart/access/discord/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-discord
diff --git a/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap
index 9155d3818ce03..11f1a068640e6 100644
--- a/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap
@@ -24,6 +24,6 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-discord
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-discord-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-discord-16.5.13
name: RELEASE-NAME-teleport-plugin-discord
diff --git a/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap
index 5482ca58a2ff7..142900b841ba3 100644
--- a/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-discord
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-discord-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-discord-16.5.13
name: RELEASE-NAME-teleport-plugin-discord
spec:
replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-discord
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-discord-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-discord-16.5.13
spec:
containers:
- command:
diff --git a/examples/chart/access/email/Chart.yaml b/examples/chart/access/email/Chart.yaml
index ed31d06553847..bba9cf8ee6f1f 100644
--- a/examples/chart/access/email/Chart.yaml
+++ b/examples/chart/access/email/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-email
diff --git a/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap
index f61809add655f..e426552cafb8b 100644
--- a/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap
@@ -26,8 +26,8 @@ should match the snapshot (mailgun on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
should match the snapshot (smtp on):
1: |
@@ -59,8 +59,8 @@ should match the snapshot (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
should match the snapshot (smtp on, no starttls):
1: |
@@ -92,8 +92,8 @@ should match the snapshot (smtp on, no starttls):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
should match the snapshot (smtp on, password file):
1: |
@@ -125,8 +125,8 @@ should match the snapshot (smtp on, password file):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
should match the snapshot (smtp on, roleToRecipients set):
1: |
@@ -161,8 +161,8 @@ should match the snapshot (smtp on, roleToRecipients set):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
should match the snapshot (smtp on, starttls disabled):
1: |
@@ -194,6 +194,6 @@ should match the snapshot (smtp on, starttls disabled):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
diff --git a/examples/chart/access/email/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/email/tests/__snapshot__/deployment_test.yaml.snap
index 18eb68087452c..dd95352406805 100644
--- a/examples/chart/access/email/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/access/email/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should be possible to override volume name (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
spec:
replicas: 1
@@ -22,8 +22,8 @@ should be possible to override volume name (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
spec:
containers:
- command:
@@ -34,7 +34,7 @@ should be possible to override volume name (smtp on):
env:
- name: TELEPORT_PLUGIN_FAIL_FAST
value: "true"
- image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.11
+ image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.13
imagePullPolicy: IfNotPresent
name: teleport-plugin-email
ports:
@@ -75,8 +75,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
spec:
replicas: 1
@@ -90,8 +90,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
spec:
containers:
- command:
@@ -136,8 +136,8 @@ should match the snapshot (mailgun on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
spec:
replicas: 1
@@ -151,8 +151,8 @@ should match the snapshot (mailgun on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
spec:
containers:
- command:
@@ -163,7 +163,7 @@ should match the snapshot (mailgun on):
env:
- name: TELEPORT_PLUGIN_FAIL_FAST
value: "true"
- image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.11
+ image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.13
imagePullPolicy: IfNotPresent
name: teleport-plugin-email
ports:
@@ -204,8 +204,8 @@ should match the snapshot (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
spec:
replicas: 1
@@ -219,8 +219,8 @@ should match the snapshot (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
spec:
containers:
- command:
@@ -231,7 +231,7 @@ should match the snapshot (smtp on):
env:
- name: TELEPORT_PLUGIN_FAIL_FAST
value: "true"
- image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.11
+ image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.13
imagePullPolicy: IfNotPresent
name: teleport-plugin-email
ports:
@@ -272,8 +272,8 @@ should mount external secret (mailgun on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
spec:
replicas: 1
@@ -287,8 +287,8 @@ should mount external secret (mailgun on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
spec:
containers:
- command:
@@ -299,7 +299,7 @@ should mount external secret (mailgun on):
env:
- name: TELEPORT_PLUGIN_FAIL_FAST
value: "true"
- image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.11
+ image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.13
imagePullPolicy: IfNotPresent
name: teleport-plugin-email
ports:
@@ -340,8 +340,8 @@ should mount external secret (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
name: RELEASE-NAME-teleport-plugin-email
spec:
replicas: 1
@@ -355,8 +355,8 @@ should mount external secret (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-email
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-email-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-email-16.5.13
spec:
containers:
- command:
@@ -367,7 +367,7 @@ should mount external secret (smtp on):
env:
- name: TELEPORT_PLUGIN_FAIL_FAST
value: "true"
- image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.11
+ image: public.ecr.aws/gravitational/teleport-plugin-email:16.5.13
imagePullPolicy: IfNotPresent
name: teleport-plugin-email
ports:
diff --git a/examples/chart/access/jira/Chart.yaml b/examples/chart/access/jira/Chart.yaml
index 33a46822a6727..4d8b667bae6a2 100644
--- a/examples/chart/access/jira/Chart.yaml
+++ b/examples/chart/access/jira/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-jira
diff --git a/examples/chart/access/jira/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/jira/tests/__snapshot__/configmap_test.yaml.snap
index 138d87bc20389..cb451a103cee8 100644
--- a/examples/chart/access/jira/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/access/jira/tests/__snapshot__/configmap_test.yaml.snap
@@ -32,6 +32,6 @@ should match the snapshot (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-jira
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-jira-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-jira-16.5.13
name: RELEASE-NAME-teleport-plugin-jira
diff --git a/examples/chart/access/jira/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/jira/tests/__snapshot__/deployment_test.yaml.snap
index d1c5a63ea5c54..4ba0302d24c0e 100644
--- a/examples/chart/access/jira/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/access/jira/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-jira
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-jira-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-jira-16.5.13
name: RELEASE-NAME-teleport-plugin-jira
spec:
replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-jira
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-jira-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-jira-16.5.13
spec:
containers:
- command:
diff --git a/examples/chart/access/mattermost/Chart.yaml b/examples/chart/access/mattermost/Chart.yaml
index 284efd6717b54..4c3496aff8252 100644
--- a/examples/chart/access/mattermost/Chart.yaml
+++ b/examples/chart/access/mattermost/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-mattermost
diff --git a/examples/chart/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap
index 5eebc4ee7d60b..7eea462b31a92 100644
--- a/examples/chart/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap
@@ -22,6 +22,6 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-mattermost
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-mattermost-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-mattermost-16.5.13
name: RELEASE-NAME-teleport-plugin-mattermost
diff --git a/examples/chart/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap
index 646237eb741b7..6249d7c912dae 100644
--- a/examples/chart/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-mattermost
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-mattermost-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-mattermost-16.5.13
name: RELEASE-NAME-teleport-plugin-mattermost
spec:
replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-mattermost
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-mattermost-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-mattermost-16.5.13
spec:
containers:
- command:
@@ -75,8 +75,8 @@ should mount external secret:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-mattermost
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-mattermost-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-mattermost-16.5.13
name: RELEASE-NAME-teleport-plugin-mattermost
spec:
replicas: 1
@@ -90,8 +90,8 @@ should mount external secret:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-mattermost
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-mattermost-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-mattermost-16.5.13
spec:
containers:
- command:
@@ -102,7 +102,7 @@ should mount external secret:
env:
- name: TELEPORT_PLUGIN_FAIL_FAST
value: "true"
- image: public.ecr.aws/gravitational/teleport-plugin-mattermost:16.5.11
+ image: public.ecr.aws/gravitational/teleport-plugin-mattermost:16.5.13
imagePullPolicy: IfNotPresent
name: teleport-plugin-mattermost
ports:
@@ -143,8 +143,8 @@ should override volume name:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-mattermost
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-mattermost-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-mattermost-16.5.13
name: RELEASE-NAME-teleport-plugin-mattermost
spec:
replicas: 1
@@ -158,8 +158,8 @@ should override volume name:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-mattermost
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-mattermost-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-mattermost-16.5.13
spec:
containers:
- command:
@@ -170,7 +170,7 @@ should override volume name:
env:
- name: TELEPORT_PLUGIN_FAIL_FAST
value: "true"
- image: public.ecr.aws/gravitational/teleport-plugin-mattermost:16.5.11
+ image: public.ecr.aws/gravitational/teleport-plugin-mattermost:16.5.13
imagePullPolicy: IfNotPresent
name: teleport-plugin-mattermost
ports:
diff --git a/examples/chart/access/msteams/Chart.yaml b/examples/chart/access/msteams/Chart.yaml
index d026719336a7e..56a31815bbbe2 100644
--- a/examples/chart/access/msteams/Chart.yaml
+++ b/examples/chart/access/msteams/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-msteams
diff --git a/examples/chart/access/msteams/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/msteams/tests/__snapshot__/configmap_test.yaml.snap
index 5d4446da9e743..10fd596bb1016 100644
--- a/examples/chart/access/msteams/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/access/msteams/tests/__snapshot__/configmap_test.yaml.snap
@@ -29,6 +29,6 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-msteams
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-msteams-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-msteams-16.5.13
name: RELEASE-NAME-teleport-plugin-msteams
diff --git a/examples/chart/access/msteams/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/msteams/tests/__snapshot__/deployment_test.yaml.snap
index 8368ce162fa2c..a2c356c2ef5fd 100644
--- a/examples/chart/access/msteams/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/access/msteams/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-msteams
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-msteams-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-msteams-16.5.13
name: RELEASE-NAME-teleport-plugin-msteams
spec:
replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-msteams
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-msteams-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-msteams-16.5.13
spec:
containers:
- command:
diff --git a/examples/chart/access/pagerduty/Chart.yaml b/examples/chart/access/pagerduty/Chart.yaml
index 4e091f63b9256..223da9423abf7 100644
--- a/examples/chart/access/pagerduty/Chart.yaml
+++ b/examples/chart/access/pagerduty/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-pagerduty
diff --git a/examples/chart/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap
index b4f1f1afa685b..4832072a1127a 100644
--- a/examples/chart/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap
@@ -21,6 +21,6 @@ should match the snapshot (smtp on):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-pagerduty
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-pagerduty-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-pagerduty-16.5.13
name: RELEASE-NAME-teleport-plugin-pagerduty
diff --git a/examples/chart/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap
index 65fb1464d5b45..25e88e7b852bc 100644
--- a/examples/chart/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-pagerduty
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-pagerduty-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-pagerduty-16.5.13
name: RELEASE-NAME-teleport-plugin-pagerduty
spec:
replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-pagerduty
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-pagerduty-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-pagerduty-16.5.13
spec:
containers:
- command:
diff --git a/examples/chart/access/slack/Chart.yaml b/examples/chart/access/slack/Chart.yaml
index afbc926ef36f3..c4c10048618ff 100644
--- a/examples/chart/access/slack/Chart.yaml
+++ b/examples/chart/access/slack/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-slack
diff --git a/examples/chart/access/slack/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/slack/tests/__snapshot__/configmap_test.yaml.snap
index 783bd4ee5cd72..f12b6657ffd97 100644
--- a/examples/chart/access/slack/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/access/slack/tests/__snapshot__/configmap_test.yaml.snap
@@ -24,6 +24,6 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-slack
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-slack-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-slack-16.5.13
name: RELEASE-NAME-teleport-plugin-slack
diff --git a/examples/chart/access/slack/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/slack/tests/__snapshot__/deployment_test.yaml.snap
index 45ccaa1edb6e4..4fc9d6e9eb739 100644
--- a/examples/chart/access/slack/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/access/slack/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-slack
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-slack-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-slack-16.5.13
name: RELEASE-NAME-teleport-plugin-slack
spec:
replicas: 1
@@ -22,8 +22,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-slack
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-slack-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-slack-16.5.13
spec:
containers:
- command:
diff --git a/examples/chart/event-handler/Chart.yaml b/examples/chart/event-handler/Chart.yaml
index 2c84e01acedcd..fb8b3f043e68d 100644
--- a/examples/chart/event-handler/Chart.yaml
+++ b/examples/chart/event-handler/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
apiVersion: v2
name: teleport-plugin-event-handler
diff --git a/examples/chart/event-handler/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/event-handler/tests/__snapshot__/configmap_test.yaml.snap
index 20c5b6d08442a..da02b13740dcc 100644
--- a/examples/chart/event-handler/tests/__snapshot__/configmap_test.yaml.snap
+++ b/examples/chart/event-handler/tests/__snapshot__/configmap_test.yaml.snap
@@ -26,6 +26,6 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-event-handler
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-event-handler-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-event-handler-16.5.13
name: RELEASE-NAME-teleport-plugin-event-handler
diff --git a/examples/chart/event-handler/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/event-handler/tests/__snapshot__/deployment_test.yaml.snap
index 1504c7f86f4ce..7a5514a7b2681 100644
--- a/examples/chart/event-handler/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/event-handler/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-plugin-event-handler
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-plugin-event-handler-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-plugin-event-handler-16.5.13
name: RELEASE-NAME-teleport-plugin-event-handler
spec:
replicas: 1
@@ -82,7 +82,7 @@ should mount tls.existingCASecretName and set environment when set in values:
value: "true"
- name: SSL_CERT_FILE
value: /etc/teleport-tls-ca/ca.pem
- image: public.ecr.aws/gravitational/teleport-plugin-event-handler:16.5.11
+ image: public.ecr.aws/gravitational/teleport-plugin-event-handler:16.5.13
imagePullPolicy: IfNotPresent
name: teleport-plugin-event-handler
ports:
diff --git a/examples/chart/tbot/Chart.yaml b/examples/chart/tbot/Chart.yaml
index 0262ebf8b0dfd..4bfce37bad81e 100644
--- a/examples/chart/tbot/Chart.yaml
+++ b/examples/chart/tbot/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
name: tbot
apiVersion: v2
diff --git a/examples/chart/tbot/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/tbot/tests/__snapshot__/deployment_test.yaml.snap
index a65ed79e3b6c6..ab97842051408 100644
--- a/examples/chart/tbot/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/tbot/tests/__snapshot__/deployment_test.yaml.snap
@@ -29,7 +29,7 @@ should match the snapshot (full):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: tbot
- helm.sh/chart: tbot-16.5.11
+ helm.sh/chart: tbot-16.5.13
test-key: test-label-pod
spec:
affinity:
@@ -68,7 +68,7 @@ should match the snapshot (full):
value: "1"
- name: TEST_ENV
value: test-value
- image: public.ecr.aws/gravitational/tbot-distroless:16.5.11
+ image: public.ecr.aws/gravitational/tbot-distroless:16.5.13
imagePullPolicy: Always
livenessProbe:
failureThreshold: 6
@@ -164,7 +164,7 @@ should match the snapshot (simple):
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: tbot
- helm.sh/chart: tbot-16.5.11
+ helm.sh/chart: tbot-16.5.13
spec:
containers:
- args:
@@ -186,7 +186,7 @@ should match the snapshot (simple):
fieldPath: spec.nodeName
- name: KUBERNETES_TOKEN_PATH
value: /var/run/secrets/tokens/join-sa-token
- image: public.ecr.aws/gravitational/tbot-distroless:16.5.11
+ image: public.ecr.aws/gravitational/tbot-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
diff --git a/examples/chart/teleport-cluster/Chart.yaml b/examples/chart/teleport-cluster/Chart.yaml
index 310db9eb67ad8..1680e4ad86e64 100644
--- a/examples/chart/teleport-cluster/Chart.yaml
+++ b/examples/chart/teleport-cluster/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
name: teleport-cluster
apiVersion: v2
diff --git a/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml b/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml
index e0202cb53c7f5..8f22e55b0e7ae 100644
--- a/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml
+++ b/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
name: teleport-operator
apiVersion: v2
diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap
index 4b9f2d6b8ce92..b3f30f8b240a6 100644
--- a/examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap
+++ b/examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap
@@ -8,8 +8,8 @@ adds operator permissions to ClusterRole:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-cluster-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-cluster-16.5.13
teleport.dev/majorVersion: "16"
name: RELEASE-NAME
rules:
diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap
index 7d9ed158bdfc4..d8834223f1eaa 100644
--- a/examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap
+++ b/examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap
@@ -1848,8 +1848,8 @@ sets clusterDomain on Configmap:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-cluster-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-cluster-16.5.13
teleport.dev/majorVersion: "16"
name: RELEASE-NAME-auth
namespace: NAMESPACE
diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap
index 1830c25aaf191..27be741147911 100644
--- a/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap
+++ b/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap
@@ -8,7 +8,7 @@
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -142,7 +142,7 @@ should set nodeSelector when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -240,7 +240,7 @@ should set resources when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -327,7 +327,7 @@ should set securityContext when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap
index 9272ef2c8a3bb..c3089dbea228b 100644
--- a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap
+++ b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap
@@ -567,8 +567,8 @@ sets clusterDomain on Configmap:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-cluster-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-cluster-16.5.13
teleport.dev/majorVersion: "16"
name: RELEASE-NAME-proxy
namespace: NAMESPACE
diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap
index 0274a27e3db35..d7accccf0ff2a 100644
--- a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap
+++ b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap
@@ -11,8 +11,8 @@ sets clusterDomain on Deployment Pods:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-cluster-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-cluster-16.5.13
teleport.dev/majorVersion: "16"
name: RELEASE-NAME-proxy
namespace: NAMESPACE
@@ -26,7 +26,7 @@ sets clusterDomain on Deployment Pods:
template:
metadata:
annotations:
- checksum/config: 2cb61bbeba82a1e5c92b0f745b6812a5a48ca0ddeb27b7b15f37d163cd9def15
+ checksum/config: d7f0021bc737191f0e4aee275af1ac1f28d7f9d2ed5f1a33aba7e8af1c9f8948
kubernetes.io/pod: test-annotation
kubernetes.io/pod-different: 4
labels:
@@ -34,8 +34,8 @@ sets clusterDomain on Deployment Pods:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
- app.kubernetes.io/version: 16.5.11
- helm.sh/chart: teleport-cluster-16.5.11
+ app.kubernetes.io/version: 16.5.13
+ helm.sh/chart: teleport-cluster-16.5.13
teleport.dev/majorVersion: "16"
spec:
affinity:
@@ -44,7 +44,7 @@ sets clusterDomain on Deployment Pods:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -106,7 +106,7 @@ sets clusterDomain on Deployment Pods:
- wait
- no-resolve
- RELEASE-NAME-auth-v15.NAMESPACE.svc.test.com
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
name: wait-auth-update
serviceAccountName: RELEASE-NAME-proxy
terminationGracePeriodSeconds: 60
@@ -138,7 +138,7 @@ should provision initContainer correctly when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v15.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
name: wait-auth-update
resources:
limits:
@@ -202,7 +202,7 @@ should set nodeSelector when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -264,7 +264,7 @@ should set nodeSelector when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v15.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
name: wait-auth-update
nodeSelector:
environment: security
@@ -315,7 +315,7 @@ should set resources for wait-auth-update initContainer when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -384,7 +384,7 @@ should set resources for wait-auth-update initContainer when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v15.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
name: wait-auth-update
resources:
limits:
@@ -424,7 +424,7 @@ should set resources when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -493,7 +493,7 @@ should set resources when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v15.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
name: wait-auth-update
resources:
limits:
@@ -533,7 +533,7 @@ should set securityContext for initContainers when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -602,7 +602,7 @@ should set securityContext for initContainers when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v15.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
name: wait-auth-update
securityContext:
allowPrivilegeEscalation: false
@@ -642,7 +642,7 @@ should set securityContext when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -711,7 +711,7 @@ should set securityContext when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v15.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
name: wait-auth-update
securityContext:
allowPrivilegeEscalation: false
diff --git a/examples/chart/teleport-kube-agent/Chart.yaml b/examples/chart/teleport-kube-agent/Chart.yaml
index 46e12ca845a08..11b5e57da78e9 100644
--- a/examples/chart/teleport-kube-agent/Chart.yaml
+++ b/examples/chart/teleport-kube-agent/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "16.5.11"
+.version: &version "16.5.13"
name: teleport-kube-agent
apiVersion: v2
diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap
index 827bef5359f23..8d220ae0e3426 100644
--- a/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap
@@ -32,7 +32,7 @@ sets Deployment annotations when specified if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -109,7 +109,7 @@ sets Deployment labels when specified if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -173,7 +173,7 @@ sets Pod annotations when specified if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -237,7 +237,7 @@ sets Pod labels when specified if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -322,7 +322,7 @@ should add emptyDir for data when existingDataVolume is not set if action is Upg
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -387,7 +387,7 @@ should add insecureSkipProxyTLSVerify to args when set in values if action is Up
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -451,7 +451,7 @@ should correctly configure existingDataVolume when set if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -513,7 +513,7 @@ should expose diag port if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -589,7 +589,7 @@ should have multiple replicas when replicaCount is set (using .replicaCount, dep
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -665,7 +665,7 @@ should have multiple replicas when replicaCount is set (using highAvailability.r
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -729,7 +729,7 @@ should have one replica when replicaCount is not set if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -793,7 +793,7 @@ should mount extraVolumes and extraVolumeMounts if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -862,7 +862,7 @@ should mount jamfCredentialsSecret if it already exists and when role is jamf an
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -932,7 +932,7 @@ should mount jamfCredentialsSecret.name when role is jamf and action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1004,7 +1004,7 @@ should mount tls.existingCASecretName and set environment when set in values if
value: cluster.local
- name: SSL_CERT_FILE
value: /etc/teleport-tls-ca/ca.pem
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1078,7 +1078,7 @@ should mount tls.existingCASecretName and set extra environment when set in valu
value: http://username:password@my.proxy.host:3128
- name: SSL_CERT_FILE
value: /etc/teleport-tls-ca/ca.pem
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1148,7 +1148,7 @@ should provision initContainer correctly when set in values if action is Upgrade
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1270,7 +1270,7 @@ should set affinity when set in values if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1334,7 +1334,7 @@ should set default serviceAccountName when not set in values if action is Upgrad
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1411,7 +1411,7 @@ should set environment when extraEnv set in values if action is Upgrade:
value: cluster.local
- name: HTTPS_PROXY
value: http://username:password@my.proxy.host:3128
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1539,7 +1539,7 @@ should set imagePullPolicy when set in values if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: Always
livenessProbe:
failureThreshold: 6
@@ -1603,7 +1603,7 @@ should set nodeSelector if set in values if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1669,7 +1669,7 @@ should set not set priorityClassName when not set in values if action is Upgrade
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1745,7 +1745,7 @@ should set preferred affinity when more than one replica is used if action is Up
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1809,7 +1809,7 @@ should set priorityClassName when set in values if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1874,7 +1874,7 @@ should set probeTimeoutSeconds when set in values if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1948,7 +1948,7 @@ should set required affinity when highAvailability.requireAntiAffinity is set if
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2012,7 +2012,7 @@ should set resources when set in values if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2083,7 +2083,7 @@ should set serviceAccountName when set in values if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2147,7 +2147,7 @@ should set tolerations when set in values if action is Upgrade:
value: "true"
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap
index f6876a9f2b4ba..00cd0e024f534 100644
--- a/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap
+++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap
@@ -25,7 +25,7 @@ should create ServiceAccount for post-delete hook by default:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
@@ -108,7 +108,7 @@ should not create ServiceAccount for post-delete hook if serviceAccount.create i
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
@@ -138,7 +138,7 @@ should not create ServiceAccount, Role or RoleBinding for post-delete hook if se
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
@@ -168,7 +168,7 @@ should set nodeSelector in post-delete hook:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
@@ -200,7 +200,7 @@ should set resources in the Job's pod spec if resources is set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
name: post-delete-job
resources:
diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap
index 41e9141725a02..12b37e046af10 100644
--- a/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap
+++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap
@@ -18,7 +18,7 @@ sets Pod annotations when specified:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -90,7 +90,7 @@ sets Pod labels when specified:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -186,7 +186,7 @@ sets StatefulSet labels when specified:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -290,7 +290,7 @@ should add insecureSkipProxyTLSVerify to args when set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -362,7 +362,7 @@ should add volumeClaimTemplate for data volume when using StatefulSet and action
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -454,7 +454,7 @@ should add volumeClaimTemplate for data volume when using StatefulSet and is Fre
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -536,7 +536,7 @@ should add volumeMount for data volume when using StatefulSet:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -608,7 +608,7 @@ should expose diag port:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -680,7 +680,7 @@ should generate Statefulset when storage is disabled and mode is a Upgrade:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -766,7 +766,7 @@ should have multiple replicas when replicaCount is set (using .replicaCount, dep
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -850,7 +850,7 @@ should have multiple replicas when replicaCount is set (using highAvailability.r
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -922,7 +922,7 @@ should have one replica when replicaCount is not set:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -994,7 +994,7 @@ should install Statefulset when storage is disabled and mode is a Fresh Install:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1068,7 +1068,7 @@ should mount extraVolumes and extraVolumeMounts:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1145,7 +1145,7 @@ should mount jamfCredentialsSecret if it already exists and when role is jamf:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1225,7 +1225,7 @@ should mount jamfCredentialsSecret.name when role is jamf:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1307,7 +1307,7 @@ should mount tls.existingCASecretName and set environment when set in values:
value: cluster.local
- name: SSL_CERT_FILE
value: /etc/teleport-tls-ca/ca.pem
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1391,7 +1391,7 @@ should mount tls.existingCASecretName and set extra environment when set in valu
value: /etc/teleport-tls-ca/ca.pem
- name: HTTPS_PROXY
value: http://username:password@my.proxy.host:3128
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1471,7 +1471,7 @@ should not add emptyDir for data when using StatefulSet:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1543,7 +1543,7 @@ should provision initContainer correctly when set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1673,7 +1673,7 @@ should set affinity when set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1745,7 +1745,7 @@ should set default serviceAccountName when not set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1830,7 +1830,7 @@ should set environment when extraEnv set in values:
value: cluster.local
- name: HTTPS_PROXY
value: http://username:password@my.proxy.host:3128
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1974,7 +1974,7 @@ should set imagePullPolicy when set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: Always
livenessProbe:
failureThreshold: 6
@@ -2046,7 +2046,7 @@ should set nodeSelector if set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2132,7 +2132,7 @@ should set preferred affinity when more than one replica is used:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2204,7 +2204,7 @@ should set probeTimeoutSeconds when set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2286,7 +2286,7 @@ should set required affinity when highAvailability.requireAntiAffinity is set:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2358,7 +2358,7 @@ should set resources when set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2437,7 +2437,7 @@ should set serviceAccountName when set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2509,7 +2509,7 @@ should set storage.requests when set in values and action is an Upgrade:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2581,7 +2581,7 @@ should set storage.storageClassName when set in values and action is an Upgrade:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2653,7 +2653,7 @@ should set tolerations when set in values:
value: RELEASE-NAME
- name: TELEPORT_KUBE_CLUSTER_DOMAIN
value: cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:16.5.11
+ image: public.ecr.aws/gravitational/teleport-distroless:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap
index 132580423daef..9fc0c4711fc91 100644
--- a/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap
+++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap
@@ -27,7 +27,7 @@ sets the affinity:
- --base-image=public.ecr.aws/gravitational/teleport-distroless
- --version-server=https://my-custom-version-server/v1
- --version-channel=custom/preview
- image: public.ecr.aws/gravitational/teleport-kube-agent-updater:16.5.11
+ image: public.ecr.aws/gravitational/teleport-kube-agent-updater:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -73,7 +73,7 @@ sets the tolerations:
- --base-image=public.ecr.aws/gravitational/teleport-distroless
- --version-server=https://my-custom-version-server/v1
- --version-channel=custom/preview
- image: public.ecr.aws/gravitational/teleport-kube-agent-updater:16.5.11
+ image: public.ecr.aws/gravitational/teleport-kube-agent-updater:16.5.13
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6