Release 17.7.11

[doggydogworld]

17.7.11 (12/08/25)

• Reduced memory consumption of the Application service. #62013
• Prevented stuck teleport-cluster Helm chart rollouts in small Kubernetes clusters. Removed resource requests from configuration check hooks. #62004
• Updated Go to 1.24.11. #61954
• Updates tsh workload-identity issue-x509 to automatically create the specified folder if it does not exist. #61951
• Fixed a bug where JWT-SVID timestamp claims would be represented using scientific notation. #61922
• Fixed a bug causing high memory consumption in the Teleport Auth Service when clients were listing large resources. #61848
• Prevent data races when terminating interactive Kubernetes sessions. #61822
• Fix tsh db connect failing to connect to databases using separate ports configuration (non-TLS routing mode). #61811
• Fixed bug where Kubernetes App Discovery poll_interval is not set correctly. #61792
• Fixed relative path evaluation for SFTP in proxy recording mode. #61759
• Fixed tsh kube ls showing deleted clusters. #61743
• Fixed workload identity templating to support certain numeric values that previously gave a "expression did not evaluate to a string" error. #61739
• Fixed AWS Console access when using AWS IAM Roles Anywhere or AWS OIDC integrations, when IP Pinning is enabled. #61655
• Added ability to update existing Azure OIDC integration with tctl. #61593
• Prevented Trivy from reporting false positives when scanning the Teleport binaries. #61540
• Updated tsh debug output to include tsh client version when --debug flag is set. #61526
• Fixed web upload/download failure behind load balancers when web listen address is unspecified. #61394
• Fixed corrupted private keys breaking tsh. #61387
• Fix an issue connections to MongoDB Atlas clusters fail if clusters use certs signed by Google Trust Services (GTS). #61325
• GOAWAY errors received from Kubernetes API Servers configured with a non-zero --goaway-chance are now forward to clients to be retried. #61255
• Added a Workload Identities page to the web UI to list workload identities. #59478

[github-actions]

Amplify deployment status

Branch	Commit	Job ID	Status	Preview	Updated (UTC)
release/17.7.11	HEAD	1	✅SUCCEED	release-17-7-11	2025-12-08 19:56:45