diff --git a/CHANGELOG.md b/CHANGELOG.md index c7bb89ed350f6..ccacf08626173 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,51 @@ # Changelog +## 18.6.4 (01/20/26) + +* Fixed GCS session recording backend not respecting rate limits. [#62986](https://github.com/gravitational/teleport/pull/62986) +* Fixed a bug where members of a former owner Access List retain the owner permissions grants of the former owned Access List. It also fixes the issue with not being able to delete a former owner Access List. Please note: this could only happen if the owner Access List ownership was removed via the web UI. [#62979](https://github.com/gravitational/teleport/pull/62979) +* Tctl commands executed from Teleport Connect now target the current root cluster with the `TELEPORT_AUTH_SERVER` env var, similar to how it works for tsh; this behavior can be turned off in the config file. [#62923](https://github.com/gravitational/teleport/pull/62923) +* Made the `teleport-cluster` Helm chart job resources configurable again via the `jobResources` value. [#62922](https://github.com/gravitational/teleport/pull/62922) +* Updated Go to 1.24.12. [#62885](https://github.com/gravitational/teleport/pull/62885) +* Fixed launching AWS Identity Center from Teleport Connect. [#62840](https://github.com/gravitational/teleport/pull/62840) +* Removed erroneous `pair-wise` subject type from Teleport's OpenID configuration. [#62835](https://github.com/gravitational/teleport/pull/62835) +* Fixed renewed X509-SVIDs not being proactively sent to Envoy instances. [#62830](https://github.com/gravitational/teleport/pull/62830) +* Fix an issue `MCP Session Listen` events may spam audit log with app service error `malformed line in SSE stream: ""`. [#62811](https://github.com/gravitational/teleport/pull/62811) +* Added automatic client certificate reloading option for postgres backends. [#62747](https://github.com/gravitational/teleport/pull/62747) +* Fixed an issue that would prevent tsh from working when the 1password SSH agent is running. [#62736](https://github.com/gravitational/teleport/pull/62736) +* Add `tbot wait` API and helper to let scripts wait for bots to become ready. [#62719](https://github.com/gravitational/teleport/pull/62719) +* MWI: Add support for templating secret annotations in the tbot's `kubernetes/argo-cd` service. [#62709](https://github.com/gravitational/teleport/pull/62709) +* Add `quicksight.aws.amazon.com` as valid URL for AWS Console access. [#62700](https://github.com/gravitational/teleport/pull/62700) +* Fixed potential delay in updating User Task status for Discovery resources. [#62699](https://github.com/gravitational/teleport/pull/62699) +* Fixed an issue where logging in to the Web UI with Device Trust would lose query params of the redirect URL. [#62677](https://github.com/gravitational/teleport/pull/62677) +* Fixed an issue where Teleport Connect could generate a flurry of notifications about not being able to connect to a resource. [#62671](https://github.com/gravitational/teleport/pull/62671) +* Fixed issuance of wildcard DNS SANs with Workload Identity. [#62667](https://github.com/gravitational/teleport/pull/62667) +* Fixed a memory leak in access list reminder notifications affecting clusters with more than 1000 pending Access List reviews. [#62663](https://github.com/gravitational/teleport/pull/62663) +* Added support for health checks to monitor cert authority availability and affect Teleport Auth readiness. [#62637](https://github.com/gravitational/teleport/pull/62637) +* Added IAM joining support from new AWS regions in asia. [#62627](https://github.com/gravitational/teleport/pull/62627) +* Added VNet config Create/Update/Delete audit events. [#62618](https://github.com/gravitational/teleport/pull/62618) +* Added cleanup of access entries for EKS auto-discovered clusters when they no longer match the filtering criteria and are removed. [#62598](https://github.com/gravitational/teleport/pull/62598) +* Added `teleport debug metrics` command. [#62586](https://github.com/gravitational/teleport/pull/62586) +* Fixed missing initialization of Azure IMDS clients, which could cause operational failures in some Teleport configurations deployed to Azure, in particular when accessing Azure SQL Server. [#62579](https://github.com/gravitational/teleport/pull/62579) +* Fixed some auto update audit events showing up as unknown in the web UI. [#62547](https://github.com/gravitational/teleport/pull/62547) +* The join tokens UI now indicates which tokens are managed by the Teleport Cloud platform. [#62544](https://github.com/gravitational/teleport/pull/62544) +* The tctl tokens add command now includes the CA pins in JSON and YAML output. [#62536](https://github.com/gravitational/teleport/pull/62536) +* Added `teleport debug readyz` command. [#62532](https://github.com/gravitational/teleport/pull/62532) +* Audit log and session uploader now respect region field of external_audit_storage resource when present. [#62520](https://github.com/gravitational/teleport/pull/62520) +* Added default routes to the web UI left nav top-level category buttons. [#62502](https://github.com/gravitational/teleport/pull/62502) +* Fixed an issue that prevented searching for users by role in the web UI. [#62474](https://github.com/gravitational/teleport/pull/62474) +* Fixed tilde expansion for moderated SFTP. [#62453](https://github.com/gravitational/teleport/pull/62453) +* Added support for standard TLS secret key names for helm charts: `teleport-plugin-event-handler`, `teleport-cluster`, `teleport-operator`, `teleport-kube-agent`. [#62451](https://github.com/gravitational/teleport/pull/62451) +* Added a plan modifier to recompute kubernetes_resources defaults during role version upgrades, fixing Terraform role upgrade issues. [#62417](https://github.com/gravitational/teleport/pull/62417) +* Fix an issue in the Teleport SSH Service where interactive PAM Auth modules always fail when trying to run exec sessions with tty allocated. e.g. `tsh ssh --tty ls`. [#62064](https://github.com/gravitational/teleport/pull/62064) + +Enterprise: +* Fixed an issue in the Entra ID integration where a user account with an unsupported username character `/` could prevent other valid users and groups to be synced to Teleport. Such user accounts are now filtered. +* Cockroachdb: add automatic client certificate reloading option. +* Enabled UI editing of Access List descriptions. +* Added protections against replay attacks when IdP-initiated SAML is enabled. +* Added Access Automations Terraform dialog. + ## 18.6.3 (01/07/26) This is a follow up to the private security release. Changelog will be publicly announced in a later version. diff --git a/Makefile b/Makefile index 398489f13a283..d8a5da4604eb0 100644 --- a/Makefile +++ b/Makefile @@ -13,7 +13,7 @@ # Stable releases: "1.0.0" # Pre-releases: "1.0.0-alpha.1", "1.0.0-beta.2", "1.0.0-rc.3" # Master/dev branch: "1.0.0-dev" -VERSION=18.6.1 +VERSION=18.6.4 DOCKER_IMAGE ?= teleport diff --git a/api/version.go b/api/version.go index 7390ce1e099c6..1b691cbe35bc2 100644 --- a/api/version.go +++ b/api/version.go @@ -2,10 +2,10 @@ package api -const Version = "18.6.1" +const Version = "18.6.4" const VersionMajor = 18 const VersionMinor = 6 -const VersionPatch = 1 +const VersionPatch = 4 const VersionPreRelease = "" const VersionMetadata = "" diff --git a/build.assets/macos/tsh/tsh.app/Contents/Info.plist b/build.assets/macos/tsh/tsh.app/Contents/Info.plist index a8a877b571813..05bbb62d9c18c 100644 --- a/build.assets/macos/tsh/tsh.app/Contents/Info.plist +++ b/build.assets/macos/tsh/tsh.app/Contents/Info.plist @@ -19,13 +19,13 @@ CFBundlePackageType APPL CFBundleShortVersionString - 18.6.1 + 18.6.4 CFBundleSupportedPlatforms MacOSX CFBundleVersion - 18.6.1 + 18.6.4 DTCompiler com.apple.compilers.llvm.clang.1_0 DTPlatformBuild diff --git a/build.assets/macos/tshdev/tsh.app/Contents/Info.plist b/build.assets/macos/tshdev/tsh.app/Contents/Info.plist index 5bdd4440a0a81..a489073853bd1 100644 --- a/build.assets/macos/tshdev/tsh.app/Contents/Info.plist +++ b/build.assets/macos/tshdev/tsh.app/Contents/Info.plist @@ -17,13 +17,13 @@ CFBundlePackageType APPL CFBundleShortVersionString - 18.6.1 + 18.6.4 CFBundleSupportedPlatforms MacOSX CFBundleVersion - 18.6.1 + 18.6.4 DTCompiler com.apple.compilers.llvm.clang.1_0 DTPlatformBuild diff --git a/e b/e index 0b67b1005fa6d..f8e02b124419e 160000 --- a/e +++ b/e @@ -1 +1 @@ -Subproject commit 0b67b1005fa6d8ab9d4768a3e445006819975794 +Subproject commit f8e02b124419eaa381540928d4966bcb56fc55d7 diff --git a/examples/chart/access/datadog/Chart.yaml b/examples/chart/access/datadog/Chart.yaml index c20832835b5e4..0f55b0b1d147d 100644 --- a/examples/chart/access/datadog/Chart.yaml +++ b/examples/chart/access/datadog/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-datadog diff --git a/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap index df9b32b3b801f..3dbd7e8156dbe 100644 --- a/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/access/datadog/tests/__snapshot__/configmap_test.yaml.snap @@ -26,6 +26,6 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-datadog - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-datadog-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-datadog-18.6.4 name: RELEASE-NAME-teleport-plugin-datadog diff --git a/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap index 0468053714ded..056dcd976dc1f 100644 --- a/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/access/datadog/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-datadog - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-datadog-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-datadog-18.6.4 name: RELEASE-NAME-teleport-plugin-datadog spec: replicas: 1 @@ -22,8 +22,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-datadog - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-datadog-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-datadog-18.6.4 spec: containers: - command: diff --git a/examples/chart/access/discord/Chart.yaml b/examples/chart/access/discord/Chart.yaml index a9b3f3d674ec8..0771397825a8e 100644 --- a/examples/chart/access/discord/Chart.yaml +++ b/examples/chart/access/discord/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-discord diff --git a/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap index fb99215ed2650..ad5c976220d7f 100644 --- a/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/access/discord/tests/__snapshot__/configmap_test.yaml.snap @@ -24,6 +24,6 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-discord - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-discord-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-discord-18.6.4 name: RELEASE-NAME-teleport-plugin-discord diff --git a/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap index 313adeb4cb530..ee319d051fce7 100644 --- a/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/access/discord/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-discord - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-discord-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-discord-18.6.4 name: RELEASE-NAME-teleport-plugin-discord spec: replicas: 1 @@ -22,8 +22,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-discord - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-discord-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-discord-18.6.4 spec: containers: - command: diff --git a/examples/chart/access/email/Chart.yaml b/examples/chart/access/email/Chart.yaml index 1d8e6c0573d92..5ef869f844959 100644 --- a/examples/chart/access/email/Chart.yaml +++ b/examples/chart/access/email/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-email diff --git a/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap index e12eb224233aa..c739a7c677639 100644 --- a/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/access/email/tests/__snapshot__/configmap_test.yaml.snap @@ -26,8 +26,8 @@ should match the snapshot (mailgun on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email should match the snapshot (smtp on): 1: | @@ -59,8 +59,8 @@ should match the snapshot (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email should match the snapshot (smtp on, no starttls): 1: | @@ -92,8 +92,8 @@ should match the snapshot (smtp on, no starttls): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email should match the snapshot (smtp on, password file): 1: | @@ -125,8 +125,8 @@ should match the snapshot (smtp on, password file): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email should match the snapshot (smtp on, roleToRecipients set): 1: | @@ -161,8 +161,8 @@ should match the snapshot (smtp on, roleToRecipients set): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email should match the snapshot (smtp on, starttls disabled): 1: | @@ -194,6 +194,6 @@ should match the snapshot (smtp on, starttls disabled): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email diff --git a/examples/chart/access/email/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/email/tests/__snapshot__/deployment_test.yaml.snap index 24218a1300000..048504578eb3e 100644 --- a/examples/chart/access/email/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/access/email/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should be possible to override volume name (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email spec: replicas: 1 @@ -22,8 +22,8 @@ should be possible to override volume name (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 spec: containers: - command: @@ -34,7 +34,7 @@ should be possible to override volume name (smtp on): env: - name: TELEPORT_PLUGIN_FAIL_FAST value: "true" - image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.1 + image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.4 imagePullPolicy: IfNotPresent name: teleport-plugin-email ports: @@ -75,8 +75,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email spec: replicas: 1 @@ -90,8 +90,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 spec: containers: - command: @@ -136,8 +136,8 @@ should match the snapshot (mailgun on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email spec: replicas: 1 @@ -151,8 +151,8 @@ should match the snapshot (mailgun on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 spec: containers: - command: @@ -163,7 +163,7 @@ should match the snapshot (mailgun on): env: - name: TELEPORT_PLUGIN_FAIL_FAST value: "true" - image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.1 + image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.4 imagePullPolicy: IfNotPresent name: teleport-plugin-email ports: @@ -204,8 +204,8 @@ should match the snapshot (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email spec: replicas: 1 @@ -219,8 +219,8 @@ should match the snapshot (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 spec: containers: - command: @@ -231,7 +231,7 @@ should match the snapshot (smtp on): env: - name: TELEPORT_PLUGIN_FAIL_FAST value: "true" - image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.1 + image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.4 imagePullPolicy: IfNotPresent name: teleport-plugin-email ports: @@ -272,8 +272,8 @@ should mount external secret (mailgun on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email spec: replicas: 1 @@ -287,8 +287,8 @@ should mount external secret (mailgun on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 spec: containers: - command: @@ -299,7 +299,7 @@ should mount external secret (mailgun on): env: - name: TELEPORT_PLUGIN_FAIL_FAST value: "true" - image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.1 + image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.4 imagePullPolicy: IfNotPresent name: teleport-plugin-email ports: @@ -340,8 +340,8 @@ should mount external secret (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 name: RELEASE-NAME-teleport-plugin-email spec: replicas: 1 @@ -355,8 +355,8 @@ should mount external secret (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-email - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-email-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-email-18.6.4 spec: containers: - command: @@ -367,7 +367,7 @@ should mount external secret (smtp on): env: - name: TELEPORT_PLUGIN_FAIL_FAST value: "true" - image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.1 + image: public.ecr.aws/gravitational/teleport-plugin-email:18.6.4 imagePullPolicy: IfNotPresent name: teleport-plugin-email ports: diff --git a/examples/chart/access/jira/Chart.yaml b/examples/chart/access/jira/Chart.yaml index c9d8fdffacccf..2dc836aa0790d 100644 --- a/examples/chart/access/jira/Chart.yaml +++ b/examples/chart/access/jira/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-jira diff --git a/examples/chart/access/jira/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/jira/tests/__snapshot__/configmap_test.yaml.snap index a8c0efebab1f1..d6d7d0b1f906a 100644 --- a/examples/chart/access/jira/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/access/jira/tests/__snapshot__/configmap_test.yaml.snap @@ -32,6 +32,6 @@ should match the snapshot (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-jira - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-jira-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-jira-18.6.4 name: RELEASE-NAME-teleport-plugin-jira diff --git a/examples/chart/access/jira/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/jira/tests/__snapshot__/deployment_test.yaml.snap index 2ca599960eba7..ed5b33ccd2ebd 100644 --- a/examples/chart/access/jira/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/access/jira/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-jira - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-jira-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-jira-18.6.4 name: RELEASE-NAME-teleport-plugin-jira spec: replicas: 1 @@ -22,8 +22,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-jira - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-jira-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-jira-18.6.4 spec: containers: - command: diff --git a/examples/chart/access/mattermost/Chart.yaml b/examples/chart/access/mattermost/Chart.yaml index b25f93e0c5e1e..c8dd87090f037 100644 --- a/examples/chart/access/mattermost/Chart.yaml +++ b/examples/chart/access/mattermost/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-mattermost diff --git a/examples/chart/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap index 0b9ffc840cc23..f4779714679da 100644 --- a/examples/chart/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap @@ -22,6 +22,6 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-mattermost - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-mattermost-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-mattermost-18.6.4 name: RELEASE-NAME-teleport-plugin-mattermost diff --git a/examples/chart/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap index df126f6b6de52..46c0d95192345 100644 --- a/examples/chart/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-mattermost - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-mattermost-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-mattermost-18.6.4 name: RELEASE-NAME-teleport-plugin-mattermost spec: replicas: 1 @@ -22,8 +22,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-mattermost - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-mattermost-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-mattermost-18.6.4 spec: containers: - command: @@ -75,8 +75,8 @@ should mount external secret: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-mattermost - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-mattermost-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-mattermost-18.6.4 name: RELEASE-NAME-teleport-plugin-mattermost spec: replicas: 1 @@ -90,8 +90,8 @@ should mount external secret: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-mattermost - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-mattermost-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-mattermost-18.6.4 spec: containers: - command: @@ -102,7 +102,7 @@ should mount external secret: env: - name: TELEPORT_PLUGIN_FAIL_FAST value: "true" - image: public.ecr.aws/gravitational/teleport-plugin-mattermost:18.6.1 + image: public.ecr.aws/gravitational/teleport-plugin-mattermost:18.6.4 imagePullPolicy: IfNotPresent name: teleport-plugin-mattermost ports: @@ -143,8 +143,8 @@ should override volume name: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-mattermost - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-mattermost-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-mattermost-18.6.4 name: RELEASE-NAME-teleport-plugin-mattermost spec: replicas: 1 @@ -158,8 +158,8 @@ should override volume name: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-mattermost - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-mattermost-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-mattermost-18.6.4 spec: containers: - command: @@ -170,7 +170,7 @@ should override volume name: env: - name: TELEPORT_PLUGIN_FAIL_FAST value: "true" - image: public.ecr.aws/gravitational/teleport-plugin-mattermost:18.6.1 + image: public.ecr.aws/gravitational/teleport-plugin-mattermost:18.6.4 imagePullPolicy: IfNotPresent name: teleport-plugin-mattermost ports: diff --git a/examples/chart/access/msteams/Chart.yaml b/examples/chart/access/msteams/Chart.yaml index 4d0a9b4765a1c..5dc7cc8e55b9e 100644 --- a/examples/chart/access/msteams/Chart.yaml +++ b/examples/chart/access/msteams/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-msteams diff --git a/examples/chart/access/msteams/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/msteams/tests/__snapshot__/configmap_test.yaml.snap index bddf7dfc5ca31..79e24f7d974e4 100644 --- a/examples/chart/access/msteams/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/access/msteams/tests/__snapshot__/configmap_test.yaml.snap @@ -29,6 +29,6 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-msteams - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-msteams-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-msteams-18.6.4 name: RELEASE-NAME-teleport-plugin-msteams diff --git a/examples/chart/access/msteams/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/msteams/tests/__snapshot__/deployment_test.yaml.snap index 5943d4ffab67d..9c232ee80cda9 100644 --- a/examples/chart/access/msteams/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/access/msteams/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-msteams - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-msteams-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-msteams-18.6.4 name: RELEASE-NAME-teleport-plugin-msteams spec: replicas: 1 @@ -22,8 +22,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-msteams - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-msteams-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-msteams-18.6.4 spec: containers: - command: diff --git a/examples/chart/access/pagerduty/Chart.yaml b/examples/chart/access/pagerduty/Chart.yaml index 987019c70166a..1be27a443e731 100644 --- a/examples/chart/access/pagerduty/Chart.yaml +++ b/examples/chart/access/pagerduty/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-pagerduty diff --git a/examples/chart/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap index 7fb60f13caa40..e0e9aaab0b989 100644 --- a/examples/chart/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap @@ -21,6 +21,6 @@ should match the snapshot (smtp on): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-pagerduty - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-pagerduty-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-pagerduty-18.6.4 name: RELEASE-NAME-teleport-plugin-pagerduty diff --git a/examples/chart/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap index b1ca40a034ef0..3297121f744a1 100644 --- a/examples/chart/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-pagerduty - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-pagerduty-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-pagerduty-18.6.4 name: RELEASE-NAME-teleport-plugin-pagerduty spec: replicas: 1 @@ -22,8 +22,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-pagerduty - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-pagerduty-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-pagerduty-18.6.4 spec: containers: - command: diff --git a/examples/chart/access/slack/Chart.yaml b/examples/chart/access/slack/Chart.yaml index 1bb2cae3461ab..fd92ac43201d0 100644 --- a/examples/chart/access/slack/Chart.yaml +++ b/examples/chart/access/slack/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-slack diff --git a/examples/chart/access/slack/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/access/slack/tests/__snapshot__/configmap_test.yaml.snap index 9342060944774..0fd388440adb4 100644 --- a/examples/chart/access/slack/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/access/slack/tests/__snapshot__/configmap_test.yaml.snap @@ -24,6 +24,6 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-slack - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-slack-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-slack-18.6.4 name: RELEASE-NAME-teleport-plugin-slack diff --git a/examples/chart/access/slack/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/access/slack/tests/__snapshot__/deployment_test.yaml.snap index 36a8063dcbd67..4e19b5761c6c6 100644 --- a/examples/chart/access/slack/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/access/slack/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-slack - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-slack-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-slack-18.6.4 name: RELEASE-NAME-teleport-plugin-slack spec: replicas: 1 @@ -22,8 +22,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-slack - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-slack-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-slack-18.6.4 spec: containers: - command: diff --git a/examples/chart/event-handler/Chart.yaml b/examples/chart/event-handler/Chart.yaml index b74ab34d2a860..97edcb6cf5da3 100644 --- a/examples/chart/event-handler/Chart.yaml +++ b/examples/chart/event-handler/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" apiVersion: v2 name: teleport-plugin-event-handler diff --git a/examples/chart/event-handler/tests/__snapshot__/configmap_test.yaml.snap b/examples/chart/event-handler/tests/__snapshot__/configmap_test.yaml.snap index f36abf366d67e..9cdc974b96b56 100644 --- a/examples/chart/event-handler/tests/__snapshot__/configmap_test.yaml.snap +++ b/examples/chart/event-handler/tests/__snapshot__/configmap_test.yaml.snap @@ -33,6 +33,6 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-event-handler - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-event-handler-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-event-handler-18.6.4 name: RELEASE-NAME-teleport-plugin-event-handler diff --git a/examples/chart/event-handler/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/event-handler/tests/__snapshot__/deployment_test.yaml.snap index 6d3e2698f60ea..07c95bc6d392a 100644 --- a/examples/chart/event-handler/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/event-handler/tests/__snapshot__/deployment_test.yaml.snap @@ -7,8 +7,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-event-handler - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-event-handler-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-event-handler-18.6.4 name: RELEASE-NAME-teleport-plugin-event-handler spec: replicas: 1 @@ -22,8 +22,8 @@ should match the snapshot: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-plugin-event-handler - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-plugin-event-handler-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-plugin-event-handler-18.6.4 spec: containers: - args: @@ -87,7 +87,7 @@ should mount tls.existingCASecretName and set environment when set in values: value: "true" - name: SSL_CERT_FILE value: /etc/teleport-tls-ca/helm-lint-existing-tls-secret-key-name - image: public.ecr.aws/gravitational/teleport-plugin-event-handler:18.6.1 + image: public.ecr.aws/gravitational/teleport-plugin-event-handler:18.6.4 imagePullPolicy: IfNotPresent name: teleport-plugin-event-handler ports: diff --git a/examples/chart/tbot/Chart.yaml b/examples/chart/tbot/Chart.yaml index c5d0cb3a77eaa..0c513447fdbde 100644 --- a/examples/chart/tbot/Chart.yaml +++ b/examples/chart/tbot/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" name: tbot apiVersion: v2 diff --git a/examples/chart/tbot/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/tbot/tests/__snapshot__/deployment_test.yaml.snap index aba19ed2c7fb5..c4279fbd7f52f 100644 --- a/examples/chart/tbot/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/tbot/tests/__snapshot__/deployment_test.yaml.snap @@ -29,7 +29,7 @@ should match the snapshot (full): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: tbot - helm.sh/chart: tbot-18.6.1 + helm.sh/chart: tbot-18.6.4 test-key: test-label-pod spec: affinity: @@ -68,7 +68,7 @@ should match the snapshot (full): value: "1" - name: TEST_ENV value: test-value - image: public.ecr.aws/gravitational/tbot-distroless:18.6.1 + image: public.ecr.aws/gravitational/tbot-distroless:18.6.4 imagePullPolicy: Always livenessProbe: failureThreshold: 6 @@ -167,7 +167,7 @@ should match the snapshot (simple): app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: tbot - helm.sh/chart: tbot-18.6.1 + helm.sh/chart: tbot-18.6.4 spec: containers: - args: @@ -189,7 +189,7 @@ should match the snapshot (simple): fieldPath: spec.nodeName - name: KUBERNETES_TOKEN_PATH value: /var/run/secrets/tokens/join-sa-token - image: public.ecr.aws/gravitational/tbot-distroless:18.6.1 + image: public.ecr.aws/gravitational/tbot-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 diff --git a/examples/chart/teleport-cluster/Chart.yaml b/examples/chart/teleport-cluster/Chart.yaml index 6b91b21d3c09e..910ab54697626 100644 --- a/examples/chart/teleport-cluster/Chart.yaml +++ b/examples/chart/teleport-cluster/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" name: teleport-cluster apiVersion: v2 diff --git a/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml b/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml index 20f8c2709f47e..585fe43682418 100644 --- a/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml +++ b/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" name: teleport-operator apiVersion: v2 diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap index 0537ee7a81b42..8ee4f2ff36a8b 100644 --- a/examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap +++ b/examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap @@ -8,8 +8,8 @@ adds operator permissions to ClusterRole: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-cluster - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-cluster-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-cluster-18.6.4 teleport.dev/majorVersion: "18" name: RELEASE-NAME rules: diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap index 10a7c4d2b6431..887c86b245066 100644 --- a/examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap +++ b/examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap @@ -2040,8 +2040,8 @@ sets clusterDomain on Configmap: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-cluster - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-cluster-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-cluster-18.6.4 teleport.dev/majorVersion: "18" name: RELEASE-NAME-auth namespace: NAMESPACE diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap index 6eccdafd31f92..823763220be37 100644 --- a/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap +++ b/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap @@ -8,7 +8,7 @@ - args: - --diag-addr=0.0.0.0:3000 - --apply-on-startup=/etc/teleport/apply-on-startup.yaml - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -159,7 +159,7 @@ should set nodeSelector when set in values: - args: - --diag-addr=0.0.0.0:3000 - --apply-on-startup=/etc/teleport/apply-on-startup.yaml - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -277,7 +277,7 @@ should set resources when set in values: env: - name: GOMEMLIMIT value: "3865470567" - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -381,7 +381,7 @@ should set securityContext when set in values: - args: - --diag-addr=0.0.0.0:3000 - --apply-on-startup=/etc/teleport/apply-on-startup.yaml - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap index ccf9f4bb27ed8..0b2c9e0e85994 100644 --- a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap +++ b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap @@ -567,8 +567,8 @@ sets clusterDomain on Configmap: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-cluster - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-cluster-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-cluster-18.6.4 teleport.dev/majorVersion: "18" name: RELEASE-NAME-proxy namespace: NAMESPACE diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap index 877b2bec732e4..8ab7d7601e861 100644 --- a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap +++ b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap @@ -11,8 +11,8 @@ sets clusterDomain on Deployment Pods: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-cluster - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-cluster-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-cluster-18.6.4 teleport.dev/majorVersion: "18" name: RELEASE-NAME-proxy namespace: NAMESPACE @@ -26,7 +26,7 @@ sets clusterDomain on Deployment Pods: template: metadata: annotations: - checksum/config: c40044b37f5825c5b6cd422e18118d17ecd277e482256cf17fbf64ef5bf4320f + checksum/config: 713ce483f4fc0cca1b8fbd055603f371c745ab6701512da1a6d00386c4c65147 kubernetes.io/pod: test-annotation kubernetes.io/pod-different: 4 labels: @@ -34,8 +34,8 @@ sets clusterDomain on Deployment Pods: app.kubernetes.io/instance: RELEASE-NAME app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: teleport-cluster - app.kubernetes.io/version: 18.6.1 - helm.sh/chart: teleport-cluster-18.6.1 + app.kubernetes.io/version: 18.6.4 + helm.sh/chart: teleport-cluster-18.6.4 teleport.dev/majorVersion: "18" spec: affinity: @@ -44,7 +44,7 @@ sets clusterDomain on Deployment Pods: containers: - args: - --diag-addr=0.0.0.0:3000 - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -106,7 +106,7 @@ sets clusterDomain on Deployment Pods: - wait - no-resolve - RELEASE-NAME-auth-v17.NAMESPACE.svc.test.com - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 name: wait-auth-update serviceAccountName: RELEASE-NAME-proxy terminationGracePeriodSeconds: 60 @@ -155,7 +155,7 @@ should provision initContainer correctly when set in values: - wait - no-resolve - RELEASE-NAME-auth-v17.NAMESPACE.svc.cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 name: wait-auth-update resources: limits: @@ -219,7 +219,7 @@ should set nodeSelector when set in values: containers: - args: - --diag-addr=0.0.0.0:3000 - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -281,7 +281,7 @@ should set nodeSelector when set in values: - wait - no-resolve - RELEASE-NAME-auth-v17.NAMESPACE.svc.cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 name: wait-auth-update nodeSelector: environment: security @@ -352,7 +352,7 @@ should set resources for wait-auth-update initContainer when set in values: env: - name: GOMEMLIMIT value: "3865470567" - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -421,7 +421,7 @@ should set resources for wait-auth-update initContainer when set in values: - wait - no-resolve - RELEASE-NAME-auth-v17.NAMESPACE.svc.cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 name: wait-auth-update resources: limits: @@ -481,7 +481,7 @@ should set resources when set in values: env: - name: GOMEMLIMIT value: "3865470567" - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -550,7 +550,7 @@ should set resources when set in values: - wait - no-resolve - RELEASE-NAME-auth-v17.NAMESPACE.svc.cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 name: wait-auth-update resources: limits: @@ -607,7 +607,7 @@ should set securityContext for initContainers when set in values: containers: - args: - --diag-addr=0.0.0.0:3000 - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -676,7 +676,7 @@ should set securityContext for initContainers when set in values: - wait - no-resolve - RELEASE-NAME-auth-v17.NAMESPACE.svc.cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 name: wait-auth-update securityContext: allowPrivilegeEscalation: false @@ -733,7 +733,7 @@ should set securityContext when set in values: containers: - args: - --diag-addr=0.0.0.0:3000 - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent lifecycle: preStop: @@ -802,7 +802,7 @@ should set securityContext when set in values: - wait - no-resolve - RELEASE-NAME-auth-v17.NAMESPACE.svc.cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 name: wait-auth-update securityContext: allowPrivilegeEscalation: false diff --git a/examples/chart/teleport-kube-agent/Chart.yaml b/examples/chart/teleport-kube-agent/Chart.yaml index 116924b0ef668..ee5487c9d44b7 100644 --- a/examples/chart/teleport-kube-agent/Chart.yaml +++ b/examples/chart/teleport-kube-agent/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" name: teleport-kube-agent apiVersion: v2 diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap index 73a50ad2a1950..5881d0bd17763 100644 --- a/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap +++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap @@ -32,7 +32,7 @@ sets Deployment annotations when specified if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -109,7 +109,7 @@ sets Deployment labels when specified if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -173,7 +173,7 @@ sets Pod annotations when specified if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -237,7 +237,7 @@ sets Pod labels when specified if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -322,7 +322,7 @@ should add emptyDir for data when existingDataVolume is not set if action is Upg value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -387,7 +387,7 @@ should add insecureSkipProxyTLSVerify to args when set in values if action is Up value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -451,7 +451,7 @@ should correctly configure existingDataVolume when set if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -513,7 +513,7 @@ should expose diag port if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -589,7 +589,7 @@ should have multiple replicas when replicaCount is set (using .replicaCount, dep value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -665,7 +665,7 @@ should have multiple replicas when replicaCount is set (using highAvailability.r value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -729,7 +729,7 @@ should have one replica when replicaCount is not set if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -793,7 +793,7 @@ should mount extraVolumes and extraVolumeMounts if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -862,7 +862,7 @@ should mount jamfCredentialsSecret if it already exists and when role is jamf an value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -932,7 +932,7 @@ should mount jamfCredentialsSecret.name when role is jamf and action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1004,7 +1004,7 @@ should mount tls.existingCASecretName and set environment when set in values if value: cluster.local - name: SSL_CERT_FILE value: /etc/teleport-tls-ca/ca.pem - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1078,7 +1078,7 @@ should mount tls.existingCASecretName and set extra environment when set in valu value: http://username:password@my.proxy.host:3128 - name: SSL_CERT_FILE value: /etc/teleport-tls-ca/ca.pem - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1148,7 +1148,7 @@ should provision initContainer correctly when set in values if action is Upgrade value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1270,7 +1270,7 @@ should set affinity when set in values if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1334,7 +1334,7 @@ should set default serviceAccountName when not set in values if action is Upgrad value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1411,7 +1411,7 @@ should set environment when extraEnv set in values if action is Upgrade: value: cluster.local - name: HTTPS_PROXY value: http://username:password@my.proxy.host:3128 - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1539,7 +1539,7 @@ should set imagePullPolicy when set in values if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: Always livenessProbe: failureThreshold: 6 @@ -1603,7 +1603,7 @@ should set nodeSelector if set in values if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1669,7 +1669,7 @@ should set not set priorityClassName when not set in values if action is Upgrade value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1745,7 +1745,7 @@ should set preferred affinity when more than one replica is used if action is Up value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1809,7 +1809,7 @@ should set priorityClassName when set in values if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1874,7 +1874,7 @@ should set probeTimeoutSeconds when set in values if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1948,7 +1948,7 @@ should set required affinity when highAvailability.requireAntiAffinity is set if value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2012,7 +2012,7 @@ should set resources when set in values if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2083,7 +2083,7 @@ should set serviceAccountName when set in values if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2147,7 +2147,7 @@ should set tolerations when set in values if action is Upgrade: value: "true" - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap index d06e4f325e46e..0f2eaaae2174e 100644 --- a/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap +++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap @@ -25,7 +25,7 @@ should create ServiceAccount for post-delete hook by default: fieldPath: metadata.namespace - name: RELEASE_NAME value: RELEASE-NAME - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent name: post-delete-job securityContext: @@ -108,7 +108,7 @@ should not create ServiceAccount for post-delete hook if serviceAccount.create i fieldPath: metadata.namespace - name: RELEASE_NAME value: RELEASE-NAME - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent name: post-delete-job securityContext: @@ -138,7 +138,7 @@ should not create ServiceAccount, Role or RoleBinding for post-delete hook if se fieldPath: metadata.namespace - name: RELEASE_NAME value: RELEASE-NAME - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent name: post-delete-job securityContext: @@ -168,7 +168,7 @@ should set nodeSelector in post-delete hook: fieldPath: metadata.namespace - name: RELEASE_NAME value: RELEASE-NAME - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent name: post-delete-job securityContext: @@ -200,7 +200,7 @@ should set resources in the Job's pod spec if resources is set in values: fieldPath: metadata.namespace - name: RELEASE_NAME value: RELEASE-NAME - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent name: post-delete-job resources: diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap index b5a83c42ae0c9..7c6de817eef58 100644 --- a/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap +++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap @@ -18,7 +18,7 @@ sets Pod annotations when specified: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -104,7 +104,7 @@ sets Pod labels when specified: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -214,7 +214,7 @@ sets StatefulSet labels when specified: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -332,7 +332,7 @@ should add insecureSkipProxyTLSVerify to args when set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -418,7 +418,7 @@ should add volumeClaimTemplate for data volume when using StatefulSet and action value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -524,7 +524,7 @@ should add volumeClaimTemplate for data volume when using StatefulSet and is Fre value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -620,7 +620,7 @@ should add volumeMount for data volume when using StatefulSet: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -706,7 +706,7 @@ should expose diag port: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -792,7 +792,7 @@ should generate Statefulset when storage is disabled and mode is a Upgrade: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -892,7 +892,7 @@ should have multiple replicas when replicaCount is set (using .replicaCount, dep value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -990,7 +990,7 @@ should have multiple replicas when replicaCount is set (using highAvailability.r value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1076,7 +1076,7 @@ should have one replica when replicaCount is not set: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1162,7 +1162,7 @@ should install Statefulset when storage is disabled and mode is a Fresh Install: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1250,7 +1250,7 @@ should mount extraVolumes and extraVolumeMounts: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1341,7 +1341,7 @@ should mount jamfCredentialsSecret if it already exists and when role is jamf: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1435,7 +1435,7 @@ should mount jamfCredentialsSecret.name when role is jamf: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1531,7 +1531,7 @@ should mount tls.existingCASecretName and set environment when set in values: value: cluster.local - name: SSL_CERT_FILE value: /etc/teleport-tls-ca/helm-lint-existing-tls-secret-key-name - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1629,7 +1629,7 @@ should mount tls.existingCASecretName and set extra environment when set in valu value: /etc/teleport-tls-ca/helm-lint-existing-tls-secret-key-name - name: HTTPS_PROXY value: http://username:password@my.proxy.host:3128 - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1723,7 +1723,7 @@ should not add emptyDir for data when using StatefulSet: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1811,7 +1811,7 @@ should provision initContainer correctly when set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -1955,7 +1955,7 @@ should set affinity when set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2041,7 +2041,7 @@ should set default serviceAccountName when not set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2140,7 +2140,7 @@ should set environment when extraEnv set in values: value: cluster.local - name: HTTPS_PROXY value: http://username:password@my.proxy.host:3128 - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2312,7 +2312,7 @@ should set imagePullPolicy when set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: Always livenessProbe: failureThreshold: 6 @@ -2398,7 +2398,7 @@ should set nodeSelector if set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2498,7 +2498,7 @@ should set preferred affinity when more than one replica is used: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2584,7 +2584,7 @@ should set probeTimeoutSeconds when set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2680,7 +2680,7 @@ should set required affinity when highAvailability.requireAntiAffinity is set: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2768,7 +2768,7 @@ should set resources when set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2861,7 +2861,7 @@ should set serviceAccountName when set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -2947,7 +2947,7 @@ should set storage.requests when set in values and action is an Upgrade: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -3033,7 +3033,7 @@ should set storage.storageClassName when set in values and action is an Upgrade: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -3119,7 +3119,7 @@ should set tolerations when set in values: value: RELEASE-NAME - name: TELEPORT_KUBE_CLUSTER_DOMAIN value: cluster.local - image: public.ecr.aws/gravitational/teleport-distroless:18.6.1 + image: public.ecr.aws/gravitational/teleport-distroless:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap index a02d2589dc90f..e11dba903a37d 100644 --- a/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap +++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap @@ -27,7 +27,7 @@ sets the affinity: - --base-image=public.ecr.aws/gravitational/teleport-distroless - --version-server=https://my-custom-version-server/v1 - --version-channel=custom/preview - image: public.ecr.aws/gravitational/teleport-kube-agent-updater:18.6.1 + image: public.ecr.aws/gravitational/teleport-kube-agent-updater:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 @@ -73,7 +73,7 @@ sets the tolerations: - --base-image=public.ecr.aws/gravitational/teleport-distroless - --version-server=https://my-custom-version-server/v1 - --version-channel=custom/preview - image: public.ecr.aws/gravitational/teleport-kube-agent-updater:18.6.1 + image: public.ecr.aws/gravitational/teleport-kube-agent-updater:18.6.4 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 diff --git a/examples/chart/teleport-relay/Chart.yaml b/examples/chart/teleport-relay/Chart.yaml index 000f8a2d08bf5..2ea667435f0f4 100644 --- a/examples/chart/teleport-relay/Chart.yaml +++ b/examples/chart/teleport-relay/Chart.yaml @@ -1,4 +1,4 @@ -.version: &version "18.6.1" +.version: &version "18.6.4" name: teleport-relay apiVersion: v2