Teleport 2.3.0

This release focus was to increase Teleport user experience in the following areas:

• Easier configuration via tctl resource commands.
• Improved documentation, with expanded 'examples' directory.
• Improved CLI interface.
• Web UI improvements.

Improvements

• Web UI: users can connect to OpenSSH servers using the Web UI.
• Web UI now supports arbitrarty SSH logins, in addition to role-defined ones, for better compatibility with OpenSSH.
• CLI: trusted clusters can now be managed on the fly without having to edit Teleport configuration. #1137
• CLI: tsh login supports exporting a user identity into a file to be used later with OpenSSH.
• tsh agent command has been deprecated: users are expected to use native SSH Agents on their platforms.

Teleport Enterprise

• More granular RBAC rules #1092
• Role definitions now support templates. #1120
• Authentication: Teleport now supports multilpe OIDC/SAML endpoints.
• Configuration: local authentication is always enabled as a fallback if a SAML/OIDC endpoints go offline.
• Configuration: SAML/OIDC endpoints can be created on the fly using tctl and without having to edit configuration file or restart Teleport.
• Web UI: it is now easier to turn a trusted cluster on/off #1199.

Bug Fixes

• Proper handling of ENV_SUPATH from login.defs #1004
• Reverse tunnels would periodically lose connectivity. #1156
• tsh now stores user identities in a format compatible with OpenSSH. 1171.