diff --git a/.drone.yml b/.drone.yml
index 25226c1fce2..cc5c53ae72f 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -1324,90 +1324,6 @@ steps:
 image_pull_secrets:
 - DOCKERHUB_CREDENTIALS
 
----
-kind: pipeline
-type: kubernetes
-name: teleport-docker-cron
-
-trigger:
-  cron:
-    - teleport-docker-cron
-  repo:
-    include:
-      - gravitational/teleport
-
-workspace:
-  path: /go
-
-clone:
-  disable: false
-
-steps:
-  - name: Set up variables and Dockerfile
-    image: docker:git
-    environment:
-      # increment these variables when a new major/minor version is released to bump the automatic builds
-      # this only needs to be done on the master branch, as that's the branch that the Drone cron is configured for
-      # build major version images which are just teleport:x
-      CURRENT_VERSION_ROOT: v12
-      PREVIOUS_VERSION_ONE_ROOT: v11
-      PREVIOUS_VERSION_TWO_ROOT: v10
-    commands:
-      - apk --update --no-cache add curl go
-      - mkdir -p /go/build && cd /go/build
-      # CURRENT_VERSION
-      - (cd /go/build.assets/tooling && go run ./cmd/query-latest $CURRENT_VERSION_ROOT > /go/build/CURRENT_VERSION_TAG.txt)
-      - echo "$(cat /go/build/CURRENT_VERSION_TAG.txt | cut -d. -f1 | tr -d '^v')" > /go/build/CURRENT_VERSION_TAG_GENERIC.txt
-      # PREVIOUS_VERSION_ONE
-      - (cd /go/build.assets/tooling && go run ./cmd/query-latest $PREVIOUS_VERSION_ONE_ROOT > /go/build/PREVIOUS_VERSION_ONE_TAG.txt)
-      - echo "$(cat /go/build/PREVIOUS_VERSION_ONE_TAG.txt | cut -d. -f1 | tr -d '^v')" > /go/build/PREVIOUS_VERSION_ONE_TAG_GENERIC.txt
-      # PREVIOUS_VERSION_TWO
-      - (cd /go/build.assets/tooling && go run ./cmd/query-latest $PREVIOUS_VERSION_TWO_ROOT > /go/build/PREVIOUS_VERSION_TWO_TAG.txt)
-      - echo "$(cat /go/build/PREVIOUS_VERSION_TWO_TAG.txt | cut -d. -f1 | tr -d '^v')" > /go/build/PREVIOUS_VERSION_TWO_TAG_GENERIC.txt
-      # list versions
-      - for FILE in /go/build/*.txt; do echo $FILE; cat $FILE; done
-      # wait for Docker to be ready
-      - sleep 3
-
-  - name: Build/push Teleport Lab Docker image
-    image: docker:git
-    environment:
-      OS: linux
-      ARCH: amd64
-    settings:
-      username:
-        from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-      password:
-        from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    volumes:
-      - name: dockersock
-        path: /var/run
-    commands:
-      - export TELEPORT_TAG=$(cat /go/build/CURRENT_VERSION_TAG.txt | tr -d '^v')
-      - export TELEPORT_LAB_IMAGE_NAME="quay.io/gravitational/teleport-lab:$(cat /go/build/CURRENT_VERSION_TAG_GENERIC.txt)"
-       # Check out code
-      - mkdir -p /go/src/github.com/gravitational/teleport
-      - cd /go/src/github.com/gravitational/teleport
-      - git init && git remote add origin ${DRONE_REMOTE_URL}
-      - git fetch origin
-      - git checkout -qf ${DRONE_COMMIT_SHA}
-      # Build and push Teleport lab image
-      - docker login -u="$PLUGIN_USERNAME" -p="$PLUGIN_PASSWORD" quay.io
-      - docker build --build-arg TELEPORT_TAG=$TELEPORT_TAG -t $TELEPORT_LAB_IMAGE_NAME /go/src/github.com/gravitational/teleport/docker/sshd
-      - docker push $TELEPORT_LAB_IMAGE_NAME
-
-services:
-  - name: Start Docker
-    image: docker:dind
-    privileged: true
-    volumes:
-      - name: dockersock
-        path: /var/run
-
-volumes:
-  - name: dockersock
-    temp: {}
-
 ---
 kind: pipeline
 type: kubernetes
@@ -8977,203 +8893,6 @@ steps:
   - Build major, minor, and full semvers
   - Assume ECR - staging AWS Role
   - Assume ECR - production AWS Role
-- name: Tag and push image "teleport:v13-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport:v13-amd64 and push it to Local Registry
-- name: Tag and push image "teleport:v13-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport:v13-arm and push it to Local Registry
-- name: Tag and push image "teleport:v13-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport:v13-arm64 and push it to Local Registry
-- name: Create manifest and push "teleport:major" to Quay
-  image: docker
-  commands:
-  - printf "Prerelease "; ! [ -f /go/vars/release-is-prerelease ] && printf "not ";
-    printf "detected for version $DRONE_TAG, "; [ -f /go/vars/release-is-prerelease
-    ] && echo "skipping" || echo "continuing"
-  - '[ -f /go/vars/release-is-prerelease ] && exit 0'
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64 --amend
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v13-amd64" to Quay
-  - Tag and push image "teleport:v13-arm" to Quay
-  - Tag and push image "teleport:v13-arm64" to Quay
-- name: Create manifest and push "teleport:minor" to Quay
-  image: docker
-  commands:
-  - printf "Prerelease "; ! [ -f /go/vars/release-is-prerelease ] && printf "not ";
-    printf "detected for version $DRONE_TAG, "; [ -f /go/vars/release-is-prerelease
-    ] && echo "skipping" || echo "continuing"
-  - '[ -f /go/vars/release-is-prerelease ] && exit 0'
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64 --amend
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v13-amd64" to Quay
-  - Tag and push image "teleport:v13-arm" to Quay
-  - Tag and push image "teleport:v13-arm64" to Quay
-- name: Create manifest and push "teleport:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport:$(cat "/go/var/full-version") --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/full-version")-amd64 --amend quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64 &&
-    docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v13-amd64" to Quay
-  - Tag and push image "teleport:v13-arm" to Quay
-  - Tag and push image "teleport:v13-arm64" to Quay
 - name: Tag and push image "teleport:v13-amd64" to ECR - production
   image: docker
   commands:
@@ -9465,205 +9184,6 @@ steps:
   - Build major, minor, and full semvers
   - Assume ECR - staging AWS Role
   - Assume ECR - production AWS Role
-- name: Tag and push image "teleport-ent:v13-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport-ent:v13-amd64 and push it to Local Registry
-- name: Tag and push image "teleport-ent:v13-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport-ent:v13-arm and push it to Local Registry
-- name: Tag and push image "teleport-ent:v13-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport-ent:v13-arm64 and push it to Local Registry
-- name: Create manifest and push "teleport-ent:major" to Quay
-  image: docker
-  commands:
-  - printf "Prerelease "; ! [ -f /go/vars/release-is-prerelease ] && printf "not ";
-    printf "detected for version $DRONE_TAG, "; [ -f /go/vars/release-is-prerelease
-    ] && echo "skipping" || echo "continuing"
-  - '[ -f /go/vars/release-is-prerelease ] && exit 0'
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v13-amd64" to Quay
-  - Tag and push image "teleport-ent:v13-arm" to Quay
-  - Tag and push image "teleport-ent:v13-arm64" to Quay
-- name: Create manifest and push "teleport-ent:minor" to Quay
-  image: docker
-  commands:
-  - printf "Prerelease "; ! [ -f /go/vars/release-is-prerelease ] && printf "not ";
-    printf "detected for version $DRONE_TAG, "; [ -f /go/vars/release-is-prerelease
-    ] && echo "skipping" || echo "continuing"
-  - '[ -f /go/vars/release-is-prerelease ] && exit 0'
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v13-amd64" to Quay
-  - Tag and push image "teleport-ent:v13-arm" to Quay
-  - Tag and push image "teleport-ent:v13-arm64" to Quay
-- name: Create manifest and push "teleport-ent:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version") --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64 --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm --amend quay.io/gravitational/teleport-ent:$(cat
-    "/go/var/full-version")-arm64 && docker manifest push quay.io/gravitational/teleport-ent:$(cat
-    "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v13-amd64" to Quay
-  - Tag and push image "teleport-ent:v13-arm" to Quay
-  - Tag and push image "teleport-ent:v13-arm64" to Quay
 - name: Tag and push image "teleport-ent:v13-amd64" to ECR - production
   image: docker
   commands:
@@ -9893,125 +9413,6 @@ steps:
   - Build major, minor, and full semvers
   - Assume ECR - staging AWS Role
   - Assume ECR - production AWS Role
-- name: Tag and push image "teleport-ent:v13-fips-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-fips-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-fips-amd64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport-ent:v13-fips-amd64 and push it to Local Registry
-- name: Create manifest and push "teleport-ent:major-fips" to Quay
-  image: docker
-  commands:
-  - printf "Prerelease "; ! [ -f /go/vars/release-is-prerelease ] && printf "not ";
-    printf "detected for version $DRONE_TAG, "; [ -f /go/vars/release-is-prerelease
-    ] && echo "skipping" || echo "continuing"
-  - '[ -f /go/vars/release-is-prerelease ] && exit 0'
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v13-fips-amd64" to Quay
-- name: Create manifest and push "teleport-ent:minor-fips" to Quay
-  image: docker
-  commands:
-  - printf "Prerelease "; ! [ -f /go/vars/release-is-prerelease ] && printf "not ";
-    printf "detected for version $DRONE_TAG, "; [ -f /go/vars/release-is-prerelease
-    ] && echo "skipping" || echo "continuing"
-  - '[ -f /go/vars/release-is-prerelease ] && exit 0'
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v13-fips-amd64" to Quay
-- name: Create manifest and push "teleport-ent:full-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64 &&
-    docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips)
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v13-fips-amd64" to Quay
 - name: Tag and push image "teleport-ent:v13-fips-amd64" to ECR - production
   image: docker
   commands:
@@ -10230,205 +9631,6 @@ steps:
   - Build major, minor, and full semvers
   - Assume ECR - staging AWS Role
   - Assume ECR - production AWS Role
-- name: Tag and push image "teleport-operator:v13-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport-operator:v13-amd64 and push it to Local Registry
-- name: Tag and push image "teleport-operator:v13-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport-operator:v13-arm and push it to Local Registry
-- name: Tag and push image "teleport-operator:v13-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Pull teleport-operator:v13-arm64 and push it to Local Registry
-- name: Create manifest and push "teleport-operator:major" to Quay
-  image: docker
-  commands:
-  - printf "Prerelease "; ! [ -f /go/vars/release-is-prerelease ] && printf "not ";
-    printf "detected for version $DRONE_TAG, "; [ -f /go/vars/release-is-prerelease
-    ] && echo "skipping" || echo "continuing"
-  - '[ -f /go/vars/release-is-prerelease ] && exit 0'
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v13-amd64" to Quay
-  - Tag and push image "teleport-operator:v13-arm" to Quay
-  - Tag and push image "teleport-operator:v13-arm64" to Quay
-- name: Create manifest and push "teleport-operator:minor" to Quay
-  image: docker
-  commands:
-  - printf "Prerelease "; ! [ -f /go/vars/release-is-prerelease ] && printf "not ";
-    printf "detected for version $DRONE_TAG, "; [ -f /go/vars/release-is-prerelease
-    ] && echo "skipping" || echo "continuing"
-  - '[ -f /go/vars/release-is-prerelease ] && exit 0'
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v13-amd64" to Quay
-  - Tag and push image "teleport-operator:v13-arm" to Quay
-  - Tag and push image "teleport-operator:v13-arm64" to Quay
-- name: Create manifest and push "teleport-operator:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version") --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64 --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64 &&
-    docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v13-amd64" to Quay
-  - Tag and push image "teleport-operator:v13-arm" to Quay
-  - Tag and push image "teleport-operator:v13-arm64" to Quay
 - name: Tag and push image "teleport-operator:v13-amd64" to ECR - production
   image: docker
   commands:
@@ -11294,195 +10496,6 @@ steps:
   - Tag and push image "teleport:v12-amd64" to ECR - staging
   - Tag and push image "teleport:v12-arm" to ECR - staging
   - Tag and push image "teleport:v12-arm64" to ECR - staging
-- name: Tag and push image "teleport:v12-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v12-amd64"
-- name: Tag and push image "teleport:v12-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v12-arm"
-- name: Tag and push image "teleport:v12-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v12-arm64"
-- name: Create manifest and push "teleport:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64 --amend
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v12-amd64" to Quay
-  - Tag and push image "teleport:v12-arm" to Quay
-  - Tag and push image "teleport:v12-arm64" to Quay
-- name: Create manifest and push "teleport:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64 --amend
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v12-amd64" to Quay
-  - Tag and push image "teleport:v12-arm" to Quay
-  - Tag and push image "teleport:v12-arm64" to Quay
-- name: Create manifest and push "teleport:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport:$(cat "/go/var/full-version") --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/full-version")-amd64 --amend quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64 &&
-    docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v12-amd64" to Quay
-  - Tag and push image "teleport:v12-arm" to Quay
-  - Tag and push image "teleport:v12-arm64" to Quay
 - name: Tag and push image "teleport:v12-amd64" to ECR - production
   image: docker
   commands:
@@ -12141,197 +11154,6 @@ steps:
   - Tag and push image "teleport-ent:v12-amd64" to ECR - staging
   - Tag and push image "teleport-ent:v12-arm" to ECR - staging
   - Tag and push image "teleport-ent:v12-arm64" to ECR - staging
-- name: Tag and push image "teleport-ent:v12-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v12-amd64"
-- name: Tag and push image "teleport-ent:v12-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v12-arm"
-- name: Tag and push image "teleport-ent:v12-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v12-arm64"
-- name: Create manifest and push "teleport-ent:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v12-amd64" to Quay
-  - Tag and push image "teleport-ent:v12-arm" to Quay
-  - Tag and push image "teleport-ent:v12-arm64" to Quay
-- name: Create manifest and push "teleport-ent:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v12-amd64" to Quay
-  - Tag and push image "teleport-ent:v12-arm" to Quay
-  - Tag and push image "teleport-ent:v12-arm64" to Quay
-- name: Create manifest and push "teleport-ent:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version") --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64 --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm --amend quay.io/gravitational/teleport-ent:$(cat
-    "/go/var/full-version")-arm64 && docker manifest push quay.io/gravitational/teleport-ent:$(cat
-    "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v12-amd64" to Quay
-  - Tag and push image "teleport-ent:v12-arm" to Quay
-  - Tag and push image "teleport-ent:v12-arm64" to Quay
 - name: Tag and push image "teleport-ent:v12-amd64" to ECR - production
   image: docker
   commands:
@@ -12767,117 +11589,6 @@ steps:
     path: /var/run
   depends_on:
   - Tag and push image "teleport-ent:v12-fips-amd64" to ECR - staging
-- name: Tag and push image "teleport-ent:v12-fips-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-fips-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-fips-amd64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent-fips image "teleport-ent:v12-fips-amd64"
-- name: Create manifest and push "teleport-ent:major-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v12-fips-amd64" to Quay
-- name: Create manifest and push "teleport-ent:minor-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v12-fips-amd64" to Quay
-- name: Create manifest and push "teleport-ent:full-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64 &&
-    docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips)
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v12-fips-amd64" to Quay
 - name: Tag and push image "teleport-ent:v12-fips-amd64" to ECR - production
   image: docker
   commands:
@@ -13340,197 +12051,6 @@ steps:
   - Tag and push image "teleport-operator:v12-amd64" to ECR - staging
   - Tag and push image "teleport-operator:v12-arm" to ECR - staging
   - Tag and push image "teleport-operator:v12-arm64" to ECR - staging
-- name: Tag and push image "teleport-operator:v12-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v12-amd64"
-- name: Tag and push image "teleport-operator:v12-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v12-arm"
-- name: Tag and push image "teleport-operator:v12-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v12-arm64"
-- name: Create manifest and push "teleport-operator:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v12-amd64" to Quay
-  - Tag and push image "teleport-operator:v12-arm" to Quay
-  - Tag and push image "teleport-operator:v12-arm64" to Quay
-- name: Create manifest and push "teleport-operator:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v12-amd64" to Quay
-  - Tag and push image "teleport-operator:v12-arm" to Quay
-  - Tag and push image "teleport-operator:v12-arm64" to Quay
-- name: Create manifest and push "teleport-operator:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version") --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64 --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64 &&
-    docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v12-amd64" to Quay
-  - Tag and push image "teleport-operator:v12-arm" to Quay
-  - Tag and push image "teleport-operator:v12-arm64" to Quay
 - name: Tag and push image "teleport-operator:v12-amd64" to ECR - production
   image: docker
   commands:
@@ -14388,195 +12908,6 @@ steps:
   - Tag and push image "teleport:v11-amd64" to ECR - staging
   - Tag and push image "teleport:v11-arm" to ECR - staging
   - Tag and push image "teleport:v11-arm64" to ECR - staging
-- name: Tag and push image "teleport:v11-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v11-amd64"
-- name: Tag and push image "teleport:v11-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v11-arm"
-- name: Tag and push image "teleport:v11-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v11-arm64"
-- name: Create manifest and push "teleport:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64 --amend
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v11-amd64" to Quay
-  - Tag and push image "teleport:v11-arm" to Quay
-  - Tag and push image "teleport:v11-arm64" to Quay
-- name: Create manifest and push "teleport:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64 --amend
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v11-amd64" to Quay
-  - Tag and push image "teleport:v11-arm" to Quay
-  - Tag and push image "teleport:v11-arm64" to Quay
-- name: Create manifest and push "teleport:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport:$(cat "/go/var/full-version") --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/full-version")-amd64 --amend quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64 &&
-    docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v11-amd64" to Quay
-  - Tag and push image "teleport:v11-arm" to Quay
-  - Tag and push image "teleport:v11-arm64" to Quay
 - name: Tag and push image "teleport:v11-amd64" to ECR - production
   image: docker
   commands:
@@ -15235,197 +13566,6 @@ steps:
   - Tag and push image "teleport-ent:v11-amd64" to ECR - staging
   - Tag and push image "teleport-ent:v11-arm" to ECR - staging
   - Tag and push image "teleport-ent:v11-arm64" to ECR - staging
-- name: Tag and push image "teleport-ent:v11-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v11-amd64"
-- name: Tag and push image "teleport-ent:v11-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v11-arm"
-- name: Tag and push image "teleport-ent:v11-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v11-arm64"
-- name: Create manifest and push "teleport-ent:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v11-amd64" to Quay
-  - Tag and push image "teleport-ent:v11-arm" to Quay
-  - Tag and push image "teleport-ent:v11-arm64" to Quay
-- name: Create manifest and push "teleport-ent:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v11-amd64" to Quay
-  - Tag and push image "teleport-ent:v11-arm" to Quay
-  - Tag and push image "teleport-ent:v11-arm64" to Quay
-- name: Create manifest and push "teleport-ent:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version") --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64 --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm --amend quay.io/gravitational/teleport-ent:$(cat
-    "/go/var/full-version")-arm64 && docker manifest push quay.io/gravitational/teleport-ent:$(cat
-    "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v11-amd64" to Quay
-  - Tag and push image "teleport-ent:v11-arm" to Quay
-  - Tag and push image "teleport-ent:v11-arm64" to Quay
 - name: Tag and push image "teleport-ent:v11-amd64" to ECR - production
   image: docker
   commands:
@@ -15861,117 +14001,6 @@ steps:
     path: /var/run
   depends_on:
   - Tag and push image "teleport-ent:v11-fips-amd64" to ECR - staging
-- name: Tag and push image "teleport-ent:v11-fips-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-fips-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-fips-amd64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent-fips image "teleport-ent:v11-fips-amd64"
-- name: Create manifest and push "teleport-ent:major-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v11-fips-amd64" to Quay
-- name: Create manifest and push "teleport-ent:minor-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v11-fips-amd64" to Quay
-- name: Create manifest and push "teleport-ent:full-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64 &&
-    docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips)
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v11-fips-amd64" to Quay
 - name: Tag and push image "teleport-ent:v11-fips-amd64" to ECR - production
   image: docker
   commands:
@@ -16434,197 +14463,6 @@ steps:
   - Tag and push image "teleport-operator:v11-amd64" to ECR - staging
   - Tag and push image "teleport-operator:v11-arm" to ECR - staging
   - Tag and push image "teleport-operator:v11-arm64" to ECR - staging
-- name: Tag and push image "teleport-operator:v11-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v11-amd64"
-- name: Tag and push image "teleport-operator:v11-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v11-arm"
-- name: Tag and push image "teleport-operator:v11-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v11-arm64"
-- name: Create manifest and push "teleport-operator:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v11-amd64" to Quay
-  - Tag and push image "teleport-operator:v11-arm" to Quay
-  - Tag and push image "teleport-operator:v11-arm64" to Quay
-- name: Create manifest and push "teleport-operator:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v11-amd64" to Quay
-  - Tag and push image "teleport-operator:v11-arm" to Quay
-  - Tag and push image "teleport-operator:v11-arm64" to Quay
-- name: Create manifest and push "teleport-operator:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version") --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64 --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64 &&
-    docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v11-amd64" to Quay
-  - Tag and push image "teleport-operator:v11-arm" to Quay
-  - Tag and push image "teleport-operator:v11-arm64" to Quay
 - name: Tag and push image "teleport-operator:v11-amd64" to ECR - production
   image: docker
   commands:
@@ -17482,195 +15320,6 @@ steps:
   - Tag and push image "teleport:v10-amd64" to ECR - staging
   - Tag and push image "teleport:v10-arm" to ECR - staging
   - Tag and push image "teleport:v10-arm64" to ECR - staging
-- name: Tag and push image "teleport:v10-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v10-amd64"
-- name: Tag and push image "teleport:v10-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v10-arm"
-- name: Tag and push image "teleport:v10-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport image "teleport:v10-arm64"
-- name: Create manifest and push "teleport:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/major-version")-amd64 --amend
-    quay.io/gravitational/teleport:$(cat "/go/var/major-version")-arm --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v10-amd64" to Quay
-  - Tag and push image "teleport:v10-arm" to Quay
-  - Tag and push image "teleport:v10-arm64" to Quay
-- name: Create manifest and push "teleport:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-amd64 --amend
-    quay.io/gravitational/teleport:$(cat "/go/var/minor-version")-arm --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v10-amd64" to Quay
-  - Tag and push image "teleport:v10-arm" to Quay
-  - Tag and push image "teleport:v10-arm64" to Quay
-- name: Create manifest and push "teleport:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport:$(cat "/go/var/full-version") --amend quay.io/gravitational/teleport:$(cat
-    "/go/var/full-version")-amd64 --amend quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm
-    --amend quay.io/gravitational/teleport:$(cat "/go/var/full-version")-arm64 &&
-    docker manifest push quay.io/gravitational/teleport:$(cat "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport:v10-amd64" to Quay
-  - Tag and push image "teleport:v10-arm" to Quay
-  - Tag and push image "teleport:v10-arm64" to Quay
 - name: Tag and push image "teleport:v10-amd64" to ECR - production
   image: docker
   commands:
@@ -18329,197 +15978,6 @@ steps:
   - Tag and push image "teleport-ent:v10-amd64" to ECR - staging
   - Tag and push image "teleport-ent:v10-arm" to ECR - staging
   - Tag and push image "teleport-ent:v10-arm64" to ECR - staging
-- name: Tag and push image "teleport-ent:v10-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v10-amd64"
-- name: Tag and push image "teleport-ent:v10-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v10-arm"
-- name: Tag and push image "teleport-ent:v10-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent image "teleport-ent:v10-arm64"
-- name: Create manifest and push "teleport-ent:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-amd64
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v10-amd64" to Quay
-  - Tag and push image "teleport-ent:v10-arm" to Quay
-  - Tag and push image "teleport-ent:v10-arm64" to Quay
-- name: Create manifest and push "teleport-ent:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-amd64
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v10-amd64" to Quay
-  - Tag and push image "teleport-ent:v10-arm" to Quay
-  - Tag and push image "teleport-ent:v10-arm64" to Quay
-- name: Create manifest and push "teleport-ent:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version") --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-amd64 --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-arm --amend quay.io/gravitational/teleport-ent:$(cat
-    "/go/var/full-version")-arm64 && docker manifest push quay.io/gravitational/teleport-ent:$(cat
-    "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v10-amd64" to Quay
-  - Tag and push image "teleport-ent:v10-arm" to Quay
-  - Tag and push image "teleport-ent:v10-arm64" to Quay
 - name: Tag and push image "teleport-ent:v10-amd64" to ECR - production
   image: docker
   commands:
@@ -18955,117 +16413,6 @@ steps:
     path: /var/run
   depends_on:
   - Tag and push image "teleport-ent:v10-fips-amd64" to ECR - staging
-- name: Tag and push image "teleport-ent:v10-fips-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-fips-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-ent:$(cat
-    "/go/var/full-version")-fips-amd64 quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    && docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64)
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker tag drone-docker-registry:5000/teleport-ent:$(cat "/go/var/full-version")-fips-amd64
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-ent-fips image "teleport-ent:v10-fips-amd64"
-- name: Create manifest and push "teleport-ent:major-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips-amd64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/major-version")-fips
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v10-fips-amd64" to Quay
-- name: Create manifest and push "teleport-ent:minor-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips
-    --amend quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips-amd64
-  - docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/minor-version")-fips
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v10-fips-amd64" to Quay
-- name: Create manifest and push "teleport-ent:full-fips" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips --amend
-    quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips-amd64 &&
-    docker manifest push quay.io/gravitational/teleport-ent:$(cat "/go/var/full-version")-fips)
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-ent:v10-fips-amd64" to Quay
 - name: Tag and push image "teleport-ent:v10-fips-amd64" to ECR - production
   image: docker
   commands:
@@ -19528,197 +16875,6 @@ steps:
   - Tag and push image "teleport-operator:v10-amd64" to ECR - staging
   - Tag and push image "teleport-operator:v10-arm" to ECR - staging
   - Tag and push image "teleport-operator:v10-arm64" to ECR - staging
-- name: Tag and push image "teleport-operator:v10-amd64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/amd64" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-amd64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-amd64 quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-amd64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v10-amd64"
-- name: Tag and push image "teleport-operator:v10-arm" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v10-arm"
-- name: Tag and push image "teleport-operator:v10-arm64" to Quay
-  image: docker
-  commands:
-  - docker pull --platform "linux/arm64" drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm64
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker tag drone-docker-registry:5000/teleport-operator:$(cat
-    "/go/var/full-version")-arm64 quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64
-    && docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64)
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker tag drone-docker-registry:5000/teleport-operator:$(cat "/go/var/full-version")-arm64
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Build teleport-operator image "teleport-operator:v10-arm64"
-- name: Create manifest and push "teleport-operator:major" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-amd64
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/major-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v10-amd64" to Quay
-  - Tag and push image "teleport-operator:v10-arm" to Quay
-  - Tag and push image "teleport-operator:v10-arm64" to Quay
-- name: Create manifest and push "teleport-operator:minor" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest create quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-amd64
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm
-    --amend quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")-arm64
-  - docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/minor-version")
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v10-amd64" to Quay
-  - Tag and push image "teleport-operator:v10-arm" to Quay
-  - Tag and push image "teleport-operator:v10-arm64" to Quay
-- name: Create manifest and push "teleport-operator:full" to Quay
-  image: docker
-  commands:
-  - docker login -u="$QUAY_USERNAME" -p="$QUAY_PASSWORD" "quay.io"
-  - printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin
-  - docker manifest inspect quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")
-    > /dev/null 2>&1 && echo 'Found existing image, skipping' || (docker manifest
-    create quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version") --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-amd64 --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm --amend
-    quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version")-arm64 &&
-    docker manifest push quay.io/gravitational/teleport-operator:$(cat "/go/var/full-version"))
-  - docker logout "quay.io"
-  environment:
-    DOCKERHUB_PASSWORD:
-      from_secret: DOCKERHUB_READONLY_TOKEN
-    DOCKERHUB_USERNAME:
-      from_secret: DOCKERHUB_USERNAME
-    QUAY_PASSWORD:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_PASSWORD
-    QUAY_USERNAME:
-      from_secret: PRODUCTION_QUAYIO_DOCKER_USERNAME
-  volumes:
-  - name: awsconfig
-    path: /root/.aws
-  - name: dockersock
-    path: /var/run
-  depends_on:
-  - Tag and push image "teleport-operator:v10-amd64" to Quay
-  - Tag and push image "teleport-operator:v10-arm" to Quay
-  - Tag and push image "teleport-operator:v10-arm64" to Quay
 - name: Tag and push image "teleport-operator:v10-amd64" to ECR - production
   image: docker
   commands:
@@ -20067,6 +17223,6 @@ image_pull_secrets:
 - DOCKERHUB_CREDENTIALS
 ---
 kind: signature
-hmac: b21082aec9ef11b00b44457d459a8f6a6d60e21cb347a6b7853ae3dfa6619cc9
+hmac: c602ba5582ac6031f496a000b5b9ec25272c30fd0ecd880ab6163cf3fc916b1a
 
 ...
diff --git a/dronegen/common.go b/dronegen/common.go
index afdf8ea3fb4..beffa438b74 100644
--- a/dronegen/common.go
+++ b/dronegen/common.go
@@ -29,10 +29,6 @@ const (
 	// ProductionRegistry is the production image registry that hosts are customer facing container images.
 	ProductionRegistry = "public.ecr.aws"
 
-	// ProductionRegistryQuay is the production image registry that hosts images on quay.io. Will be deprecated in the future.
-	// See RFD 73 - https://github.com/gravitational/teleport/blob/c18c09f5d562dd46a509154eab4295ad39decc3c/rfd/0073-public-image-registry.md
-	ProductionRegistryQuay = "quay.io"
-
 	// Go version used by internal tools
 	GoVersion = "1.18"
 
diff --git a/dronegen/container_images_repos.go b/dronegen/container_images_repos.go
index 13d78c6e79f..639c2eba0ce 100644
--- a/dronegen/container_images_repos.go
+++ b/dronegen/container_images_repos.go
@@ -103,32 +103,6 @@ func NewEcrContainerRepo(accessKeyIDSecret, secretAccessKeySecret, roleSecret, d
 	}
 }
 
-func NewQuayContainerRepo(dockerUsername, dockerPassword string) *ContainerRepo {
-	registryOrg := ProductionRegistryOrg
-	if configureForPRTestingOnly {
-		dockerUsername = testingSecretPrefix + dockerUsername
-		dockerPassword = testingSecretPrefix + dockerPassword
-		registryOrg = testingQuayRegistryOrg
-	}
-
-	return &ContainerRepo{
-		Name:        "Quay",
-		IsImmutable: false,
-		EnvironmentVars: map[string]value{
-			"QUAY_USERNAME":      {fromSecret: dockerUsername},
-			"QUAY_PASSWORD":      {fromSecret: dockerPassword},
-			"DOCKERHUB_USERNAME": {fromSecret: "DOCKERHUB_USERNAME"},
-			"DOCKERHUB_PASSWORD": {fromSecret: "DOCKERHUB_READONLY_TOKEN"},
-		},
-		RegistryDomain: ProductionRegistryQuay,
-		RegistryOrg:    registryOrg,
-		LoginCommands: []string{
-			fmt.Sprintf("docker login -u=\"$QUAY_USERNAME\" -p=\"$QUAY_PASSWORD\" %q", ProductionRegistryQuay),
-			`printenv DOCKERHUB_PASSWORD | docker login -u="$DOCKERHUB_USERNAME" --password-stdin`,
-		},
-	}
-}
-
 func NewLocalContainerRepo() *ContainerRepo {
 	return &ContainerRepo{
 		Name:           "Local Registry",
@@ -148,7 +122,6 @@ func GetStagingContainerRepo(uniqueStagingTag bool) *ContainerRepo {
 
 func GetProductionContainerRepos() []*ContainerRepo {
 	return []*ContainerRepo{
-		NewQuayContainerRepo("PRODUCTION_QUAYIO_DOCKER_USERNAME", "PRODUCTION_QUAYIO_DOCKER_PASSWORD"),
 		NewEcrContainerRepo("PRODUCTION_TELEPORT_DRONE_USER_ECR_KEY", "PRODUCTION_TELEPORT_DRONE_USER_ECR_SECRET",
 			"PRODUCTION_TELEPORT_DRONE_ECR_AWS_ROLE", ProductionRegistry, "production", true, false, false),
 	}
diff --git a/dronegen/container_images_testing.go b/dronegen/container_images_testing.go
index d762165ece8..e6f2a2e99aa 100644
--- a/dronegen/container_images_testing.go
+++ b/dronegen/container_images_testing.go
@@ -39,12 +39,11 @@ package main
 // 1. Publish the branch you're working on
 // 2. Set `prBranch` to the name of the branch in (1)
 // 3. Set `configureForPRTestingOnly` to true
-// 4. Create a public and private ECR, Quay repos for "teleport", "teleport-ent", "teleport-operator", "teleport-lab"
-// 5. Set `testingQuayRegistryOrg` and `testingECRRegistryOrg` to the org name(s) used in (4)
+// 4. Create a public and private ECR repos for "teleport", "teleport-ent", "teleport-operator", "teleport-lab"
+// 5. Set `testingECRRegistryOrg` to the org name(s) used in (4)
 // 6. Set the `ECRTestingDomain` to the domain used for the private ECR repos
 // 7. Create two separate IAM users, each with full access to either the public ECR repo OR the private ECR repo
-// 8. Create a Quay "robot account" with write permissions for the created Quay repos
-// 9. Set the Drone secrets for the secret names listed in "GetContainerRepos" to the credentials in (7, 8), prefixed by the value of `testingSecretPrefix`
+// 8. Set the Drone secrets for the secret names listed in "GetContainerRepos" to the credentials in (7, 8), prefixed by the value of `testingSecretPrefix`
 //
 // On each commit, after running `make dronegen``, run the following commands and resign the file:
 // # Pull the current branch instead of v11 so the appropriate dockerfile gets loaded
@@ -57,7 +56,6 @@ package main
 const (
 	configureForPRTestingOnly bool   = false
 	testingSecretPrefix       string = "TEST_"
-	testingQuayRegistryOrg    string = "" // "fred_heinecke"
 	testingECRRegistryOrg     string = "u8j2q1d9"
 	testingECRRegion          string = "us-east-2"
 	prBranch                  string = "" // "fred/multiarch-teleport-actual-container-images"