[ { "url": "https://api.github.com/repos/gravitational/teleport/releases/73006529", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/73006529/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/73006529/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v9.3.13", "id": 73006529, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4EWf3B", "tag_name": "v9.3.13", "target_commitish": "master", "name": "Teleport 9.3.13", "draft": false, "prerelease": false, "created_at": "2022-07-27T19:58:06Z", "published_at": "2022-07-27T21:31:30Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v9.3.13", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v9.3.13", "body": "## Description\r\n\r\nThis release of Teleport contains multiple improvements and bug fixes.\r\n\r\n* Fixed issue with incorrect time being set on session.upload events. [#14560](https://github.com/gravitational/teleport/pull/14560)\r\n* Fixed issue with Teleport components not becoming ready when desktop access is enabled. [#14858](https://github.com/gravitational/teleport/pull/14858)\r\n* Fixed issue with token not being validated when generating a join script. [#14946](https://github.com/gravitational/teleport/pull/14946)\r\n* Added ability to override AWS database name via `teleport.dev/database_name` tag. [#14826](https://github.com/gravitational/teleport/pull/14826)\r\n* Added ability to call `tsh proxy db` without calling `tsh db login` first. [#14801](https://github.com/gravitational/teleport/pull/14801)\r\n* Added additional Prometheus metrics for DynamoDB. [#14761](https://github.com/gravitational/teleport/pull/14761)\r\n* Added support for external IDs in AWS Console access. [#14895](https://github.com/gravitational/teleport/pull/14895)\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download.", "reactions": { "url": "https://api.github.com/repos/gravitational/teleport/releases/73006529/reactions", "total_count": 1, "+1": 1, "-1": 0, "laugh": 0, "hooray": 0, "confused": 0, "heart": 0, "rocket": 0, "eyes": 0 } }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/72994655", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/72994655/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/72994655/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v8.3.16", "id": 72994655, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4EWc9f", "tag_name": "v8.3.16", "target_commitish": "master", "name": "Teleport 8.3.16", "draft": false, "prerelease": false, "created_at": "2022-07-27T17:05:49Z", "published_at": "2022-07-27T19:02:43Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v8.3.16", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v8.3.16", "body": "## Description\r\n\r\nThis release of Teleport contains multiple improvements and bug fixes.\r\n\r\n* Fixed X11 forwarding issues on Windows and Mac. [#14438](https://github.com/gravitational/teleport/pull/14438)\r\n* Fixed issues with CAs not being propagated during CA rotation. [#14045](https://github.com/gravitational/teleport/pull/14045)\r\n* Fixed agent reconnect issues after proxy restart. [#14509](https://github.com/gravitational/teleport/pull/14509)\r\n* Fixed issue with PostgreSQL listener not starting when proxy is started in non-TLS mode. [#14330](https://github.com/gravitational/teleport/pull/14330)\r\n* Fixed issue with connection through a jump host when root cluster is offline. [#13929](https://github.com/gravitational/teleport/pull/13929)\r\n* Fixed issue with redirect URL not being preserved after application access login. [#14205](https://github.com/gravitational/teleport/pull/14205)\r\n* Fixed `--cluster` flag for `tsh db ls` command. [#14396](https://github.com/gravitational/teleport/pull/14396)\r\n* Fixed issue with resource listing pagination when there are denied resources. [#14544](https://github.com/gravitational/teleport/pull/14544)\r\n* Added ability to set AWS database name via `teleport.dev/database_name` tag. [#14827](https://github.com/gravitational/teleport/pull/14827)\r\n* Added ability to call `tsh proxy db` without `tsh db login`. [#14838](https://github.com/gravitational/teleport/pull/14838)\r\n* Added support for external IDs in AWS Console Access. [#14897](https://github.com/gravitational/teleport/pull/14897)\r\n* Improved `tsh db ls` performance for users with many roles. [#14288](https://github.com/gravitational/teleport/pull/14288)\r\n* Improved internal cache efficiency. [#14305](https://github.com/gravitational/teleport/pull/14305)\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download.", "reactions": { "url": "https://api.github.com/repos/gravitational/teleport/releases/72994655/reactions", "total_count": 1, "+1": 0, "-1": 0, "laugh": 0, "hooray": 1, "confused": 0, "heart": 0, "rocket": 0, "eyes": 0 } }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/72468851", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/72468851/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/72468851/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v9.3.12", "id": 72468851, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4EUclz", "tag_name": "v9.3.12", "target_commitish": "master", "name": "Teleport 9.3.12", "draft": false, "prerelease": false, "created_at": "2022-07-20T18:30:25Z", "published_at": "2022-07-20T20:28:52Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v9.3.12", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v9.3.12", "body": "## Description\r\n\r\n\r\nThis release of Teleport contains multiple improvements and bug fixes.\r\n\r\n* Added ability to set session recording configuration from a resource. [#14612](https://github.com/gravitational/teleport/pull/14612)\r\n* Fixed an issue where `tsh` would shell out to `ssh`. [#14222](https://github.com/gravitational/teleport/pull/14222)\r\n* Improved error messages for Database Access. [#13902](https://github.com/gravitational/teleport/pull/13902) [#14476](https://github.com/gravitational/teleport/pull/14476)\r\n* Fixed issue with Ctrl-C hanging when the session is paused. [#14512](https://github.com/gravitational/teleport/pull/14512)\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download." }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/72351795", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/72351795/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/72351795/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v10.0.2", "id": 72351795, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4EUAAz", "tag_name": "v10.0.2", "target_commitish": "master", "name": "Teleport 10.0.2", "draft": false, "prerelease": false, "created_at": "2022-07-19T02:37:46Z", "published_at": "2022-07-19T17:16:21Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v10.0.2", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v10.0.2", "body": "## Description\r\n\r\nThis release of Teleport contains multiple improvements and bug fixes.\r\n\r\n* Fixed issue with `tsh proxy ssh` command shelling out to `ssh` in non TLS routing mode. [#14522](https://github.com/gravitational/teleport/pull/14522)\r\n* Fixed issue with being able to create users with invalid roles via API. [#14459](https://github.com/gravitational/teleport/pull/14459)\r\n* Fixed issue with `tsh login` erroring out on non-existent PuTTY key file on Windows. [#14572](https://github.com/gravitational/teleport/pull/14572)\r\n* Fixed issue with application service not failing correctly with invalid configuration. [#14478](https://github.com/gravitational/teleport/pull/14478)\r\n* Improved error message when joining with invalid host ID using EC2 join method. [#14494](https://github.com/gravitational/teleport/pull/14494)\r\n* Include Machine ID's `tbot` binary in Docker images. [#14462](https://github.com/gravitational/teleport/pull/14462)\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download." }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/72125989", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/72125989/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/72125989/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v9.3.10", "id": 72125989, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4ETI4l", "tag_name": "v9.3.10", "target_commitish": "master", "name": "Teleport 9.3.10", "draft": false, "prerelease": false, "created_at": "2022-07-15T20:05:16Z", "published_at": "2022-07-15T21:03:51Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v9.3.10", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v9.3.10", "body": "## Description\r\n\r\nThis release of Teleport contains multiple improvements and bug fixes.\r\n\r\n* Fixed issue with SSH and Kubernetes sessions showing duplicate participants. [#13989](https://github.com/gravitational/teleport/pull/13989)\r\n* Fixed multiple issues with X11 forwarding on Windows and Mac. [#14439](https://github.com/gravitational/teleport/pull/14439)\r\n* Fixed issue with API not validating roles during user creation. [#14460](https://github.com/gravitational/teleport/pull/14460)\r\n* Fixed issue with PostgreSQL listener not starting when Proxy runs in `--insecure-no-tls` mode. [#14328](https://github.com/gravitational/teleport/pull/14328)\r\n* Fixed issue with blank `--ca-pin` flag overriding configuration. [#14362](https://github.com/gravitational/teleport/pull/14362)\r\n* Fixed potential panic in Desktop Access. [#14446](https://github.com/gravitational/teleport/pull/14446)\r\n* Fixed issue with Application Access agent not failing correctly with invalid configuration. [#14479](https://github.com/gravitational/teleport/pull/14479)\r\n* Fixed issue with redirect path not being preserved after login in Application Access. [#14053](https://github.com/gravitational/teleport/pull/14053)\r\n* Fixed issue with Machine ID not respecting configured TTL. [#14413](https://github.com/gravitational/teleport/pull/14413)\r\n* Fixed `--cluster` flag for `tsh db ls` command. [#14391](https://github.com/gravitational/teleport/pull/14391)\r\n* Fixed issue with labels not being expanded with traits in Desktop Access. [#14017](https://github.com/gravitational/teleport/pull/14017)\r\n* Fixed issue with resource listings returning different results between CLI and Web UI in some cases. [#14477](https://github.com/gravitational/teleport/pull/14477)\r\n* Improved `tsh login` to hint at required `--user` flag. [#14254](https://github.com/gravitational/teleport/pull/14254)\r\n* Improved CA rotation stability. [#14044](https://github.com/gravitational/teleport/pull/14044)\r\n* Improved agents reconnect time after Proxy restart. [#14461](https://github.com/gravitational/teleport/pull/14461)\r\n* Improved error message when `tctl` is run before Teleport is started. [#14083](https://github.com/gravitational/teleport/pull/14083)\r\n* Improved performance when using RBAC for sessions with DynamoDB backend. [#13284](https://github.com/gravitational/teleport/pull/13284)\r\n* Improved error message during `tsh login` if Proxy address wasn't configured correctly. [#14374](https://github.com/gravitational/teleport/pull/14374)\r\n* Improved `tsh db ls` performance for users with many roles. [#14287](https://github.com/gravitational/teleport/pull/14287)\r\n* Improved internal cache efficiency. [#14306](https://github.com/gravitational/teleport/pull/14306)\r\n* Made sure SSH config generated by Teleport includes workaround for SHA1 certificates. [#14058](https://github.com/gravitational/teleport/pull/14058)\r\n* Include Machine ID's `tbot` binary in Docker images. [#14464](https://github.com/gravitational/teleport/pull/14464)\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download." }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/72110837", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/72110837/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/72110837/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v10.0.1", "id": 72110837, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4ETFL1", "tag_name": "v10.0.1", "target_commitish": "master", "name": "Teleport 10.0.1", "draft": false, "prerelease": false, "created_at": "2022-07-14T22:02:20Z", "published_at": "2022-07-15T17:04:38Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v10.0.1", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v10.0.1", "body": "## Description\r\n\r\nThis release of Teleport contains multiple improvements and bug fixes.\r\n\r\n* Fixed \"unsupported option\" error when using passwordless with some hardware keys. [#14198](https://github.com/gravitational/teleport/pull/14198)\r\n* Fixed issue with automatic user provisioning creading invalid sudoer files for some usernames. [#14364](https://github.com/gravitational/teleport/pull/14364)\r\n* Fixed a number of issues with X11 forwarding on Mac and Windows. [#14437](https://github.com/gravitational/teleport/pull/14437)\r\n* Fixed interoperability issues between newer OpenSSH clients and Teleport. [#14442](https://github.com/gravitational/teleport/pull/14442)\r\n* Fixed issue causing Teleport instances running both Auth and Node services to emit `TeleportDegraded` events. [#14314](https://github.com/gravitational/teleport/pull/14314)\r\n* Fixed issue with HTTP proxy basic auth not being respected. [#14322](https://github.com/gravitational/teleport/pull/14322)\r\n* Fixed issue with blank `--ca-pin` flag overriding configuration. [#14361](https://github.com/gravitational/teleport/pull/14361)\r\n* Fixed potential panic in Desktop Access. [#14445](https://github.com/gravitational/teleport/pull/14445)\r\n* Fixed issue with App Access redirect to a URL containing \"nil\". [#14393](https://github.com/gravitational/teleport/pull/14393)\r\n* Fixed issues with resource request approvals in Web UI. [#14444](https://github.com/gravitational/teleport/pull/14444)\r\n* Fixed issue with resource request approvals for Windows Desktops. [#14452](https://github.com/gravitational/teleport/pull/14452)\r\n* Fixed issue with Machine ID ignoring configured certificate TTL. [#14338](https://github.com/gravitational/teleport/pull/14338)\r\n* Fixed issue with resource list results being different between Web UI and CLI. [#14472](https://github.com/gravitational/teleport/pull/14472)\r\n* Added TouchID prompt message to `tsh`. [#14186](https://github.com/gravitational/teleport/pull/14186)\r\n* Added hint about `--user` flag to `tsh login`. [#14253](https://github.com/gravitational/teleport/pull/14253)\r\n* Added ability to update user principals using `tctl users update --set-logins` command. [#14390](https://github.com/gravitational/teleport/pull/14390)\r\n* Added CA rotation support to Machine ID. [#14431](https://github.com/gravitational/teleport/pull/14431)\r\n* Added `--format` flag to `tsh proxy aws` command. [#14447](https://github.com/gravitational/teleport/pull/14447)\r\n* Improved `tsh login` error message when Proxy public address is not set. [#14338](https://github.com/gravitational/teleport/pull/14338)\r\n* Improved `tsh db ls` performance for users with many roles. [#14284](https://github.com/gravitational/teleport/pull/14284)\r\n* Start PostgreSQL listener when Proxy runs in `--insecure-no-tls` mode. [#14327](https://github.com/gravitational/teleport/pull/14327)\r\n* Create PuTTY compatible key pair on `tsh login`. [#14383](https://github.com/gravitational/teleport/pull/14383)\r\n* Display Kubernetes session in the list of active sessions in Web UI. [#14360](https://github.com/gravitational/teleport/pull/14360)\r\n* Reduced the number of cache reads in healthy clusters. [#14304](https://github.com/gravitational/teleport/pull/14304)\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download." }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/71593618", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/71593618/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/71593618/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v10.0.0", "id": 71593618, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4ERG6S", "tag_name": "v10.0.0", "target_commitish": "master", "name": "Teleport 10.0.0", "draft": false, "prerelease": false, "created_at": "2022-07-08T16:13:51Z", "published_at": "2022-07-08T18:33:45Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v10.0.0", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v10.0.0", "body": "## Description\r\n\r\nTeleport 10 is a major release that brings the following new features.\r\n\r\nPlatform:\r\n\r\n* Passwordless (Preview)\r\n* Resource Access Requests (Preview)\r\n* Proxy Peering (Preview)\r\n\r\nServer Access:\r\n\r\n* IP-Based Restrictions (Preview)\r\n* Automatic User Provisioning (Preview)\r\n\r\nDatabase Access:\r\n\r\n* Audit Logging for Microsoft SQL Server Database Access\r\n* Snowflake Database Access (Preview)\r\n* ElastiCache/MemoryDB Database Access (Preview)\r\n\r\nTeleport Connect:\r\n\r\n* Teleport Connect for Server and Database Access (Preview)\r\n\r\nMachine ID:\r\n\r\n* Machine ID Database Access Support (Preview)\r\n\r\n### Passwordless (Preview)\r\n\r\nTeleport 10 introduces passwordless support to your clusters. To use passwordless users may register a security key with resident credentials or use a built-in authenticator, like Touch ID.\r\n\r\nSee https://goteleport.com/docs/access-controls/guides/passwordless/.\r\n\r\n### Resource Access Requests (Preview)\r\n\r\nTeleport 10 expands just-in-time access requests to allow for requesting access to specific resources. This lets you grant users the least privileged access needed for their workflows.\r\n\r\nJust-in-time access requests are only available in Teleport Enterprise Edition.\r\n\r\n### Proxy Peering (Preview)\r\n\r\nProxy peering enables Teleport deployments to scale without an increase in load from the number of agent connections. This is accomplished by allowing Proxy Services to tunnel client connections to the desired agent through a neighboring proxy and decoupling the number of agent connections from the number of Proxies.\r\n\r\nProxy peering can be enabled with the following configurations:\r\n\r\n```yaml\r\nauth_service:\r\n tunnel_strategy:\r\n type: proxy_peering\r\n agent_connection_count: 1\r\n```\r\n\r\n```yaml\r\nproxy_service:\r\n peer_listen_addr: 0.0.0.0:3021\r\n```\r\n\r\nNetwork connectivity between proxy servers to the `peer_listen_addr` is required for this feature to work.\r\n\r\nProxy peering is only available in Teleport Enterprise Edition.\r\n\r\n### IP-Based Restrictions (Preview)\r\n\r\nTeleport 10 introduces a new role option to pin the source IP in SSH certificates. When enabled, the source IP that was used to request certificates is embedded in the certificate, and SSH servers will reject connection attempts from other IPs. This protects against attacks where valid credentials are exfiltrated from disk and copied out into other environments.\r\n\r\nIP-based restrictions are only available in Teleport Enterprise Edition.\r\n\r\n### Automatic User Provisioning (Preview)\r\n\r\nTeleport 10 can be configured to automatically create Linux host users upon login without having to use Teleport's PAM integration. Users can be added to specific Linux groups and assigned appropriate “sudoer” privileges.\r\n\r\nTo learn more about configuring automatic user provisioning read the guide: https://goteleport.com/docs/server-access/guides/host-user-creation/.\r\n\r\n### Audit Logging for Microsoft SQL Server Database Access\r\n\r\nTeleport 9 introduced a preview of Database Access support for Microsoft SQL Server which didn’t include audit logging of user queries. Teleport 10 captures users' queries and prepared statements and sends them to the audit log, similarly to other supported database protocols.\r\n\r\nTeleport Database Access for SQL Server remains in Preview mode with more UX improvements coming in future releases.\r\n\r\nRefer to the guide to set up access to a SQL Server with Active Directory authentication: https://goteleport.com/docs/database-access/guides/sql-server-ad/.\r\n\r\n### Snowflake Database Access (Preview)\r\n\r\nTeleport 10 brings support for Snowflake to Database Access. Administrators can set up access to Snowflake databases through Teleport for their users with standard Database Access features like role-based access control and audit logging, including query activity.\r\n\r\nConnect your Snowflake database to Teleport following this guide: https://goteleport.com/docs/database-access/guides/snowflake/.\r\n\r\n### Elasticache/MemoryDB Database Access (Preview)\r\n\r\nTeleport 9 added Redis protocol support to Database Access. Teleport 10 improves this integration by adding native support for AWS-hosted Elasticache and MemoryDB, including auto-discovery and automatic credential management in some deployment configurations.\r\n\r\nLearn more about it in this guide: https://goteleport.com/docs/database-access/guides/redis-aws/.\r\n\r\n### Teleport Connect for Server and Database Access (Preview)\r\n\r\nTeleport Connect is a graphical macOS application that simplifies access to your Teleport resources. Teleport Connect 10 supports Server Access and Database Access. Other protocols and Windows support are coming in a future release.\r\n\r\nGet Teleport Connect installer from the macOS tab on the downloads page: https://goteleport.com/download/.\r\n\r\n### Machine ID Database Access Support (Preview)\r\n\r\nIn Teleport 10 we’ve added Database Access support to Machine ID. Applications can use Machine ID to access databases protected by Teleport.\r\n\r\nYou can find Machine ID guide for database access in the documentation: https://goteleport.com/docs/machine-id/guides/databases/.\r\n\r\n### Breaking changes\r\n\r\nPlease familiarize yourself with the following potentially disruptive changes in Teleport 10 before upgrading.\r\n\r\n#### Auth Service version check\r\n\r\nTeleport 10 agents will now refuse to start if they detect that the Auth Service is more than one major version behind them. You can use the `--skip-version-check` flag to bypass the version check.\r\n\r\nTake a look at component compatibility guarantees in the documentation: https://goteleport.com/docs/setup/operations/upgrading/#component-compatibility.\r\n\r\n#### HTTP_PROXY for reverse tunnels\r\n\r\nReverse tunnel connections will now respect `HTTP_PROXY` environment variables. This may result in reverse tunnel agents not being able to re-establish connections if the HTTP proxy is set in their environment and does not allow connections to the Teleport Proxy Service.\r\n\r\nRefer to the following documentation section for more details: https://goteleport.com/docs/setup/reference/networking/#http-connect-proxies.\r\n\r\n#### New APT repos\r\n\r\nWith Teleport 10 we’ve migrated to new APT repositories that now support multiple release channels, Teleport versions and OS distributions. The new repositories have been backfilled with Teleport versions starting from 6.2.31 and we recommend upgrading to them. The old repositories will be maintained for the foreseeable future.\r\n\r\nSee updated installation instructions: https://goteleport.com/docs/server-access/getting-started/#step-14-install-teleport-on-your-linux-host.\r\n\r\n#### Removed “tctl access ls”\r\n\r\nThe `tctl access ls` command that returned information about user server access within the cluster was removed. Please use a previous `tctl` version if you’d like to keep using it.\r\n\r\n#### Relaxed session join permissions\r\n\r\nIn previous versions of Teleport users needed full access to a Node/Kubernetes pod in order to join a session. Teleport 10 relaxes this requirement. Joining sessions remains deny-by-default but now only `join_policy` statements are checked for session join RBAC.\r\n\r\nSee the Moderated Sessions guide for more details: https://goteleport.com/docs/access-controls/guides/moderated-sessions/.\r\n\r\n#### GitHub connectors\r\n\r\nThe GitHub authentication connector’s `teams_to_logins` field is deprecated in favor of the new `teams_to_roles` field. The old field will be removed in a future release.\r\n\r\n#### Teleport FIPS AWS endpoints\r\n\r\nTeleport 10 will now automatically use FIPS endpoints for AWS S3 and DynamoDB when started with the `--fips` flag. You can use the `use_fips_endpoint=false` connection endpoint option to use regular endpoints for Teleport in FIPS mode, for example:\r\n\r\n```\r\ns3://bucket/path?region=us-east-1&use_fips_endpoint=false\r\n```\r\n\r\nSee the S3/DynamoDB backends documentation for more information: https://goteleport.com/docs/setup/reference/backends/#s3.\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download.", "reactions": { "url": "https://api.github.com/repos/gravitational/teleport/releases/71593618/reactions", "total_count": 1, "+1": 0, "-1": 0, "laugh": 0, "hooray": 1, "confused": 0, "heart": 0, "rocket": 0, "eyes": 0 } }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/71287713", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/71287713/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/71287713/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v10.0.0-rc.1", "id": 71287713, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4EP8Oh", "tag_name": "v10.0.0-rc.1", "target_commitish": "master", "name": "Teleport 10.0.0-rc.1", "draft": false, "prerelease": true, "created_at": "2022-07-02T02:08:50Z", "published_at": "2022-07-05T14:59:03Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v10.0.0-rc.1", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v10.0.0-rc.1", "body": "## Warning\r\n\r\nPre-releases are not production ready, use at your own risk!\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download." }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/71096325", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/71096325/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/71096325/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v9.3.9", "id": 71096325, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4EPNgF", "tag_name": "v9.3.9", "target_commitish": "master", "name": "Teleport 9.3.9", "draft": false, "prerelease": false, "created_at": "2022-07-01T15:20:31Z", "published_at": "2022-07-01T18:26:26Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v9.3.9", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v9.3.9", "body": "## Description\r\n\r\nThis release of Teleport contains a security fix, as well as multiple improvements and bug fixes.\r\n\r\n### Auth bypass in Moderated Sessions\r\n\r\nWhen checking a user’s roles prior to starting a session, Teleport may have incorrectly allowed a session to proceed without moderation depending on the order roles are received from the backend.\r\n\r\nIf you're using Moderated Sessions, we recommend upgrading Auth, Proxy, SSH and Kubernetes agents.\r\n\r\n### Other improvements and fixes\r\n\r\n* Fixed issue with per-session MFA swallowing keypresses. [#13822](https://github.com/gravitational/teleport/pull/13822)\r\n* Fixed issue with `tsh db ls -R` now showing allowed users. [#13626](https://github.com/gravitational/teleport/pull/13626)\r\n* Fixed vertical and horizontal scroll in desktop access. [#13905](https://github.com/gravitational/teleport/pull/13905)\r\n* Fixed issue with invalid query filters forcing `tsh` relogin. [#13747](https://github.com/gravitational/teleport/pull/13747)\r\n* Fixed issue with TLS routing and proxy jump. [#13928](https://github.com/gravitational/teleport/pull/13928)\r\n* Fixed issue with MongoDB connections timing out in certain scenarios. [#13859](https://github.com/gravitational/teleport/pull/13859)\r\n* Fixed issue with Machine ID certificate renewal with empty requested roles. [#13893](https://github.com/gravitational/teleport/pull/13893)\r\n* Fixed issue with Windows desktops not being labeled with LDAP attribute labels. [#13681](https://github.com/gravitational/teleport/pull/13681)\r\n* Fixed issue with desktop access streaming not being terminated properly. [#14024](https://github.com/gravitational/teleport/pull/14024)\r\n* Added ability to use FIPS endpoints for S3 and DynamoDB using `use_fips_endpoint` connection option. [#13703](https://github.com/gravitational/teleport/pull/13703)\r\n* Added ability to specify CA pin as a file path in the config. [#13089](https://github.com/gravitational/teleport/pull/13089)\r\n* Improved reconnect reliability after root proxy restart. [#13967](https://github.com/gravitational/teleport/pull/13967)\r\n* Improved error messages for failed auth client connections. [#13835](https://github.com/gravitational/teleport/pull/13835)\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download.\r\n---\r\nLabels: security-patch=yes\r\n" }, { "url": "https://api.github.com/repos/gravitational/teleport/releases/70894219", "assets_url": "https://api.github.com/repos/gravitational/teleport/releases/70894219/assets", "upload_url": "https://uploads.github.com/repos/gravitational/teleport/releases/70894219/assets{?name,label}", "html_url": "https://github.com/gravitational/teleport/releases/tag/v8.3.15", "id": 70894219, "author": { "login": "r0mant", "id": 339322, "node_id": "MDQ6VXNlcjMzOTMyMg==", "avatar_url": "https://avatars.githubusercontent.com/u/339322?v=4", "gravatar_id": "", "url": "https://api.github.com/users/r0mant", "html_url": "https://github.com/r0mant", "followers_url": "https://api.github.com/users/r0mant/followers", "following_url": "https://api.github.com/users/r0mant/following{/other_user}", "gists_url": "https://api.github.com/users/r0mant/gists{/gist_id}", "starred_url": "https://api.github.com/users/r0mant/starred{/owner}{/repo}", "subscriptions_url": "https://api.github.com/users/r0mant/subscriptions", "organizations_url": "https://api.github.com/users/r0mant/orgs", "repos_url": "https://api.github.com/users/r0mant/repos", "events_url": "https://api.github.com/users/r0mant/events{/privacy}", "received_events_url": "https://api.github.com/users/r0mant/received_events", "type": "User", "site_admin": false }, "node_id": "RE_kwDOAeGNGc4EOcKL", "tag_name": "v8.3.15", "target_commitish": "master", "name": "Teleport 8.3.15", "draft": false, "prerelease": false, "created_at": "2022-06-29T17:02:51Z", "published_at": "2022-06-29T18:13:40Z", "assets": [], "tarball_url": "https://api.github.com/repos/gravitational/teleport/tarball/v8.3.15", "zipball_url": "https://api.github.com/repos/gravitational/teleport/zipball/v8.3.15", "body": "## Description\r\n\r\nThis release of Teleport contains multiple improvements and bug fixes.\r\n\r\n* Improved reliability of dialing auth servers through the proxy. [#13310](https://github.com/gravitational/teleport/pull/13310)\r\n* Reduced network utilization when using many trusted clusters. [#13961](https://github.com/gravitational/teleport/pull/13961)\r\n* Fixed issue with dialing remote clusters after proxy restart. [#13798](https://github.com/gravitational/teleport/pull/13798)\r\n* Fixed backwards compatibility issue with fetching access requests. [#13427](https://github.com/gravitational/teleport/pull/13427)\r\n* Fixed issue with CA rotation not working when database service has not enabled databases. [#13518](https://github.com/gravitational/teleport/pull/13518)\r\n* Fixed issue with EC2 metadata options breaking generated Teleport config. [#13538](https://github.com/gravitational/teleport/pull/13538)\r\n* Added extra troubleshooting tools to Teleport Docker images. [#13198](https://github.com/gravitational/teleport/pull/13198)\r\n\r\n## Download\r\n\r\nDownload the current and previous releases of Teleport at https://gravitational.com/teleport/download." } ]