Skip to content

Commit 249c542

Browse files
camscalecamscale
committed
Release 14.3.33
1 parent 53b8ba8 commit 249c542

File tree

17 files changed

+131
-104
lines changed

17 files changed

+131
-104
lines changed

‎CHANGELOG.md

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,32 @@
11
# Changelog
22

3+
## 14.3.33 (10/30/24)
4+
5+
* Fixed a bug in the External Audit Storage bootstrap script that broke S3 bucket creation. [#48179](https://github.com/gravitational/teleport/pull/48179)
6+
* During the Set Up Access of the Enroll New Resource flows, Okta users will be asked to change the role instead of entering the principals and getting an error afterwards. [#47959](https://github.com/gravitational/teleport/pull/47959)
7+
* Fixed `teleport_connected_resource` metric overshooting after keepalive errors. [#47951](https://github.com/gravitational/teleport/pull/47951)
8+
* Fixed an issue preventing connections with users whose configured home directories were inaccessible. [#47918](https://github.com/gravitational/teleport/pull/47918)
9+
* Auto-enroll may be locally disabled using the `TELEPORT_DEVICE_AUTO_ENROLL_DISABLED=1` environment variable. [#47718](https://github.com/gravitational/teleport/pull/47718)
10+
* Alter ServiceAccounts in the teleport-cluster Helm chart to automatically disable mounting of service account tokens on newer Kubernetes distributions, helping satisfy security linters. [#47701](https://github.com/gravitational/teleport/pull/47701)
11+
* Avoid tsh auto-enroll escalation in machines without a TPM. [#47697](https://github.com/gravitational/teleport/pull/47697)
12+
* Postgres database session start events now include the Postgres backend PID for the session. [#47645](https://github.com/gravitational/teleport/pull/47645)
13+
* Fixes a bug where Let's Encrypt certificate renewal failed in AMI and HA deployments due to insufficient disk space caused by syncing audit logs. [#47623](https://github.com/gravitational/teleport/pull/47623)
14+
* Adds support for custom SQS consumer lock name and disabling a consumer. [#47612](https://github.com/gravitational/teleport/pull/47612)
15+
* Include host name instead of host uuid in error messages when SSH connections are prevented due to an invalid login. [#47603](https://github.com/gravitational/teleport/pull/47603)
16+
* Allow using a custom database for Firestore backends. [#47585](https://github.com/gravitational/teleport/pull/47585)
17+
* Extended Teleport Discovery Service to support resource discovery across all projects accessible by the service account. [#47566](https://github.com/gravitational/teleport/pull/47566)
18+
* Fixed a bug that could allow users to list active sessions even when prohibited by RBAC. [#47562](https://github.com/gravitational/teleport/pull/47562)
19+
* The `tctl tokens ls` command redacts secret join tokens by default. To include the token values, provide the new `--with-secrets` flag. [#47547](https://github.com/gravitational/teleport/pull/47547)
20+
* Fixed an issue with the Microsoft license negotiation for RDP sessions. [#47544](https://github.com/gravitational/teleport/pull/47544)
21+
* Fixed a bug where tsh logout failed to parse flags passed with spaces. [#47461](https://github.com/gravitational/teleport/pull/47461)
22+
* Added kubeconfig context name to the output table of `tsh proxy kube` command for enhanced clarity. [#47381](https://github.com/gravitational/teleport/pull/47381)
23+
* Improve error messaging when connections to offline agents are attempted. [#47363](https://github.com/gravitational/teleport/pull/47363)
24+
* Teleport Connect for Linux now requires glibc 2.31 or later. [#47264](https://github.com/gravitational/teleport/pull/47264)
25+
* Updates self-hosted db discover flow to generate 2190h TTL certs, not 12h. [#47128](https://github.com/gravitational/teleport/pull/47128)
26+
27+
Enterprise:
28+
* Device auto-enroll failures are now recorded in the audit log.
29+
330
## 14.3.32 (10/03/24)
431

532
* Fixes an issue preventing access requests from displaying user friendly resource names. [#47110](https://github.com/gravitational/teleport/pull/47110)

‎Makefile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
# Stable releases: "1.0.0"
1212
# Pre-releases: "1.0.0-alpha.1", "1.0.0-beta.2", "1.0.0-rc.3"
1313
# Master/dev branch: "1.0.0-dev"
14-
VERSION=14.3.32
14+
VERSION=14.3.33
1515

1616
DOCKER_IMAGE ?= teleport
1717

‎api/version.go

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎build.assets/macos/tsh/tsh.app/Contents/Info.plist

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,13 +19,13 @@
1919
<key>CFBundlePackageType</key>
2020
<string>APPL</string>
2121
<key>CFBundleShortVersionString</key>
22-
<string>14.3.32</string>
22+
<string>14.3.33</string>
2323
<key>CFBundleSupportedPlatforms</key>
2424
<array>
2525
<string>MacOSX</string>
2626
</array>
2727
<key>CFBundleVersion</key>
28-
<string>14.3.32</string>
28+
<string>14.3.33</string>
2929
<key>DTCompiler</key>
3030
<string>com.apple.compilers.llvm.clang.1_0</string>
3131
<key>DTPlatformBuild</key>

‎build.assets/macos/tshdev/tsh.app/Contents/Info.plist

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,13 +17,13 @@
1717
<key>CFBundlePackageType</key>
1818
<string>APPL</string>
1919
<key>CFBundleShortVersionString</key>
20-
<string>14.3.32</string>
20+
<string>14.3.33</string>
2121
<key>CFBundleSupportedPlatforms</key>
2222
<array>
2323
<string>MacOSX</string>
2424
</array>
2525
<key>CFBundleVersion</key>
26-
<string>14.3.32</string>
26+
<string>14.3.33</string>
2727
<key>DTCompiler</key>
2828
<string>com.apple.compilers.llvm.clang.1_0</string>
2929
<key>DTPlatformBuild</key>

‎examples/chart/teleport-cluster/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
.version: &version "14.3.32"
1+
.version: &version "14.3.33"
22

33
name: teleport-cluster
44
apiVersion: v2

‎examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
.version: &version "14.3.32"
1+
.version: &version "14.3.33"
22

33
name: teleport-operator
44
apiVersion: v2

‎examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,8 +8,8 @@ adds operator permissions to ClusterRole:
88
app.kubernetes.io/instance: RELEASE-NAME
99
app.kubernetes.io/managed-by: Helm
1010
app.kubernetes.io/name: teleport-cluster
11-
app.kubernetes.io/version: 14.3.32
12-
helm.sh/chart: teleport-cluster-14.3.32
11+
app.kubernetes.io/version: 14.3.33
12+
helm.sh/chart: teleport-cluster-14.3.33
1313
teleport.dev/majorVersion: "14"
1414
name: RELEASE-NAME
1515
rules:

‎examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1797,8 +1797,8 @@ sets clusterDomain on Configmap:
17971797
app.kubernetes.io/instance: RELEASE-NAME
17981798
app.kubernetes.io/managed-by: Helm
17991799
app.kubernetes.io/name: teleport-cluster
1800-
app.kubernetes.io/version: 14.3.32
1801-
helm.sh/chart: teleport-cluster-14.3.32
1800+
app.kubernetes.io/version: 14.3.33
1801+
helm.sh/chart: teleport-cluster-14.3.33
18021802
teleport.dev/majorVersion: "14"
18031803
name: RELEASE-NAME-auth
18041804
namespace: NAMESPACE

‎examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
should add an operator side-car when operator is enabled:
22
1: |
3-
image: public.ecr.aws/gravitational/teleport-operator:14.3.32
3+
image: public.ecr.aws/gravitational/teleport-operator:14.3.33
44
imagePullPolicy: IfNotPresent
55
livenessProbe:
66
httpGet:
@@ -41,7 +41,7 @@ should add an operator side-car when operator is enabled:
4141
- args:
4242
- --diag-addr=0.0.0.0:3000
4343
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
44-
image: public.ecr.aws/gravitational/teleport-distroless:14.3.32
44+
image: public.ecr.aws/gravitational/teleport-distroless:14.3.33
4545
imagePullPolicy: IfNotPresent
4646
lifecycle:
4747
preStop:
@@ -174,7 +174,7 @@ should set nodeSelector when set in values:
174174
- args:
175175
- --diag-addr=0.0.0.0:3000
176176
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
177-
image: public.ecr.aws/gravitational/teleport-distroless:14.3.32
177+
image: public.ecr.aws/gravitational/teleport-distroless:14.3.33
178178
imagePullPolicy: IfNotPresent
179179
lifecycle:
180180
preStop:
@@ -271,7 +271,7 @@ should set resources when set in values:
271271
- args:
272272
- --diag-addr=0.0.0.0:3000
273273
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
274-
image: public.ecr.aws/gravitational/teleport-distroless:14.3.32
274+
image: public.ecr.aws/gravitational/teleport-distroless:14.3.33
275275
imagePullPolicy: IfNotPresent
276276
lifecycle:
277277
preStop:
@@ -357,7 +357,7 @@ should set securityContext when set in values:
357357
- args:
358358
- --diag-addr=0.0.0.0:3000
359359
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
360-
image: public.ecr.aws/gravitational/teleport-distroless:14.3.32
360+
image: public.ecr.aws/gravitational/teleport-distroless:14.3.33
361361
imagePullPolicy: IfNotPresent
362362
lifecycle:
363363
preStop:

0 commit comments

Comments
 (0)