Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Release 14.3.30 #46003

Merged
merged 2 commits into from
Aug 29, 2024
Merged

Release 14.3.30 #46003

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4b73b86
Bump e ref for AMI workflow fix
camscale Aug 28, 2024
9ac6982
Release 14.3.30
camscale Aug 28, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Changelog

## 14.3.29 (08/27/24)
## 14.3.30 (08/28/24)

### Security fix

Expand All @@ -25,6 +25,9 @@ to be updated.

### Other fixes and improvements

* Fixed an issue where host_sudoers could be written to Teleport proxy server sudoer lists in Teleport v14 and v15. [#45960](https://github.com/gravitational/teleport/pull/45960)
* Prevent interactive sessions from hanging on exit. [#45954](https://github.com/gravitational/teleport/pull/45954)
* Fixed kernel version check of Enhanced Session Recording for distributions with backported BPF. [#45943](https://github.com/gravitational/teleport/pull/45943)
* When a database is created manually (without auto-discovery) the teleport.dev/db-admin and teleport.dev/db-admin-default-database labels are no longer ignored and can be used to configure database auto-user provisioning. [#45893](https://github.com/gravitational/teleport/pull/45893)
* Fixed an issue where Teleport could modify group assignments for users not managed by Teleport. This will require a migration of host users created with create_host_user_mode: keep in order to maintain Teleport management. More info can be found at [Migrating unmanaged users](./docs/pages/enroll-resources/server-access/guides/host-user-creation.mdx#migrating-unmanaged-users). [#45796](https://github.com/gravitational/teleport/pull/45796)
* Fixed host user creation for tsh scp. [#45682](https://github.com/gravitational/teleport/pull/45682)
Expand Down
2 changes: 1 addition & 1 deletion Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
# Stable releases: "1.0.0"
# Pre-releases: "1.0.0-alpha.1", "1.0.0-beta.2", "1.0.0-rc.3"
# Master/dev branch: "1.0.0-dev"
VERSION=14.3.29
VERSION=14.3.30

DOCKER_IMAGE ?= teleport

Expand Down
2 changes: 1 addition & 1 deletion api/version.go
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 2 additions & 2 deletions build.assets/macos/tsh/tsh.app/Contents/Info.plist
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,13 +19,13 @@
<key>CFBundlePackageType</key>
<string>APPL</string>
<key>CFBundleShortVersionString</key>
<string>14.3.29</string>
<string>14.3.30</string>
<key>CFBundleSupportedPlatforms</key>
<array>
<string>MacOSX</string>
</array>
<key>CFBundleVersion</key>
<string>14.3.29</string>
<string>14.3.30</string>
<key>DTCompiler</key>
<string>com.apple.compilers.llvm.clang.1_0</string>
<key>DTPlatformBuild</key>
Expand Down
4 changes: 2 additions & 2 deletions build.assets/macos/tshdev/tsh.app/Contents/Info.plist
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,13 +17,13 @@
<key>CFBundlePackageType</key>
<string>APPL</string>
<key>CFBundleShortVersionString</key>
<string>14.3.29</string>
<string>14.3.30</string>
<key>CFBundleSupportedPlatforms</key>
<array>
<string>MacOSX</string>
</array>
<key>CFBundleVersion</key>
<string>14.3.29</string>
<string>14.3.30</string>
<key>DTCompiler</key>
<string>com.apple.compilers.llvm.clang.1_0</string>
<key>DTPlatformBuild</key>
Expand Down
2 changes: 1 addition & 1 deletion e
Open in desktop
Submodule e updated from 81e290 to 3ad6b6
2 changes: 1 addition & 1 deletion examples/chart/teleport-cluster/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
.version: &version "14.3.29"
.version: &version "14.3.30"

name: teleport-cluster
apiVersion: v2
Expand Down
2 changes: 1 addition & 1 deletion examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
.version: &version "14.3.29"
.version: &version "14.3.30"

name: teleport-operator
apiVersion: v2
Expand Down
4 changes: 2 additions & 2 deletions examples/chart/teleport-cluster/tests/__snapshot__/auth_clusterrole_test.yaml.snap
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,8 @@ adds operator permissions to ClusterRole:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
app.kubernetes.io/version: 14.3.29
helm.sh/chart: teleport-cluster-14.3.29
app.kubernetes.io/version: 14.3.30
helm.sh/chart: teleport-cluster-14.3.30
teleport.dev/majorVersion: "14"
name: RELEASE-NAME
rules:
Expand Down
4 changes: 2 additions & 2 deletions examples/chart/teleport-cluster/tests/__snapshot__/auth_config_test.yaml.snap
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1797,8 +1797,8 @@ sets clusterDomain on Configmap:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
app.kubernetes.io/version: 14.3.29
helm.sh/chart: teleport-cluster-14.3.29
app.kubernetes.io/version: 14.3.30
helm.sh/chart: teleport-cluster-14.3.30
teleport.dev/majorVersion: "14"
name: RELEASE-NAME-auth
namespace: NAMESPACE
Expand Down
10 changes: 5 additions & 5 deletions examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
should add an operator side-car when operator is enabled:
1: |
image: public.ecr.aws/gravitational/teleport-operator:14.3.29
image: public.ecr.aws/gravitational/teleport-operator:14.3.30
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
Expand Down Expand Up @@ -41,7 +41,7 @@ should add an operator side-car when operator is enabled:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down Expand Up @@ -174,7 +174,7 @@ should set nodeSelector when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down Expand Up @@ -271,7 +271,7 @@ should set resources when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down Expand Up @@ -357,7 +357,7 @@ should set securityContext when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down
4 changes: 2 additions & 2 deletions examples/chart/teleport-cluster/tests/__snapshot__/proxy_config_test.yaml.snap
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -567,8 +567,8 @@ sets clusterDomain on Configmap:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
app.kubernetes.io/version: 14.3.29
helm.sh/chart: teleport-cluster-14.3.29
app.kubernetes.io/version: 14.3.30
helm.sh/chart: teleport-cluster-14.3.30
teleport.dev/majorVersion: "14"
name: RELEASE-NAME-proxy
namespace: NAMESPACE
32 changes: 16 additions & 16 deletions examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,8 @@ sets clusterDomain on Deployment Pods:
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
app.kubernetes.io/version: 14.3.29
helm.sh/chart: teleport-cluster-14.3.29
app.kubernetes.io/version: 14.3.30
helm.sh/chart: teleport-cluster-14.3.30
teleport.dev/majorVersion: "14"
name: RELEASE-NAME-proxy
namespace: NAMESPACE
Expand All @@ -26,16 +26,16 @@ sets clusterDomain on Deployment Pods:
template:
metadata:
annotations:
checksum/config: 3937f5f8355bf9d764442eec2c19e13a562f9a8dbfb06f32f8468e9841513a4d
checksum/config: 7d09284af8f16fe9cb56fa362c802ed742b2cbee0099c86800545176dc7bf014
kubernetes.io/pod: test-annotation
kubernetes.io/pod-different: 4
labels:
app.kubernetes.io/component: proxy
app.kubernetes.io/instance: RELEASE-NAME
app.kubernetes.io/managed-by: Helm
app.kubernetes.io/name: teleport-cluster
app.kubernetes.io/version: 14.3.29
helm.sh/chart: teleport-cluster-14.3.29
app.kubernetes.io/version: 14.3.30
helm.sh/chart: teleport-cluster-14.3.30
teleport.dev/majorVersion: "14"
spec:
affinity:
Expand All @@ -44,7 +44,7 @@ sets clusterDomain on Deployment Pods:
containers:
- args:
- --diag-addr=0.0.0.0:3000
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down Expand Up @@ -105,7 +105,7 @@ sets clusterDomain on Deployment Pods:
- wait
- no-resolve
- RELEASE-NAME-auth-v13.NAMESPACE.svc.test.com
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
name: wait-auth-update
serviceAccountName: RELEASE-NAME-proxy
terminationGracePeriodSeconds: 60
Expand Down Expand Up @@ -137,7 +137,7 @@ should provision initContainer correctly when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v13.NAMESPACE.svc.cluster.local
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
name: wait-auth-update
- args:
- echo test
Expand Down Expand Up @@ -194,7 +194,7 @@ should set nodeSelector when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down Expand Up @@ -255,7 +255,7 @@ should set nodeSelector when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v13.NAMESPACE.svc.cluster.local
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
name: wait-auth-update
nodeSelector:
environment: security
Expand Down Expand Up @@ -306,7 +306,7 @@ should set resources when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down Expand Up @@ -374,7 +374,7 @@ should set resources when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v13.NAMESPACE.svc.cluster.local
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
name: wait-auth-update
serviceAccountName: RELEASE-NAME-proxy
terminationGracePeriodSeconds: 60
Expand Down Expand Up @@ -407,7 +407,7 @@ should set securityContext for initContainers when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down Expand Up @@ -475,7 +475,7 @@ should set securityContext for initContainers when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v13.NAMESPACE.svc.cluster.local
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
name: wait-auth-update
securityContext:
allowPrivilegeEscalation: false
Expand Down Expand Up @@ -515,7 +515,7 @@ should set securityContext when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
Expand Down Expand Up @@ -583,7 +583,7 @@ should set securityContext when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v13.NAMESPACE.svc.cluster.local
image: public.ecr.aws/gravitational/teleport-distroless:14.3.29
image: public.ecr.aws/gravitational/teleport-distroless:14.3.30
name: wait-auth-update
securityContext:
allowPrivilegeEscalation: false
Expand Down
2 changes: 1 addition & 1 deletion examples/chart/teleport-kube-agent/Chart.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
.version: &version "14.3.29"
.version: &version "14.3.30"

name: teleport-kube-agent
apiVersion: v2
Expand Down
Loading
Loading