diff --git a/access/discord/Makefile b/access/discord/Makefile
index 8ad822fbd..bc56ce4ce 100644
--- a/access/discord/Makefile
+++ b/access/discord/Makefile
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 GO_VERSION=1.21.3
 
 BUILDDIR ?= build
diff --git a/access/email/Makefile b/access/email/Makefile
index 64d3a6d54..1510fcaaa 100644
--- a/access/email/Makefile
+++ b/access/email/Makefile
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 GO_VERSION=1.21.3
 
 BUILDDIR ?= build
diff --git a/access/jira/Makefile b/access/jira/Makefile
index 518606098..7aba82a8d 100644
--- a/access/jira/Makefile
+++ b/access/jira/Makefile
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 GO_VERSION=1.21.3
 
 BUILDDIR ?= build
diff --git a/access/mattermost/Makefile b/access/mattermost/Makefile
index 8a3180b86..6f8d30dc2 100644
--- a/access/mattermost/Makefile
+++ b/access/mattermost/Makefile
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 GO_VERSION=1.21.3
 
 BUILDDIR ?= build
diff --git a/access/msteams/Makefile b/access/msteams/Makefile
index 5c606a6c6..8dc76c849 100644
--- a/access/msteams/Makefile
+++ b/access/msteams/Makefile
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 GO_VERSION=1.21.3
 
 BUILDDIR ?= build
diff --git a/access/msteams/plugindata_test.go b/access/msteams/plugindata_test.go
index 1b2dd69b7..3b5a02556 100644
--- a/access/msteams/plugindata_test.go
+++ b/access/msteams/plugindata_test.go
@@ -42,13 +42,14 @@ const messageData = "eyJpZCI6IkNIQU5ORUwxIiwidHMiOiIwMDAwMDAxIiwicmlkIjoiZm9vQGV
 func TestEncodePluginData(t *testing.T) {
 	dataMap, err := EncodePluginData(samplePluginData)
 	assert.NoError(t, err)
-	assert.Len(t, dataMap, 7)
+	assert.GreaterOrEqual(t, len(dataMap), 8)
 	assert.Equal(t, "user-foo", dataMap["user"])
 	assert.Equal(t, "role-foo,role-bar", dataMap["roles"])
 	assert.Equal(t, "foo reason", dataMap["request_reason"])
 	assert.Equal(t, "3", dataMap["reviews_count"])
 	assert.Equal(t, "APPROVED", dataMap["resolution"])
 	assert.Equal(t, "foo ok", dataMap["resolve_reason"])
+	assert.Equal(t, "", dataMap["resources"])
 	assert.Equal(
 		t,
 		messageData,
@@ -90,7 +91,7 @@ func TestDecodePluginData(t *testing.T) {
 func TestEncodeEmptyPluginData(t *testing.T) {
 	dataMap, err := EncodePluginData(PluginData{})
 	assert.NoError(t, err)
-	assert.Len(t, dataMap, 7)
+	assert.GreaterOrEqual(t, len(dataMap), 8)
 	for key, value := range dataMap {
 		assert.Emptyf(t, value, "value at key %q must be empty", key)
 	}
diff --git a/access/pagerduty/Makefile b/access/pagerduty/Makefile
index a51023733..dd0c5c53d 100644
--- a/access/pagerduty/Makefile
+++ b/access/pagerduty/Makefile
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 GO_VERSION=1.21.3
 
 BUILDDIR ?= build
diff --git a/access/slack/Makefile b/access/slack/Makefile
index ec1c2c0e3..2cc4cb5d0 100644
--- a/access/slack/Makefile
+++ b/access/slack/Makefile
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 GO_VERSION=1.21.3
 
 BUILDDIR ?= build
diff --git a/charts/access/discord/Chart.yaml b/charts/access/discord/Chart.yaml
index 180fd3fae..7e43b65df 100644
--- a/charts/access/discord/Chart.yaml
+++ b/charts/access/discord/Chart.yaml
@@ -15,16 +15,16 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "14.0.3"
+appVersion: "14.1.0"
diff --git a/charts/access/discord/tests/__snapshot__/configmap_test.yaml.snap b/charts/access/discord/tests/__snapshot__/configmap_test.yaml.snap
index 3961279a3..8cde32f95 100644
--- a/charts/access/discord/tests/__snapshot__/configmap_test.yaml.snap
+++ b/charts/access/discord/tests/__snapshot__/configmap_test.yaml.snap
@@ -23,6 +23,6 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-discord
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-discord-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-discord-14.1.0
       name: RELEASE-NAME-teleport-plugin-discord
diff --git a/charts/access/discord/tests/__snapshot__/deployment_test.yaml.snap b/charts/access/discord/tests/__snapshot__/deployment_test.yaml.snap
index c36c81c95..9853db832 100644
--- a/charts/access/discord/tests/__snapshot__/deployment_test.yaml.snap
+++ b/charts/access/discord/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-discord
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-discord-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-discord-14.1.0
       name: RELEASE-NAME-teleport-plugin-discord
     spec:
       replicas: 1
diff --git a/charts/access/email/Chart.yaml b/charts/access/email/Chart.yaml
index 53840d834..26178dfb7 100644
--- a/charts/access/email/Chart.yaml
+++ b/charts/access/email/Chart.yaml
@@ -13,10 +13,10 @@ description: A Helm chart for the Teleport Email Plugin
 type: application
 
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "14.0.3"
+appVersion: "14.1.0"
diff --git a/charts/access/email/tests/__snapshot__/configmap_test.yaml.snap b/charts/access/email/tests/__snapshot__/configmap_test.yaml.snap
index 9c0200e00..f5777c1cc 100644
--- a/charts/access/email/tests/__snapshot__/configmap_test.yaml.snap
+++ b/charts/access/email/tests/__snapshot__/configmap_test.yaml.snap
@@ -25,8 +25,8 @@ should match the snapshot (mailgun on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on):
   1: |
@@ -57,8 +57,8 @@ should match the snapshot (smtp on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on, no starttls):
   1: |
@@ -89,8 +89,8 @@ should match the snapshot (smtp on, no starttls):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on, password file):
   1: |
@@ -121,8 +121,8 @@ should match the snapshot (smtp on, password file):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on, roleToRecipients set):
   1: |
@@ -156,8 +156,8 @@ should match the snapshot (smtp on, roleToRecipients set):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
 should match the snapshot (smtp on, starttls disabled):
   1: |
@@ -188,6 +188,6 @@ should match the snapshot (smtp on, starttls disabled):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
diff --git a/charts/access/email/tests/__snapshot__/deployment_test.yaml.snap b/charts/access/email/tests/__snapshot__/deployment_test.yaml.snap
index 59be378e8..7faac6159 100644
--- a/charts/access/email/tests/__snapshot__/deployment_test.yaml.snap
+++ b/charts/access/email/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should be possible to override volume name (smtp on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
     spec:
       replicas: 1
@@ -31,7 +31,7 @@ should be possible to override volume name (smtp on):
             env:
             - name: TELEPORT_PLUGIN_FAIL_FAST
               value: "true"
-            image: public.ecr.aws/gravitational/teleport-plugin-email:14.0.3
+            image: public.ecr.aws/gravitational/teleport-plugin-email:14.1.0
             imagePullPolicy: IfNotPresent
             name: teleport-plugin-email
             ports:
@@ -73,8 +73,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
     spec:
       replicas: 1
@@ -132,8 +132,8 @@ should match the snapshot (mailgun on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
     spec:
       replicas: 1
@@ -156,7 +156,7 @@ should match the snapshot (mailgun on):
             env:
             - name: TELEPORT_PLUGIN_FAIL_FAST
               value: "true"
-            image: public.ecr.aws/gravitational/teleport-plugin-email:14.0.3
+            image: public.ecr.aws/gravitational/teleport-plugin-email:14.1.0
             imagePullPolicy: IfNotPresent
             name: teleport-plugin-email
             ports:
@@ -198,8 +198,8 @@ should match the snapshot (smtp on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
     spec:
       replicas: 1
@@ -222,7 +222,7 @@ should match the snapshot (smtp on):
             env:
             - name: TELEPORT_PLUGIN_FAIL_FAST
               value: "true"
-            image: public.ecr.aws/gravitational/teleport-plugin-email:14.0.3
+            image: public.ecr.aws/gravitational/teleport-plugin-email:14.1.0
             imagePullPolicy: IfNotPresent
             name: teleport-plugin-email
             ports:
@@ -264,8 +264,8 @@ should mount external secret (mailgun on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
     spec:
       replicas: 1
@@ -288,7 +288,7 @@ should mount external secret (mailgun on):
             env:
             - name: TELEPORT_PLUGIN_FAIL_FAST
               value: "true"
-            image: public.ecr.aws/gravitational/teleport-plugin-email:14.0.3
+            image: public.ecr.aws/gravitational/teleport-plugin-email:14.1.0
             imagePullPolicy: IfNotPresent
             name: teleport-plugin-email
             ports:
@@ -330,8 +330,8 @@ should mount external secret (smtp on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-email
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-email-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-email-14.1.0
       name: RELEASE-NAME-teleport-plugin-email
     spec:
       replicas: 1
@@ -354,7 +354,7 @@ should mount external secret (smtp on):
             env:
             - name: TELEPORT_PLUGIN_FAIL_FAST
               value: "true"
-            image: public.ecr.aws/gravitational/teleport-plugin-email:14.0.3
+            image: public.ecr.aws/gravitational/teleport-plugin-email:14.1.0
             imagePullPolicy: IfNotPresent
             name: teleport-plugin-email
             ports:
diff --git a/charts/access/jira/Chart.yaml b/charts/access/jira/Chart.yaml
index 11f2f37f7..75f1b762a 100644
--- a/charts/access/jira/Chart.yaml
+++ b/charts/access/jira/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "14.0.3"
+appVersion: "14.1.0"
diff --git a/charts/access/jira/tests/__snapshot__/configmap_test.yaml.snap b/charts/access/jira/tests/__snapshot__/configmap_test.yaml.snap
index a0ca5e98a..3c1aaad3e 100644
--- a/charts/access/jira/tests/__snapshot__/configmap_test.yaml.snap
+++ b/charts/access/jira/tests/__snapshot__/configmap_test.yaml.snap
@@ -31,6 +31,6 @@ should match the snapshot (smtp on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-jira
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-jira-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-jira-14.1.0
       name: RELEASE-NAME-teleport-plugin-jira
diff --git a/charts/access/jira/tests/__snapshot__/deployment_test.yaml.snap b/charts/access/jira/tests/__snapshot__/deployment_test.yaml.snap
index 2a2cd76f4..b1f7ea8dc 100644
--- a/charts/access/jira/tests/__snapshot__/deployment_test.yaml.snap
+++ b/charts/access/jira/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-jira
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-jira-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-jira-14.1.0
       name: RELEASE-NAME-teleport-plugin-jira
     spec:
       replicas: 1
diff --git a/charts/access/mattermost/Chart.yaml b/charts/access/mattermost/Chart.yaml
index e59e51196..04781f630 100644
--- a/charts/access/mattermost/Chart.yaml
+++ b/charts/access/mattermost/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "14.0.3"
+appVersion: "14.1.0"
diff --git a/charts/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap b/charts/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap
index 89c2573a3..dba2664ab 100644
--- a/charts/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap
+++ b/charts/access/mattermost/tests/__snapshot__/configmap_test.yaml.snap
@@ -21,6 +21,6 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-mattermost
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-mattermost-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-mattermost-14.1.0
       name: RELEASE-NAME-teleport-plugin-mattermost
diff --git a/charts/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap b/charts/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap
index 5f6a6ff07..3e0b378d8 100644
--- a/charts/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap
+++ b/charts/access/mattermost/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-mattermost
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-mattermost-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-mattermost-14.1.0
       name: RELEASE-NAME-teleport-plugin-mattermost
     spec:
       replicas: 1
@@ -73,8 +73,8 @@ should mount external secret:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-mattermost
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-mattermost-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-mattermost-14.1.0
       name: RELEASE-NAME-teleport-plugin-mattermost
     spec:
       replicas: 1
@@ -97,7 +97,7 @@ should mount external secret:
             env:
             - name: TELEPORT_PLUGIN_FAIL_FAST
               value: "true"
-            image: public.ecr.aws/gravitational/teleport-plugin-mattermost:14.0.3
+            image: public.ecr.aws/gravitational/teleport-plugin-mattermost:14.1.0
             imagePullPolicy: IfNotPresent
             name: teleport-plugin-mattermost
             ports:
@@ -139,8 +139,8 @@ should override volume name:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-mattermost
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-mattermost-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-mattermost-14.1.0
       name: RELEASE-NAME-teleport-plugin-mattermost
     spec:
       replicas: 1
@@ -163,7 +163,7 @@ should override volume name:
             env:
             - name: TELEPORT_PLUGIN_FAIL_FAST
               value: "true"
-            image: public.ecr.aws/gravitational/teleport-plugin-mattermost:14.0.3
+            image: public.ecr.aws/gravitational/teleport-plugin-mattermost:14.1.0
             imagePullPolicy: IfNotPresent
             name: teleport-plugin-mattermost
             ports:
diff --git a/charts/access/msteams/Chart.yaml b/charts/access/msteams/Chart.yaml
index 549cfda59..dfa9ca818 100644
--- a/charts/access/msteams/Chart.yaml
+++ b/charts/access/msteams/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "14.0.3"
+appVersion: "14.1.0"
diff --git a/charts/access/msteams/tests/__snapshot__/configmap_test.yaml.snap b/charts/access/msteams/tests/__snapshot__/configmap_test.yaml.snap
index 8a2e3ac15..0296f7a09 100644
--- a/charts/access/msteams/tests/__snapshot__/configmap_test.yaml.snap
+++ b/charts/access/msteams/tests/__snapshot__/configmap_test.yaml.snap
@@ -28,6 +28,6 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-msteams
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-msteams-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-msteams-14.1.0
       name: RELEASE-NAME-teleport-plugin-msteams
diff --git a/charts/access/msteams/tests/__snapshot__/deployment_test.yaml.snap b/charts/access/msteams/tests/__snapshot__/deployment_test.yaml.snap
index 66cec9dce..636d4a0ba 100644
--- a/charts/access/msteams/tests/__snapshot__/deployment_test.yaml.snap
+++ b/charts/access/msteams/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-msteams
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-msteams-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-msteams-14.1.0
       name: RELEASE-NAME-teleport-plugin-msteams
     spec:
       replicas: 1
diff --git a/charts/access/pagerduty/Chart.yaml b/charts/access/pagerduty/Chart.yaml
index d70ada4a1..19ab81ba1 100644
--- a/charts/access/pagerduty/Chart.yaml
+++ b/charts/access/pagerduty/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "14.0.3"
+appVersion: "14.1.0"
diff --git a/charts/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap b/charts/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap
index 9dc80d3f8..60d81aa74 100644
--- a/charts/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap
+++ b/charts/access/pagerduty/tests/__snapshot__/configmap_test.yaml.snap
@@ -20,6 +20,6 @@ should match the snapshot (smtp on):
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-pagerduty
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-pagerduty-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-pagerduty-14.1.0
       name: RELEASE-NAME-teleport-plugin-pagerduty
diff --git a/charts/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap b/charts/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap
index d42ae098e..ca9a5d787 100644
--- a/charts/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap
+++ b/charts/access/pagerduty/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-pagerduty
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-pagerduty-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-pagerduty-14.1.0
       name: RELEASE-NAME-teleport-plugin-pagerduty
     spec:
       replicas: 1
diff --git a/charts/access/slack/Chart.yaml b/charts/access/slack/Chart.yaml
index 792189a54..383755ef4 100644
--- a/charts/access/slack/Chart.yaml
+++ b/charts/access/slack/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "14.0.3"
+appVersion: "14.1.0"
diff --git a/charts/access/slack/tests/__snapshot__/configmap_test.yaml.snap b/charts/access/slack/tests/__snapshot__/configmap_test.yaml.snap
index d8eca6b92..2cd0c3237 100644
--- a/charts/access/slack/tests/__snapshot__/configmap_test.yaml.snap
+++ b/charts/access/slack/tests/__snapshot__/configmap_test.yaml.snap
@@ -23,6 +23,6 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-slack
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-slack-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-slack-14.1.0
       name: RELEASE-NAME-teleport-plugin-slack
diff --git a/charts/access/slack/tests/__snapshot__/deployment_test.yaml.snap b/charts/access/slack/tests/__snapshot__/deployment_test.yaml.snap
index d26d06599..5fc24e14c 100644
--- a/charts/access/slack/tests/__snapshot__/deployment_test.yaml.snap
+++ b/charts/access/slack/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-slack
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-slack-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-slack-14.1.0
       name: RELEASE-NAME-teleport-plugin-slack
     spec:
       replicas: 1
diff --git a/charts/event-handler/Chart.yaml b/charts/event-handler/Chart.yaml
index 33f8739ac..f65080999 100644
--- a/charts/event-handler/Chart.yaml
+++ b/charts/event-handler/Chart.yaml
@@ -15,10 +15,10 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: "14.0.3"
+version: "14.1.0"
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "14.0.3"
+appVersion: "14.1.0"
diff --git a/charts/event-handler/tests/__snapshot__/configmap_test.yaml.snap b/charts/event-handler/tests/__snapshot__/configmap_test.yaml.snap
index f6f8e9a5e..c2420400d 100644
--- a/charts/event-handler/tests/__snapshot__/configmap_test.yaml.snap
+++ b/charts/event-handler/tests/__snapshot__/configmap_test.yaml.snap
@@ -23,6 +23,6 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-event-handler
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-event-handler-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-event-handler-14.1.0
       name: RELEASE-NAME-teleport-plugin-event-handler
diff --git a/charts/event-handler/tests/__snapshot__/deployment_test.yaml.snap b/charts/event-handler/tests/__snapshot__/deployment_test.yaml.snap
index 235198118..4c639d469 100644
--- a/charts/event-handler/tests/__snapshot__/deployment_test.yaml.snap
+++ b/charts/event-handler/tests/__snapshot__/deployment_test.yaml.snap
@@ -7,8 +7,8 @@ should match the snapshot:
         app.kubernetes.io/instance: RELEASE-NAME
         app.kubernetes.io/managed-by: Helm
         app.kubernetes.io/name: teleport-plugin-event-handler
-        app.kubernetes.io/version: 14.0.3
-        helm.sh/chart: teleport-plugin-event-handler-14.0.3
+        app.kubernetes.io/version: 14.1.0
+        helm.sh/chart: teleport-plugin-event-handler-14.1.0
       name: RELEASE-NAME-teleport-plugin-event-handler
     spec:
       replicas: 1
diff --git a/event-handler/Makefile b/event-handler/Makefile
index 26f68fefd..c90c79ca5 100644
--- a/event-handler/Makefile
+++ b/event-handler/Makefile
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 GO_VERSION=1.21.3
 
 GITTAG=v$(VERSION)
diff --git a/go.mod b/go.mod
index 185004258..c2e3f3e2d 100644
--- a/go.mod
+++ b/go.mod
@@ -108,14 +108,13 @@ require (
 	github.com/vmihailenco/tagparser v0.1.2 // indirect
 	github.com/zclconf/go-cty v1.12.1 // indirect
 	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.42.0 // indirect
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.42.0 // indirect
-	go.opentelemetry.io/otel v1.16.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.16.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.16.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.16.0 // indirect
-	go.opentelemetry.io/otel/metric v1.16.0 // indirect
-	go.opentelemetry.io/otel/sdk v1.16.0 // indirect
-	go.opentelemetry.io/otel/trace v1.16.0 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.44.0 // indirect
+	go.opentelemetry.io/otel v1.19.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0 // indirect
+	go.opentelemetry.io/otel/metric v1.19.0 // indirect
+	go.opentelemetry.io/otel/sdk v1.19.0 // indirect
+	go.opentelemetry.io/otel/trace v1.19.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.0.0 // indirect
 	golang.org/x/crypto v0.14.0 // indirect
 	golang.org/x/sys v0.13.0 // indirect
@@ -134,8 +133,8 @@ require (
 
 replace (
 	github.com/gogo/protobuf => github.com/gravitational/protobuf v1.3.2-0.20201123192827-2b9fcfaffcbf
-	github.com/gravitational/teleport => github.com/gravitational/teleport v0.0.0-20231011153928-4d1c2ac05b42 // ref: tags/v14.0.3
-	github.com/gravitational/teleport/api => github.com/gravitational/teleport/api v0.0.0-20231011153928-4d1c2ac05b42 // ref: tags/v14.0.3
+	github.com/gravitational/teleport => github.com/gravitational/teleport v0.0.0-20231019024622-508ccc563261 // ref: tags/v14.1.0
+	github.com/gravitational/teleport/api => github.com/gravitational/teleport/api v0.0.0-20231019024622-508ccc563261 // ref: tags/v14.1.0
 	github.com/julienschmidt/httprouter => github.com/rw-access/httprouter v1.3.1-0.20210321233808-98e93175c124
 	github.com/microsoft/go-mssqldb => github.com/gravitational/go-mssqldb v0.11.1-0.20230331180905-0f76f1751cd3
 )
diff --git a/go.sum b/go.sum
index ae3ad157e..8d774d87e 100644
--- a/go.sum
+++ b/go.sum
@@ -272,10 +272,10 @@ github.com/gravitational/kingpin v2.1.11-0.20220901134012-2a1956e29525+incompati
 github.com/gravitational/kingpin v2.1.11-0.20220901134012-2a1956e29525+incompatible/go.mod h1:LWxG30M3FcrjhOn3T4zz7JmBoQJ45MWZmOXgy9Ganoc=
 github.com/gravitational/protobuf v1.3.2-0.20201123192827-2b9fcfaffcbf h1:MQ4e8XcxvZTeuOmRl7yE519vcWc2h/lyvYzsvt41cdY=
 github.com/gravitational/protobuf v1.3.2-0.20201123192827-2b9fcfaffcbf/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXPKa29o=
-github.com/gravitational/teleport v0.0.0-20231011153928-4d1c2ac05b42 h1:u4dOuepsgMjVbNxF34Q0IFnsLxKGYKyoQ0IOX4gEiLY=
-github.com/gravitational/teleport v0.0.0-20231011153928-4d1c2ac05b42/go.mod h1:BhWFJcdCDJiqgPuYuf9Z4ZqMY6X9IOqUoqT2eCk+CPw=
-github.com/gravitational/teleport/api v0.0.0-20231011153928-4d1c2ac05b42 h1:p7KoJLf5qqIWNiP+WcwYGpF0xTqjMAeR6OLo4k/ujpw=
-github.com/gravitational/teleport/api v0.0.0-20231011153928-4d1c2ac05b42/go.mod h1:NLjVINQH0CZOZr98OH9xoQEAPZ2tigK5Y478Qi/dKog=
+github.com/gravitational/teleport v0.0.0-20231019024622-508ccc563261 h1:qtwlYVh/I++NdkgOKgOaj5Qt9uXnBcj9MmCxeGY8bd4=
+github.com/gravitational/teleport v0.0.0-20231019024622-508ccc563261/go.mod h1:N99QPpceaf8pL0k/fhG4pvmtXD6QxDKmc6Ys+1U32dw=
+github.com/gravitational/teleport/api v0.0.0-20231019024622-508ccc563261 h1:pwFrQ6o2DpZhYnGJkmwlv5/UZXiQYXsnD+c95vYs/QA=
+github.com/gravitational/teleport/api v0.0.0-20231019024622-508ccc563261/go.mod h1:ukcgRDeYhOgA1flNUsg53QuRU3wtEKsT/XcS3TM8rYI=
 github.com/gravitational/trace v1.3.1 h1:jwZEuRtCYpLhUtqHo+JH+lu2qM0LB98UagqHtvdKuLI=
 github.com/gravitational/trace v1.3.1/go.mod h1:E61mn73aro7Zg9gZheZaeUsK6gjUMbCLazY76xuYAVA=
 github.com/grpc-ecosystem/go-grpc-middleware v1.0.0/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
@@ -606,22 +606,20 @@ go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=
 go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo=
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.42.0 h1:ZOLJc06r4CB42laIXg/7udr0pbZyuAihN10A/XuiQRY=
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.42.0/go.mod h1:5z+/ZWJQKXa9YT34fQNx5K8Hd1EoIhvtUygUQPqEOgQ=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.42.0 h1:pginetY7+onl4qN1vl0xW/V/v6OBZ0vVdH+esuJgvmM=
-go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.42.0/go.mod h1:XiYsayHc36K3EByOO6nbAXnAWbrUxdjUROCEeeROOH8=
-go.opentelemetry.io/otel v1.16.0 h1:Z7GVAX/UkAXPKsy94IU+i6thsQS4nb7LviLpnaNeW8s=
-go.opentelemetry.io/otel v1.16.0/go.mod h1:vl0h9NUa1D5s1nv3A5vZOYWn8av4K8Ml6JDeHrT/bx4=
-go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.16.0 h1:t4ZwRPU+emrcvM2e9DHd0Fsf0JTPVcbfa/BhTDF03d0=
-go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.16.0/go.mod h1:vLarbg68dH2Wa77g71zmKQqlQ8+8Rq3GRG31uc0WcWI=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.16.0 h1:cbsD4cUcviQGXdw8+bo5x2wazq10SKz8hEbtCRPcU78=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.16.0/go.mod h1:JgXSGah17croqhJfhByOLVY719k1emAXC8MVhCIJlRs=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.16.0 h1:TVQp/bboR4mhZSav+MdgXB8FaRho1RC8UwVn3T0vjVc=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.16.0/go.mod h1:I33vtIe0sR96wfrUcilIzLoA3mLHhRmz9S9Te0S3gDo=
-go.opentelemetry.io/otel/metric v1.16.0 h1:RbrpwVG1Hfv85LgnZ7+txXioPDoh6EdbZHo26Q3hqOo=
-go.opentelemetry.io/otel/metric v1.16.0/go.mod h1:QE47cpOmkwipPiefDwo2wDzwJrlfxxNYodqc4xnGCo4=
-go.opentelemetry.io/otel/sdk v1.16.0 h1:Z1Ok1YsijYL0CSJpHt4cS3wDDh7p572grzNrBMiMWgE=
-go.opentelemetry.io/otel/sdk v1.16.0/go.mod h1:tMsIuKXuuIWPBAOrH+eHtvhTL+SntFtXF9QD68aP6p4=
-go.opentelemetry.io/otel/trace v1.16.0 h1:8JRpaObFoW0pxuVPapkgH8UhHQj+bJW8jJsCZEu5MQs=
-go.opentelemetry.io/otel/trace v1.16.0/go.mod h1:Yt9vYq1SdNz3xdjZZK7wcXv1qv2pwLkqr2QVwea0ef0=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.44.0 h1:KfYpVmrjI7JuToy5k8XV3nkapjWx48k4E4JOtVstzQI=
+go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.44.0/go.mod h1:SeQhzAEccGVZVEy7aH87Nh0km+utSpo1pTv6eMMop48=
+go.opentelemetry.io/otel v1.19.0 h1:MuS/TNf4/j4IXsZuJegVzI1cwut7Qc00344rgH7p8bs=
+go.opentelemetry.io/otel v1.19.0/go.mod h1:i0QyjOq3UPoTzff0PJB2N66fb4S0+rSbSB15/oyH9fY=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0 h1:Mne5On7VWdx7omSrSSZvM4Kw7cS7NQkOOmLcgscI51U=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.19.0/go.mod h1:IPtUMKL4O3tH5y+iXVyAXqpAwMuzC1IrxVS81rummfE=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0 h1:3d+S281UTjM+AbF31XSOYn1qXn3BgIdWl8HNEpx08Jk=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.19.0/go.mod h1:0+KuTDyKL4gjKCF75pHOX4wuzYDUZYfAQdSu43o+Z2I=
+go.opentelemetry.io/otel/metric v1.19.0 h1:aTzpGtV0ar9wlV4Sna9sdJyII5jTVJEvKETPiOKwvpE=
+go.opentelemetry.io/otel/metric v1.19.0/go.mod h1:L5rUsV9kM1IxCj1MmSdS+JQAcVm319EUrDVLrt7jqt8=
+go.opentelemetry.io/otel/sdk v1.19.0 h1:6USY6zH+L8uMH8L3t1enZPR3WFEmSTADlqldyHtJi3o=
+go.opentelemetry.io/otel/sdk v1.19.0/go.mod h1:NedEbbS4w3C6zElbLdPJKOpJQOrGUJ+GfzpjUvI0v1A=
+go.opentelemetry.io/otel/trace v1.19.0 h1:DFVQmlVbfVeOuBRrwdtaehRrWiL1JoVs9CPIQ1Dzxpg=
+go.opentelemetry.io/otel/trace v1.19.0/go.mod h1:mfaSyvGyEJEI0nyV2I4qhNQnbBOUUmYZpYojqMnX2vo=
 go.opentelemetry.io/proto/otlp v0.7.0/go.mod h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI=
 go.opentelemetry.io/proto/otlp v1.0.0 h1:T0TX0tmXU8a3CbNXzEKGeU5mIVOdf0oykP+u2lIVU/I=
 go.opentelemetry.io/proto/otlp v1.0.0/go.mod h1:Sy6pihPLfYHkr3NkUbEhGHFhINUSI/v80hjKIs5JXpM=
diff --git a/terraform/install.mk b/terraform/install.mk
index fd060fcde..5ef9b67a8 100644
--- a/terraform/install.mk
+++ b/terraform/install.mk
@@ -1,4 +1,4 @@
-VERSION=14.0.3
+VERSION=14.1.0
 
 OS ?= $(shell go env GOOS)
 ARCH ?= $(shell go env GOARCH)
diff --git a/terraform/reference.mdx b/terraform/reference.mdx
index 1df009fd5..ab0bc3818 100755
--- a/terraform/reference.mdx
+++ b/terraform/reference.mdx
@@ -133,10 +133,19 @@ spec is the specification for the access list.
 
 audit describes the frequency that this access list must be audited.
 
-|      Name       |     Type     | Required |               Description               |
-|-----------------|--------------|----------|-----------------------------------------|
-| next_audit_date | RFC3339 time |          |                                         |
-| recurrence      | object       |          | recurrence is the recurrence definition |
+|      Name       |     Type     | Required |                       Description                       |
+|-----------------|--------------|----------|---------------------------------------------------------|
+| next_audit_date | RFC3339 time |          |                                                         |
+| notifications   | object       |          | notifications is the configuration for notifying users. |
+| recurrence      | object       |          | recurrence is the recurrence definition                 |
+
+##### spec.audit.notifications
+
+notifications is the configuration for notifying users.
+
+| Name  |   Type   | Required | Description |
+|-------|----------|----------|-------------|
+| start | duration |          |             |
 
 ##### spec.audit.recurrence
 
@@ -384,6 +393,7 @@ Spec is an AuthPreference specification
 | locking_mode            | string   |          | LockingMode is the cluster-wide locking mode default.                                                                                  |
 | message_of_the_day      | string   |          |                                                                                                                                        |
 | okta                    | object   |          | Okta is a set of options related to the Okta service in Teleport. Requires Teleport Enterprise.                                        |
+| piv_slot                | string   |          | PIVSlot is a PIV slot that Teleport clients should use instead of the default based on private key policy. For example, "9a" or "9e".  |
 | require_session_mfa     | number   |          | RequireMFAType is the type of MFA requirement enforced for this cluster: 0:Off, 1:Session, 2:SessionAndHardwareKey, 3:HardwareKeyTouch |
 | second_factor           | string   |          | SecondFactor is the type of second factor.                                                                                             |
 | type                    | string   |          | Type is the type of authentication.                                                                                                    |
diff --git a/terraform/tfschema/accesslist/v1/accesslist_terraform.go b/terraform/tfschema/accesslist/v1/accesslist_terraform.go
index 60456cd03..9a3e9bf40 100644
--- a/terraform/tfschema/accesslist/v1/accesslist_terraform.go
+++ b/terraform/tfschema/accesslist/v1/accesslist_terraform.go
@@ -34,6 +34,7 @@ import (
 	github_com_hashicorp_terraform_plugin_framework_tfsdk "github.com/hashicorp/terraform-plugin-framework/tfsdk"
 	github_com_hashicorp_terraform_plugin_framework_types "github.com/hashicorp/terraform-plugin-framework/types"
 	github_com_hashicorp_terraform_plugin_go_tftypes "github.com/hashicorp/terraform-plugin-go/tftypes"
+	_ "google.golang.org/protobuf/types/known/durationpb"
 	_ "google.golang.org/protobuf/types/known/timestamppb"
 )
 
@@ -113,6 +114,11 @@ func GenSchemaAccessList(ctx context.Context) (github_com_hashicorp_terraform_pl
 				"audit": {
 					Attributes: github_com_hashicorp_terraform_plugin_framework_tfsdk.SingleNestedAttributes(map[string]github_com_hashicorp_terraform_plugin_framework_tfsdk.Attribute{
 						"next_audit_date": GenSchemaTimestamp(ctx),
+						"notifications": {
+							Attributes:  github_com_hashicorp_terraform_plugin_framework_tfsdk.SingleNestedAttributes(map[string]github_com_hashicorp_terraform_plugin_framework_tfsdk.Attribute{"start": GenSchemaDuration(ctx)}),
+							Description: "notifications is the configuration for notifying users.",
+							Optional:    true,
+						},
 						"recurrence": {
 							Attributes: github_com_hashicorp_terraform_plugin_framework_tfsdk.SingleNestedAttributes(map[string]github_com_hashicorp_terraform_plugin_framework_tfsdk.Attribute{
 								"day_of_month": {
@@ -606,6 +612,31 @@ func CopyAccessListFromTerraform(_ context.Context, tf github_com_hashicorp_terr
 											}
 										}
 									}
+									{
+										a, ok := tf.Attrs["notifications"]
+										if !ok {
+											diags.Append(attrReadMissingDiag{"AccessList.spec.audit.notifications"})
+										} else {
+											v, ok := a.(github_com_hashicorp_terraform_plugin_framework_types.Object)
+											if !ok {
+												diags.Append(attrReadConversionFailureDiag{"AccessList.spec.audit.notifications", "github.com/hashicorp/terraform-plugin-framework/types.Object"})
+											} else {
+												obj.Notifications = nil
+												if !v.Null && !v.Unknown {
+													tf := v
+													obj.Notifications = &github_com_gravitational_teleport_api_gen_proto_go_teleport_accesslist_v1.Notifications{}
+													obj := obj.Notifications
+													{
+														a, ok := tf.Attrs["start"]
+														if !ok {
+															diags.Append(attrReadMissingDiag{"AccessList.spec.audit.notifications.start"})
+														}
+														CopyFromDuration(diags, a, &obj.Start)
+													}
+												}
+											}
+										}
+									}
 								}
 							}
 						}
@@ -1534,6 +1565,47 @@ func CopyAccessListToTerraform(ctx context.Context, obj *github_com_gravitationa
 											}
 										}
 									}
+									{
+										a, ok := tf.AttrTypes["notifications"]
+										if !ok {
+											diags.Append(attrWriteMissingDiag{"AccessList.spec.audit.notifications"})
+										} else {
+											o, ok := a.(github_com_hashicorp_terraform_plugin_framework_types.ObjectType)
+											if !ok {
+												diags.Append(attrWriteConversionFailureDiag{"AccessList.spec.audit.notifications", "github.com/hashicorp/terraform-plugin-framework/types.ObjectType"})
+											} else {
+												v, ok := tf.Attrs["notifications"].(github_com_hashicorp_terraform_plugin_framework_types.Object)
+												if !ok {
+													v = github_com_hashicorp_terraform_plugin_framework_types.Object{
+
+														AttrTypes: o.AttrTypes,
+														Attrs:     make(map[string]github_com_hashicorp_terraform_plugin_framework_attr.Value, len(o.AttrTypes)),
+													}
+												} else {
+													if v.Attrs == nil {
+														v.Attrs = make(map[string]github_com_hashicorp_terraform_plugin_framework_attr.Value, len(tf.AttrTypes))
+													}
+												}
+												if obj.Notifications == nil {
+													v.Null = true
+												} else {
+													obj := obj.Notifications
+													tf := &v
+													{
+														t, ok := tf.AttrTypes["start"]
+														if !ok {
+															diags.Append(attrWriteMissingDiag{"AccessList.spec.audit.notifications.start"})
+														} else {
+															v := CopyToDuration(diags, obj.Start, t, tf.Attrs["start"])
+															tf.Attrs["start"] = v
+														}
+													}
+												}
+												v.Unknown = false
+												tf.Attrs["notifications"] = v
+											}
+										}
+									}
 								}
 								v.Unknown = false
 								tf.Attrs["audit"] = v
diff --git a/terraform/tfschema/types_terraform.go b/terraform/tfschema/types_terraform.go
index 00fa44da6..4e34a186c 100644
--- a/terraform/tfschema/types_terraform.go
+++ b/terraform/tfschema/types_terraform.go
@@ -1375,6 +1375,11 @@ func GenSchemaAuthPreferenceV2(ctx context.Context) (github_com_hashicorp_terraf
 					Description: "Okta is a set of options related to the Okta service in Teleport. Requires Teleport Enterprise.",
 					Optional:    true,
 				},
+				"piv_slot": {
+					Description: "PIVSlot is a PIV slot that Teleport clients should use instead of the default based on private key policy. For example, \"9a\" or \"9e\".",
+					Optional:    true,
+					Type:        github_com_hashicorp_terraform_plugin_framework_types.StringType,
+				},
 				"require_session_mfa": {
 					Description: "RequireMFAType is the type of MFA requirement enforced for this cluster.",
 					Optional:    true,
@@ -14040,6 +14045,23 @@ func CopyAuthPreferenceV2FromTerraform(_ context.Context, tf github_com_hashicor
 							}
 						}
 					}
+					{
+						a, ok := tf.Attrs["piv_slot"]
+						if !ok {
+							diags.Append(attrReadMissingDiag{"AuthPreferenceV2.Spec.PIVSlot"})
+						} else {
+							v, ok := a.(github_com_hashicorp_terraform_plugin_framework_types.String)
+							if !ok {
+								diags.Append(attrReadConversionFailureDiag{"AuthPreferenceV2.Spec.PIVSlot", "github.com/hashicorp/terraform-plugin-framework/types.String"})
+							} else {
+								var t string
+								if !v.Null && !v.Unknown {
+									t = string(v.Value)
+								}
+								obj.PIVSlot = t
+							}
+						}
+					}
 				}
 			}
 		}
@@ -15084,6 +15106,28 @@ func CopyAuthPreferenceV2ToTerraform(ctx context.Context, obj *github_com_gravit
 							}
 						}
 					}
+					{
+						t, ok := tf.AttrTypes["piv_slot"]
+						if !ok {
+							diags.Append(attrWriteMissingDiag{"AuthPreferenceV2.Spec.PIVSlot"})
+						} else {
+							v, ok := tf.Attrs["piv_slot"].(github_com_hashicorp_terraform_plugin_framework_types.String)
+							if !ok {
+								i, err := t.ValueFromTerraform(ctx, github_com_hashicorp_terraform_plugin_go_tftypes.NewValue(t.TerraformType(ctx), nil))
+								if err != nil {
+									diags.Append(attrWriteGeneralError{"AuthPreferenceV2.Spec.PIVSlot", err})
+								}
+								v, ok = i.(github_com_hashicorp_terraform_plugin_framework_types.String)
+								if !ok {
+									diags.Append(attrWriteConversionFailureDiag{"AuthPreferenceV2.Spec.PIVSlot", "github.com/hashicorp/terraform-plugin-framework/types.String"})
+								}
+								v.Null = string(obj.PIVSlot) == ""
+							}
+							v.Value = string(obj.PIVSlot)
+							v.Unknown = false
+							tf.Attrs["piv_slot"] = v
+						}
+					}
 				}
 				v.Unknown = false
 				tf.Attrs["spec"] = v