Merge branch 'branch/v17' into bot/backport-49753-branch/v17

gravitational · Jan 8, 2025 · 422bf61 · 422bf61
2 parents 53ee98a + 6d2f64b
commit 422bf61
Show file tree

Hide file tree

Showing 117 changed files with 1,584 additions and 1,284 deletions.
diff --git a/api/proto/teleport/legacy/types/events/events.proto b/api/proto/teleport/legacy/types/events/events.proto
@@ -3123,6 +3123,12 @@ message DatabaseSessionStart {
   // connection. This can be useful for backend process cancellation or
   // termination and it is not a sensitive or secret value.
   uint32 PostgresPID = 8 [(gogoproto.jsontag) = "postgres_pid,omitempty"];
+  // Client is the common client event metadata.
+  ClientMetadata Client = 9 [
+    (gogoproto.nullable) = false,
+    (gogoproto.embed) = true,
+    (gogoproto.jsontag) = ""
+  ];
 }
 
 // DatabaseSessionQuery is emitted when a user executes a database query.

diff --git a/api/types/events/events.pb.go b/api/types/events/events.pb.go
diff --git a/docs/config.json b/docs/config.json
@@ -185,18 +185,18 @@
     "teleport": {
       "git": "api/14.0.0-gd1e081e",
       "major_version": "17",
-      "version": "17.1.2",
+      "version": "17.1.4",
       "url": "teleport.example.com",
       "golang": "1.23.4",
       "plugin": {
-        "version": "17.1.2"
+        "version": "17.1.4"
       },
       "helm_repo_url": "https://charts.releases.teleport.dev",
-      "latest_oss_docker_image": "public.ecr.aws/gravitational/teleport-distroless:17.1.2",
-      "latest_oss_debug_docker_image": "public.ecr.aws/gravitational/teleport-distroless-debug:17.1.2",
-      "latest_ent_docker_image": "public.ecr.aws/gravitational/teleport-ent-distroless:17.1.2",
-      "latest_ent_debug_docker_image": "public.ecr.aws/gravitational/teleport-ent-distroless-debug:17.1.2",
-      "teleport_install_script_url": "https://cdn.teleport.dev/install-v17.1.2.sh"
+      "latest_oss_docker_image": "public.ecr.aws/gravitational/teleport-distroless:17.1.4",
+      "latest_oss_debug_docker_image": "public.ecr.aws/gravitational/teleport-distroless-debug:17.1.4",
+      "latest_ent_docker_image": "public.ecr.aws/gravitational/teleport-ent-distroless:17.1.4",
+      "latest_ent_debug_docker_image": "public.ecr.aws/gravitational/teleport-ent-distroless-debug:17.1.4",
+      "teleport_install_script_url": "https://cdn.teleport.dev/install-v17.1.4.sh"
     },
     "terraform": {
       "version": "1.0.0"

diff --git a/docs/img/access-controls/access-lists/create-new-access-list.png b/docs/img/access-controls/access-lists/create-new-access-list.png
diff --git a/docs/img/access-controls/device-trust/hosted-jamf.png b/docs/img/access-controls/device-trust/hosted-jamf.png
diff --git a/docs/img/access-controls/device-trust/select-jamf.png b/docs/img/access-controls/device-trust/select-jamf.png
diff --git a/docs/img/access-controls/dual-authz/approve-new-request.png b/docs/img/access-controls/dual-authz/approve-new-request.png
diff --git a/docs/img/access-controls/dual-authz/new-role-request-pending.png b/docs/img/access-controls/dual-authz/new-role-request-pending.png
diff --git a/docs/img/access-controls/dual-authz/pending-access-request.png b/docs/img/access-controls/dual-authz/pending-access-request.png
diff --git a/docs/img/access-controls/dual-authz/request-success.png b/docs/img/access-controls/dual-authz/request-success.png
diff --git a/docs/img/access-controls/dual-authz/role-new-request.png b/docs/img/access-controls/dual-authz/role-new-request.png
diff --git a/docs/img/access-controls/dual-authz/teleport-4-bob-request.png b/docs/img/access-controls/dual-authz/teleport-4-bob-request.png
diff --git a/docs/img/access-controls/dual-authz/teleport-6-ivan-approve.png b/docs/img/access-controls/dual-authz/teleport-6-ivan-approve.png
diff --git a/docs/img/access-controls/dual-authz/teleport-7-bob-assume.png b/docs/img/access-controls/dual-authz/teleport-7-bob-assume.png
diff --git a/docs/img/access-graph/main-view.png b/docs/img/access-graph/main-view.png
diff --git a/docs/img/access-monitoring/privileged_access_report.png b/docs/img/access-monitoring/privileged_access_report.png
diff --git a/docs/img/access-requests/approved-request.png b/docs/img/access-requests/approved-request.png
diff --git a/docs/img/access-requests/new-role-request.png b/docs/img/access-requests/new-role-request.png
diff --git a/docs/img/access-requests/role-assumed.png b/docs/img/access-requests/role-assumed.png
diff --git a/docs/img/access-requests/submit-request.png b/docs/img/access-requests/submit-request.png
diff --git a/docs/img/add-resources.png b/docs/img/add-resources.png
diff --git a/docs/img/architecture/agent-architecture.png b/docs/img/architecture/agent-architecture.png
diff --git a/docs/img/architecture/k8s-tunnel.png b/docs/img/architecture/k8s-tunnel.png
diff --git a/docs/img/architecture/[email protected] b/docs/img/architecture/[email protected]
diff --git a/docs/img/architecture/[email protected] b/docs/img/architecture/[email protected]
diff --git a/docs/img/architecture/[email protected] b/docs/img/architecture/[email protected]
diff --git a/docs/img/architecture/[email protected] b/docs/img/architecture/[email protected]
diff --git a/docs/img/architecture/[email protected] b/docs/img/architecture/[email protected]
diff --git a/docs/img/architecture/[email protected] b/docs/img/architecture/[email protected]
diff --git a/docs/img/architecture/tls-routing-alb.png b/docs/img/architecture/tls-routing-alb.png
diff --git a/docs/img/architecture/tls-routing-alb.svg b/docs/img/architecture/tls-routing-alb.svg
diff --git a/docs/img/architecture/tls-routing-connection-upgrade.png b/docs/img/architecture/tls-routing-connection-upgrade.png
diff --git a/docs/img/architecture/tls-routing-connection-upgrade.svg b/docs/img/architecture/tls-routing-connection-upgrade.svg
diff --git a/docs/img/desktop-access/passwordless-desktop.png b/docs/img/desktop-access/passwordless-desktop.png
diff --git a/docs/img/desktop-access/select-desktop.png b/docs/img/desktop-access/select-desktop.png
diff --git a/docs/img/desktop-access/[email protected] b/docs/img/desktop-access/[email protected]
diff --git a/docs/img/doc-submodules.png b/docs/img/doc-submodules.png
diff --git a/docs/img/enterprise/license-expired.png b/docs/img/enterprise/license-expired.png
diff --git a/docs/img/enterprise/license-warning.png b/docs/img/enterprise/license-warning.png
diff --git a/docs/img/enterprise/license.png b/docs/img/enterprise/license.png
diff --git a/docs/img/externalauditstorage/integration.png b/docs/img/externalauditstorage/integration.png
diff --git a/docs/img/ha-diagram.png b/docs/img/ha-diagram.png
diff --git a/docs/img/k8s/architecture-diagram.png b/docs/img/k8s/architecture-diagram.png
diff --git a/docs/img/k8s/auth.png b/docs/img/k8s/auth.png
diff --git a/docs/img/k8s/auth.svg b/docs/img/k8s/auth.svg
diff --git a/docs/img/k8s/mini-diagrams/k8s-to-teleport-mono.png b/docs/img/k8s/mini-diagrams/k8s-to-teleport-mono.png
diff --git a/docs/img/k8s/mini-diagrams/k8s-to-teleport-mono.svg b/docs/img/k8s/mini-diagrams/k8s-to-teleport-mono.svg
diff --git a/docs/img/k8s/mini-diagrams/teleport-in-k8s-mono.png b/docs/img/k8s/mini-diagrams/teleport-in-k8s-mono.png
diff --git a/docs/img/k8s/mini-diagrams/teleport-in-k8s-mono.svg b/docs/img/k8s/mini-diagrams/teleport-in-k8s-mono.svg
diff --git a/docs/img/linux-server-diagram.png b/docs/img/linux-server-diagram.png
diff --git a/docs/img/login-success.png b/docs/img/login-success.png
diff --git a/docs/img/management/access-list-web-ui.png b/docs/img/management/access-list-web-ui.png
diff --git a/docs/img/management/check-users-web-ui.png b/docs/img/management/check-users-web-ui.png
diff --git a/docs/img/management/datadog-diagram.png b/docs/img/management/datadog-diagram.png
diff --git a/docs/img/management/fluentd-diagram.png b/docs/img/management/fluentd-diagram.png
diff --git a/docs/img/management/panther-ingest.png b/docs/img/management/panther-ingest.png
diff --git a/docs/img/openssh-proxy.svg b/docs/img/openssh-proxy.svg
diff --git a/docs/img/quickstart/welcome.png b/docs/img/quickstart/welcome.png
diff --git a/docs/img/request-access.png b/docs/img/request-access.png
diff --git a/docs/img/review-request.png b/docs/img/review-request.png
diff --git a/docs/img/server-access/architecture.png b/docs/img/server-access/architecture.png
diff --git a/docs/img/server-access/getting-started-diagram.png b/docs/img/server-access/getting-started-diagram.png
diff --git a/docs/img/server-access/getting-started-diagram.svg b/docs/img/server-access/getting-started-diagram.svg
diff --git a/docs/img/server-access/openssh-proxy.png b/docs/img/server-access/openssh-proxy.png
diff --git a/docs/img/server-access/openssh-proxy.svg b/docs/img/server-access/openssh-proxy.svg
diff --git a/docs/img/server-access/teleport_ui.png b/docs/img/server-access/teleport_ui.png
diff --git a/docs/img/spacelift.png b/docs/img/spacelift.png
diff --git a/docs/img/team-diagram.png b/docs/img/team-diagram.png
diff --git a/docs/img/teleport-k8s-pod.png b/docs/img/teleport-k8s-pod.png
diff --git a/docs/img/teleport-kubernetes-outside.png b/docs/img/teleport-kubernetes-outside.png
diff --git a/docs/img/teleport-kubernetes-outside.svg b/docs/img/teleport-kubernetes-outside.svg
diff --git a/docs/img/trusted-clusters/simplified-trusted-cluster-role-mapping.png b/docs/img/trusted-clusters/simplified-trusted-cluster-role-mapping.png
diff --git a/docs/img/trusted-clusters/simplified-trusted-cluster.png b/docs/img/trusted-clusters/simplified-trusted-cluster.png
diff --git a/docs/img/trusted-clusters/trusted-cluster-service-interaction.png b/docs/img/trusted-clusters/trusted-cluster-service-interaction.png
diff --git a/docs/img/trusted-clusters/[email protected] b/docs/img/trusted-clusters/[email protected]
diff --git a/docs/img/trusted-clusters/[email protected] b/docs/img/trusted-clusters/[email protected]
diff --git a/docs/img/use-teleport/kubernetes-login.png b/docs/img/use-teleport/kubernetes-login.png
diff --git a/docs/img/webui_billing_cycle.png b/docs/img/webui_billing_cycle.png
diff --git a/docs/img/windows-desktop-admins.yaml b/docs/img/windows-desktop-admins.yaml
@@ -0,0 +1,10 @@
+kind: role
+version: v6
+metadata:
+  name: windows-desktop-admins
+spec:
+  allow:
+    windows_desktop_labels:
+      "*": "*"
+    windows_desktop_logins: ["Administrator", “bob”, “[email protected]”]
+
diff --git a/docs/img/workload-identity/intro-diagram.png b/docs/img/workload-identity/intro-diagram.png