Accepting request 1226552 from devel:kubic
OBS-URL: https://build.opensuse.org/request/show/1226552 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/teleport?expand=0&rev=122
This commit is contained in:
commit
83dbf903cc
2
_service
2
_service
@ -4,7 +4,7 @@
|
|||||||
<param name="scm">git</param>
|
<param name="scm">git</param>
|
||||||
<param name="submodules">disable</param>
|
<param name="submodules">disable</param>
|
||||||
<param name="exclude">.git</param>
|
<param name="exclude">.git</param>
|
||||||
<param name="revision">v16.4.7</param>
|
<param name="revision">v17.0.2</param>
|
||||||
<param name="match-tag">v*</param>
|
<param name="match-tag">v*</param>
|
||||||
<param name="versionformat">@PARENT_TAG@</param>
|
<param name="versionformat">@PARENT_TAG@</param>
|
||||||
<param name="versionrewrite-pattern">v(.*)</param>
|
<param name="versionrewrite-pattern">v(.*)</param>
|
||||||
|
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:611284ef1cfaf5f8184f3585fb94b8022e2f95600fc3b06e7a81e1bf08c55b43
|
|
||||||
size 279968782
|
|
3
teleport-17.0.2.obscpio
Normal file
3
teleport-17.0.2.obscpio
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:e4923d80673f4fc50ccb24143990816085502230ff233ab5550f16bd83807b51
|
||||||
|
size 268694030
|
130
teleport.changes
130
teleport.changes
@ -1,3 +1,133 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Nov 26 13:53:42 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
|
||||||
|
|
||||||
|
- update to 17.0.2:
|
||||||
|
* Fixed missing user participants in session recordings listing
|
||||||
|
for non-interactive Kubernetes recordings. #49343
|
||||||
|
* Support delegated joining for Bitbucket Pipelines in Machine
|
||||||
|
ID. #49335
|
||||||
|
* Fix a bug in the Teleport Operator chart that causes the
|
||||||
|
operator to not be able to watch secrets during secret
|
||||||
|
injection. #49327
|
||||||
|
* You can now search text within SSH sessions in the Web UI and
|
||||||
|
Teleport Connect. #49269
|
||||||
|
* Teleport Connect now refreshes the resources view after
|
||||||
|
dropping an access request. #49264
|
||||||
|
* Fixed an issue where teleport park processes could be leaked
|
||||||
|
causing runaway resource usage. #49260
|
||||||
|
* Fixed VNet not being able to connect to the daemon. #49199
|
||||||
|
* The tsh puttyconfig command now disables GSSAPI auth settings
|
||||||
|
to avoid a "Not Responding" condition in PuTTY. #49189
|
||||||
|
* Allow Azure VMs to join from a different subscription than
|
||||||
|
their managed identity. #49156
|
||||||
|
* Fix an issue loading the license file when Teleport is started
|
||||||
|
without a configuration file. #49150
|
||||||
|
* Added support for directly configuring JWKS for GitHub joining
|
||||||
|
for circumstances where the GHES is not reachable by the
|
||||||
|
Teleport Auth Service. #49049
|
||||||
|
* Fixed a bug where Access Lists imported from Microsoft Entra ID
|
||||||
|
fail to be created if their display names include special
|
||||||
|
characters. #5551
|
||||||
|
|
||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Nov 20 09:50:15 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
|
||||||
|
|
||||||
|
- update to 17.0.1 (17.0.0 was not released):
|
||||||
|
* Teleport 17 brings the following new features and improvements:
|
||||||
|
- Refreshed web UI
|
||||||
|
- Modern signature algorithms
|
||||||
|
- (Preview) AWS IAM Identity Center integration
|
||||||
|
- Hardware key support for Teleport Connect
|
||||||
|
- Nested access lists
|
||||||
|
- Access lists UI/UX improvements
|
||||||
|
- Signed and notarized macOS assets
|
||||||
|
- Datadog Incident Management plugin for access requests
|
||||||
|
- Hosted Microsoft Teams plugin for access requests
|
||||||
|
- Dynamic registration for Windows desktops
|
||||||
|
- Support for images in web SSH sessions
|
||||||
|
- tbot CLI updates
|
||||||
|
* Refreshed Web UI
|
||||||
|
We have updated and improved designs and added a new navigation
|
||||||
|
menu to Teleport 17’s web UI to enhance its usability and
|
||||||
|
scalability.
|
||||||
|
* Modern signature algorithms
|
||||||
|
Teleport 17 admins have the option to use elliptic curve
|
||||||
|
cryptography for the majority of user, host, and certificate
|
||||||
|
authority key material. This includes Ed25519 SSH keys and
|
||||||
|
ECDSA TLS keys, replacing the RSA keys used today. New
|
||||||
|
clusters will leverage modern signature algorithms by default.
|
||||||
|
Existing Teleport clusters will continue to use RSA2048 until a
|
||||||
|
CA rotation is performed.
|
||||||
|
* (Preview) AWS IAM Identity Center integration
|
||||||
|
Teleport 17 integrates with AWS IAM Identity Center to allow
|
||||||
|
users to sync and manage AWS IC group members via Access Lists.
|
||||||
|
See documentation guide.
|
||||||
|
* Hardware key support for Teleport Connect
|
||||||
|
We have extended Teleport 17’s support for hardware-backed
|
||||||
|
private keys to Teleport Connect.
|
||||||
|
* Nested access lists
|
||||||
|
Teleport 17 admins and access list owners can add access lists
|
||||||
|
as members in other access lists. See details in the
|
||||||
|
documentation.
|
||||||
|
* Access lists UI/UX improvements
|
||||||
|
Teleport 17 web UI has an updated access lists page that will
|
||||||
|
include the new table view, improved search and filtering
|
||||||
|
capabilities.
|
||||||
|
* Datadog Incident Management plugin for access requests
|
||||||
|
Teleport 17 supports PagerDuty-like integration with Datadog's
|
||||||
|
on-call and incident management APIs for access request
|
||||||
|
notifications. See the configuration guide.
|
||||||
|
* Hosted Microsoft Teams plugin for access requests
|
||||||
|
Teleport 17 adds support for Microsoft Teams integration for
|
||||||
|
access request notifications using Teleport web UI without
|
||||||
|
needing to self-host the plugin.
|
||||||
|
* Dynamic registration for Windows desktops
|
||||||
|
Dynamic registration allows Teleport administrators to register
|
||||||
|
new Windows desktops without having to update the static
|
||||||
|
configuration files read by Teleport Windows Desktop Service
|
||||||
|
instances.
|
||||||
|
* Support for images in web SSH sessions
|
||||||
|
The SSH console in Teleport’s web UI includes support for
|
||||||
|
rendering images via both the SIXEL and iTerm Inline Image
|
||||||
|
Protocol (IIP).
|
||||||
|
* tbot CLI updates
|
||||||
|
The tbot client now supports starting most outputs and services
|
||||||
|
directly from the command line with no need for a configuration
|
||||||
|
file using the new tbot start <mode> family of commands. If
|
||||||
|
desired, a given command can be converted to a YAML
|
||||||
|
configuration file with tbot configure <mode>. Additionally,
|
||||||
|
tctl now supports inspection and management of bot instances
|
||||||
|
using the tctl bots instances family of commands. This allows
|
||||||
|
onboarding of new instances for existing bots with tctl bots
|
||||||
|
instances add, and inspection of existing instances with tctl
|
||||||
|
bots instances list.
|
||||||
|
* Breaking changes and deprecations
|
||||||
|
- Enforced stricter requirements for SSH hostnames
|
||||||
|
Hostnames are only allowed if they are less than 257
|
||||||
|
characters and consist of only alphanumeric characters and
|
||||||
|
the symbols . and -. Any hostname that violates the new
|
||||||
|
restrictions will be changed, the original hostname will be
|
||||||
|
moved to the teleport.internal/invalid-hostname label for
|
||||||
|
discoverability. Any Teleport agents with an invalid
|
||||||
|
hostname will be replaced with the host UUID. Any Agentless
|
||||||
|
OpenSSH Servers with an invalid hostname will be replaced
|
||||||
|
with the host of the address, if it is valid, or a randomly
|
||||||
|
generated identifier. Any hosts with invalid hostnames
|
||||||
|
should be updated to comply with the new requirements to
|
||||||
|
avoid Teleport renaming them.
|
||||||
|
- TELEPORT_ALLOW_NO_SECOND_FACTOR removed
|
||||||
|
As of Teleport 16, multi-factor authentication is required
|
||||||
|
for local users. To assist with upgrades, Teleport 16
|
||||||
|
included a temporary opt-out mechanism via the
|
||||||
|
TELEPORT_ALLOW_NO_SECOND_FACTOR environment variable. This
|
||||||
|
opt-out mechanism has been removed.
|
||||||
|
- TOTP for per-session MFA
|
||||||
|
Teleport 17 is the last release where tsh will allow for
|
||||||
|
using TOTP with per-session MFA. Starting with Teleport 18,
|
||||||
|
tsh will require a strong webauthn credential for per-session
|
||||||
|
MFA. TOTP will continue to be accepted for the initial
|
||||||
|
login.
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Fri Nov 15 08:43:06 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
|
Fri Nov 15 08:43:06 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
|
||||||
|
|
||||||
|
@ -1,4 +1,4 @@
|
|||||||
name: teleport
|
name: teleport
|
||||||
version: 16.4.7
|
version: 17.0.2
|
||||||
mtime: 1731375738
|
mtime: 1732556604
|
||||||
commit: 15dfef10fe2175e458e54e81e94dcae0b5f59757
|
commit: a5c84e4b74f1da43a44bd6c18ae184f612fb26f6
|
||||||
|
@ -17,7 +17,7 @@
|
|||||||
|
|
||||||
|
|
||||||
Name: teleport
|
Name: teleport
|
||||||
Version: 16.4.7
|
Version: 17.0.2
|
||||||
Release: 0
|
Release: 0
|
||||||
Summary: Identity-aware, multi-protocol access proxy
|
Summary: Identity-aware, multi-protocol access proxy
|
||||||
License: AGPL-3.0-only
|
License: AGPL-3.0-only
|
||||||
@ -35,7 +35,7 @@ BuildRequires: bash-completion
|
|||||||
BuildRequires: cargo >= 1.69
|
BuildRequires: cargo >= 1.69
|
||||||
BuildRequires: cargo-packaging
|
BuildRequires: cargo-packaging
|
||||||
BuildRequires: git-core
|
BuildRequires: git-core
|
||||||
BuildRequires: go1.22 >= 1.22.9
|
BuildRequires: go >= 1.23
|
||||||
BuildRequires: pam-devel
|
BuildRequires: pam-devel
|
||||||
BuildRequires: systemd-rpm-macros
|
BuildRequires: systemd-rpm-macros
|
||||||
BuildRequires: zsh
|
BuildRequires: zsh
|
||||||
|
@ -1,3 +1,3 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
version https://git-lfs.github.com/spec/v1
|
||||||
oid sha256:c77a1db3984a74b6c2a7f4c7e6fa3f9f475e1ad49bc8d1123d2d149e5e63939d
|
oid sha256:22a1ddd2520ebfe453dbefc4becf924fe3517691113fcbac3cb7c2ab9235bf8c
|
||||||
size 46781164
|
size 52242184
|
||||||
|
@ -1,3 +1,3 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
version https://git-lfs.github.com/spec/v1
|
||||||
oid sha256:76257b2718534c1704e89d1f423d6c384c810517a913abbc26d3a98fbcec5c5b
|
oid sha256:2ed8ddc8901673530dcde15ea516f9b78b132e7de63a07c8216e75dbabe1b6a3
|
||||||
size 728970
|
size 730021
|
||||||
|
Loading…
Reference in New Issue
Block a user