Accepting request 1228156 from devel:kubic

OBS-URL: https://build.opensuse.org/request/show/1228156
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/teleport?expand=0&rev=123

_service

@@ -4,7 +4,7 @@
     <param name="scm">git</param>
     <param name="submodules">disable</param>
     <param name="exclude">.git</param>
-    <param name="revision">v17.0.2</param>
+    <param name="revision">v17.0.3</param>
     <param name="match-tag">v*</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>

teleport-17.0.2.obscpio

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e4923d80673f4fc50ccb24143990816085502230ff233ab5550f16bd83807b51
-size 268694030

teleport-17.0.3.obscpio

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:9370d2052ee5605841ff9c20d7b1ecea33b1b86b971d599bdaf09a064ed18d08
+size 268925966

teleport.changes

@@ -1,3 +1,40 @@
+-------------------------------------------------------------------
+Wed Dec  4 06:05:05 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
+
+- update to 17.0.3:
+  * Restore ability to disable multi-factor authentication for
+    local users. #49692
+  * Bumping one of our dependencies to a more secure version to
+    address CVE-2024-53259. #49662
+  * Add ability to configure resource labels in teleport-cluster's
+    operator sub-chart. #49647
+  * Fixed proxy peering listener not using the exact address
+    specified in peer_listen_addr. #49589
+  * Teleport Connect now shows whether it is being used on a
+    trusted device or if enrollment is required for full access.
+    #49577
+  * Kubernetes in-cluster joining now also accepts tokens whose
+    audience is the Teleport cluster name (before it only allowed
+    the default Kubernetes audience). Kubernetes JWKS joining is
+    unchanged and still requires tokens with the cluster name in
+    the audience. #49556
+  * Session recording playback in the web UI is now searchable.
+    #49506
+  * Fixed an incorrect warning indicating that tsh v17.0.2 was
+    incompatible with cluster v17.0.1, despite full compatibility.
+    #49491
+  * Increase CockroachDB setup timeout from 5 to 30 seconds. This
+    mitigates the Auth Service not being able to configure TTL on
+    slow CockroachDB event backends. #49469
+  * Fixed a potential panic in login rule and SAML IdP expression
+    parser. #49429
+  * Support for long-running kube exec/port-forward, respect
+    client_idle_timeout config. #49421
+  * Fixed a permissions error with Postgres database user
+    auto-provisioning that occurs when the database admin is not a
+    superuser and the database is upgraded to Postgres v16 or
+    higher. #49390
+
 -------------------------------------------------------------------
 Tue Nov 26 13:53:42 UTC 2024 - Johannes Kastl <opensuse_buildservice@ojkastl.de>
 

teleport.obsinfo

@@ -1,4 +1,4 @@
 name: teleport
-version: 17.0.2
-mtime: 1732556604
-commit: a5c84e4b74f1da43a44bd6c18ae184f612fb26f6
+version: 17.0.3
+mtime: 1733259895
+commit: 1bcff22e55a87bed13cd0d88d33ed39f69222b9d

teleport.spec

@@ -17,7 +17,7 @@
 
 
 Name:           teleport
-Version:        17.0.2
+Version:        17.0.3
 Release:        0
 Summary:        Identity-aware, multi-protocol access proxy
 License:        AGPL-3.0-only

vendor.tar.gz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:22a1ddd2520ebfe453dbefc4becf924fe3517691113fcbac3cb7c2ab9235bf8c
-size 52242184
+oid sha256:22001dacf3856a9dd5b2ddfe0aa41d0047ea019b522ed41e9dcf64af3628ae5c
+size 52266711

vendor.tar.zst

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:2ed8ddc8901673530dcde15ea516f9b78b132e7de63a07c8216e75dbabe1b6a3
-size 730021
+oid sha256:d21b721976efca4fa5c72e7cab58d2b381df9035e4413097e003051b0ca85890
+size 728057