From f57c5eb2b6f5c4d06d36e7d4791d81502f0ffbc6 Mon Sep 17 00:00:00 2001
From: fheinecke <23390735+fheinecke@users.noreply.github.com>
Date: Wed, 13 Mar 2024 14:48:01 -0500
Subject: [PATCH] Release 13.4.18 (#39300)
---
CHANGELOG.md | 16 +++++
Makefile | 2 +-
api/version.go | 2 +-
.../macos/tsh/tsh.app/Contents/Info.plist | 4 +-
.../macos/tshdev/tsh.app/Contents/Info.plist | 4 +-
e | 2 +-
examples/chart/teleport-cluster/Chart.yaml | 2 +-
.../charts/teleport-operator/Chart.yaml | 2 +-
.../auth_deployment_test.yaml.snap | 10 +--
.../proxy_deployment_test.yaml.snap | 18 +++---
examples/chart/teleport-kube-agent/Chart.yaml | 2 +-
.../__snapshot__/deployment_test.yaml.snap | 58 ++++++++---------
.../tests/__snapshot__/job_test.yaml.snap | 10 +--
.../__snapshot__/statefulset_test.yaml.snap | 64 +++++++++----------
.../updater_deployment_test.yaml.snap | 4 +-
integrations/kube-agent-updater/version.go | 2 +-
16 files changed, 109 insertions(+), 93 deletions(-)
diff --git a/CHANGELOG.md b/CHANGELOG.md
index ebdb9cdf3f171..7f8c8be34f35d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,21 @@
# Changelog
+## 13.4.18 (03/13/24)
+
+* Patched CVE-2024-27304 (Postgres driver). [#39263](https://github.com/gravitational/teleport/pull/39263)
+* Raised the concurrent connection limits between Teleport Cloud regions and in clusters that use proxy peering. [#39231](https://github.com/gravitational/teleport/pull/39231)
+* Improved the clean up of system resources during a fast shutdown of Teleport. [#39214](https://github.com/gravitational/teleport/pull/39214)
+* Fixed an issue where it was possible to skip providing old password when setting a new one. [#39125](https://github.com/gravitational/teleport/pull/39125)
+* Fixed a bug when using automatic updates and the discovery service. The default install script now installs the correct teleport version by querying the version server. [#39103](https://github.com/gravitational/teleport/pull/39103)
+* Fixed a regression where `tsh kube credentials` fails to re-login when credentials expire. [#39073](https://github.com/gravitational/teleport/pull/39073)
+* Expanded the EC2 joining process to include newly created AWS regions. [#39053](https://github.com/gravitational/teleport/pull/39053)
+* Added GCP MySQL access IAM Authentication support. [#39042](https://github.com/gravitational/teleport/pull/39042)
+* Updated Go to 1.21.8. [#38986](https://github.com/gravitational/teleport/pull/38986)
+* Updated electron-builder dependency to address possible arbitrary code execution in the Windows installer of Teleport Connect (CVE-2024-27303). [#38967](https://github.com/gravitational/teleport/pull/38967)
+* Fixed an issue with over counting of reported Teleport updater metrics. [#38833](https://github.com/gravitational/teleport/pull/38833)
+* Fixed a bug that caused `tsh` to return "private key policy not met" errors instead of automatically initiating re-login to satisfy the private key policy. [#38817](https://github.com/gravitational/teleport/pull/38817)
+* Fixed issue where DynamoDB writes could fail when recording too many records. [#38761](https://github.com/gravitational/teleport/pull/38761)
+
## 13.4.17
* tbot-distroless image is now published. This contains just the tbot binary and therefore has a smaller image size. [#38720](https://github.com/gravitational/teleport/pull/38720)
diff --git a/Makefile b/Makefile
index edee16695a994..8ce718c6d68dd 100644
--- a/Makefile
+++ b/Makefile
@@ -11,7 +11,7 @@
# Stable releases: "1.0.0"
# Pre-releases: "1.0.0-alpha.1", "1.0.0-beta.2", "1.0.0-rc.3"
# Master/dev branch: "1.0.0-dev"
-VERSION=13.4.17
+VERSION=13.4.18
DOCKER_IMAGE ?= teleport
diff --git a/api/version.go b/api/version.go
index ec703c275aa21..c9a6a32e60f0b 100644
--- a/api/version.go
+++ b/api/version.go
@@ -3,6 +3,6 @@ package api
import "github.com/coreos/go-semver/semver"
-const Version = "13.4.17"
+const Version = "13.4.18"
var SemVersion = semver.New(Version)
diff --git a/build.assets/macos/tsh/tsh.app/Contents/Info.plist b/build.assets/macos/tsh/tsh.app/Contents/Info.plist
index adc3c6d109db9..557a6e1a032c4 100644
--- a/build.assets/macos/tsh/tsh.app/Contents/Info.plist
+++ b/build.assets/macos/tsh/tsh.app/Contents/Info.plist
@@ -19,13 +19,13 @@
CFBundlePackageType
APPL
CFBundleShortVersionString
- 13.4.17
+ 13.4.18
CFBundleSupportedPlatforms
MacOSX
CFBundleVersion
- 13.4.17
+ 13.4.18
DTCompiler
com.apple.compilers.llvm.clang.1_0
DTPlatformBuild
diff --git a/build.assets/macos/tshdev/tsh.app/Contents/Info.plist b/build.assets/macos/tshdev/tsh.app/Contents/Info.plist
index 3a4a618314b98..07aaccc3121c2 100644
--- a/build.assets/macos/tshdev/tsh.app/Contents/Info.plist
+++ b/build.assets/macos/tshdev/tsh.app/Contents/Info.plist
@@ -17,13 +17,13 @@
CFBundlePackageType
APPL
CFBundleShortVersionString
- 13.4.17
+ 13.4.18
CFBundleSupportedPlatforms
MacOSX
CFBundleVersion
- 13.4.17
+ 13.4.18
DTCompiler
com.apple.compilers.llvm.clang.1_0
DTPlatformBuild
diff --git a/e b/e
index cdd42cb8bc002..277c4033a962c 160000
--- a/e
+++ b/e
@@ -1 +1 @@
-Subproject commit cdd42cb8bc002131c798bc08dfeffdf0451cf5d7
+Subproject commit 277c4033a962c70db66d8de84fabcec4a46160e4
diff --git a/examples/chart/teleport-cluster/Chart.yaml b/examples/chart/teleport-cluster/Chart.yaml
index 7e7975f014eee..cae105319cfa0 100644
--- a/examples/chart/teleport-cluster/Chart.yaml
+++ b/examples/chart/teleport-cluster/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "13.4.17"
+.version: &version "13.4.18"
name: teleport-cluster
apiVersion: v2
diff --git a/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml b/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml
index e0d0d59ec7d4d..cb55376cbf941 100644
--- a/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml
+++ b/examples/chart/teleport-cluster/charts/teleport-operator/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "13.4.17"
+.version: &version "13.4.18"
name: teleport-operator
apiVersion: v2
diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap
index 1e6a9146fc180..d57fdce4bedbc 100644
--- a/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap
+++ b/examples/chart/teleport-cluster/tests/__snapshot__/auth_deployment_test.yaml.snap
@@ -1,6 +1,6 @@
should add an operator side-car when operator is enabled:
1: |
- image: public.ecr.aws/gravitational/teleport-operator:13.4.17
+ image: public.ecr.aws/gravitational/teleport-operator:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
httpGet:
@@ -41,7 +41,7 @@ should add an operator side-car when operator is enabled:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -174,7 +174,7 @@ should set nodeSelector when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -271,7 +271,7 @@ should set resources when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -357,7 +357,7 @@ should set securityContext when set in values:
- args:
- --diag-addr=0.0.0.0:3000
- --apply-on-startup=/etc/teleport/apply-on-startup.yaml
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
diff --git a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap
index d0c2969d67004..d86bf75558495 100644
--- a/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap
+++ b/examples/chart/teleport-cluster/tests/__snapshot__/proxy_deployment_test.yaml.snap
@@ -5,7 +5,7 @@ should provision initContainer correctly when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v12.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
name: wait-auth-update
- args:
- echo test
@@ -62,7 +62,7 @@ should set nodeSelector when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -123,7 +123,7 @@ should set nodeSelector when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v12.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
name: wait-auth-update
nodeSelector:
environment: security
@@ -174,7 +174,7 @@ should set resources when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -242,7 +242,7 @@ should set resources when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v12.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
name: wait-auth-update
serviceAccountName: RELEASE-NAME-proxy
terminationGracePeriodSeconds: 60
@@ -275,7 +275,7 @@ should set securityContext for initContainers when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -343,7 +343,7 @@ should set securityContext for initContainers when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v12.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
name: wait-auth-update
securityContext:
allowPrivilegeEscalation: false
@@ -383,7 +383,7 @@ should set securityContext when set in values:
containers:
- args:
- --diag-addr=0.0.0.0:3000
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
lifecycle:
preStop:
@@ -451,7 +451,7 @@ should set securityContext when set in values:
- wait
- no-resolve
- RELEASE-NAME-auth-v12.NAMESPACE.svc.cluster.local
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
name: wait-auth-update
securityContext:
allowPrivilegeEscalation: false
diff --git a/examples/chart/teleport-kube-agent/Chart.yaml b/examples/chart/teleport-kube-agent/Chart.yaml
index 3e1e4be5c7e2a..950e656ea641e 100644
--- a/examples/chart/teleport-kube-agent/Chart.yaml
+++ b/examples/chart/teleport-kube-agent/Chart.yaml
@@ -1,4 +1,4 @@
-.version: &version "13.4.17"
+.version: &version "13.4.18"
name: teleport-kube-agent
apiVersion: v2
diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap
index df62ab1b30776..d62767d47eb0f 100644
--- a/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap
+++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/deployment_test.yaml.snap
@@ -30,7 +30,7 @@ sets Deployment annotations when specified if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -103,7 +103,7 @@ sets Deployment labels when specified if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -163,7 +163,7 @@ sets Pod annotations when specified if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -223,7 +223,7 @@ sets Pod labels when specified if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -300,7 +300,7 @@ should add emptyDir for data when existingDataVolume is not set if action is Upg
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -361,7 +361,7 @@ should add insecureSkipProxyTLSVerify to args when set in values if action is Up
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -421,7 +421,7 @@ should correctly configure existingDataVolume when set if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -479,7 +479,7 @@ should expose diag port if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -551,7 +551,7 @@ should have multiple replicas when replicaCount is set (using .replicaCount, dep
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -623,7 +623,7 @@ should have multiple replicas when replicaCount is set (using highAvailability.r
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -683,7 +683,7 @@ should have one replica when replicaCount is not set if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -743,7 +743,7 @@ should mount extraVolumes and extraVolumeMounts if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -810,7 +810,7 @@ should mount tls.existingCASecretName and set environment when set in values if
value: "true"
- name: SSL_CERT_FILE
value: /etc/teleport-tls-ca/ca.pem
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -880,7 +880,7 @@ should mount tls.existingCASecretName and set extra environment when set in valu
value: http://username:password@my.proxy.host:3128
- name: SSL_CERT_FILE
value: /etc/teleport-tls-ca/ca.pem
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -946,7 +946,7 @@ should provision initContainer correctly when set in values if action is Upgrade
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1042,7 +1042,7 @@ should set SecurityContext if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1122,7 +1122,7 @@ should set affinity when set in values if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1182,7 +1182,7 @@ should set default serviceAccountName when not set in values if action is Upgrad
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1255,7 +1255,7 @@ should set environment when extraEnv set in values if action is Upgrade:
value: "true"
- name: HTTPS_PROXY
value: http://username:password@my.proxy.host:3128
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1375,7 +1375,7 @@ should set imagePullPolicy when set in values if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: Always
livenessProbe:
failureThreshold: 6
@@ -1435,7 +1435,7 @@ should set nodeSelector if set in values if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1497,7 +1497,7 @@ should set not set priorityClassName when not set in values if action is Upgrade
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1569,7 +1569,7 @@ should set preferred affinity when more than one replica is used if action is Up
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1629,7 +1629,7 @@ should set priorityClassName when set in values if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1690,7 +1690,7 @@ should set probeTimeoutSeconds when set in values if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1760,7 +1760,7 @@ should set required affinity when highAvailability.requireAntiAffinity is set if
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1820,7 +1820,7 @@ should set resources when set in values if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1887,7 +1887,7 @@ should set serviceAccountName when set in values if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1947,7 +1947,7 @@ should set tolerations when set in values if action is Upgrade:
env:
- name: TELEPORT_INSTALL_METHOD_HELM_KUBE_AGENT
value: "true"
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap
index e449e786e104a..30859ab9e4840 100644
--- a/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap
+++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/job_test.yaml.snap
@@ -25,7 +25,7 @@ should create ServiceAccount for post-delete hook by default:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
@@ -104,7 +104,7 @@ should not create ServiceAccount for post-delete hook if serviceAccount.create i
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
@@ -132,7 +132,7 @@ should not create ServiceAccount, Role or RoleBinding for post-delete hook if se
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
@@ -160,7 +160,7 @@ should set nodeSelector in post-delete hook:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
@@ -190,7 +190,7 @@ should set securityContext in post-delete hook:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
name: post-delete-job
securityContext:
diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap
index 7ad13b445355b..73e6c8aa9bab6 100644
--- a/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap
+++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/statefulset_test.yaml.snap
@@ -16,7 +16,7 @@ sets Pod annotations when specified:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -84,7 +84,7 @@ sets Pod labels when specified:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -176,7 +176,7 @@ sets StatefulSet labels when specified:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -272,7 +272,7 @@ should add insecureSkipProxyTLSVerify to args when set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -340,7 +340,7 @@ should add volumeClaimTemplate for data volume when using StatefulSet and action
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -428,7 +428,7 @@ should add volumeClaimTemplate for data volume when using StatefulSet and is Fre
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -506,7 +506,7 @@ should add volumeMount for data volume when using StatefulSet:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -574,7 +574,7 @@ should expose diag port:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -642,7 +642,7 @@ should generate Statefulset when storage is disabled and mode is a Upgrade:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -724,7 +724,7 @@ should have multiple replicas when replicaCount is set (using .replicaCount, dep
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -804,7 +804,7 @@ should have multiple replicas when replicaCount is set (using highAvailability.r
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -872,7 +872,7 @@ should have one replica when replicaCount is not set:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -940,7 +940,7 @@ should install Statefulset when storage is disabled and mode is a Fresh Install:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1010,7 +1010,7 @@ should mount extraVolumes and extraVolumeMounts:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1085,7 +1085,7 @@ should mount tls.existingCASecretName and set environment when set in values:
value: RELEASE-NAME
- name: SSL_CERT_FILE
value: /etc/teleport-tls-ca/ca.pem
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1165,7 +1165,7 @@ should mount tls.existingCASecretName and set extra environment when set in valu
value: /etc/teleport-tls-ca/ca.pem
- name: HTTPS_PROXY
value: http://username:password@my.proxy.host:3128
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1241,7 +1241,7 @@ should not add emptyDir for data when using StatefulSet:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1309,7 +1309,7 @@ should provision initContainer correctly when set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1413,7 +1413,7 @@ should set SecurityContext:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1501,7 +1501,7 @@ should set affinity when set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1569,7 +1569,7 @@ should set default serviceAccountName when not set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1650,7 +1650,7 @@ should set environment when extraEnv set in values:
value: RELEASE-NAME
- name: HTTPS_PROXY
value: http://username:password@my.proxy.host:3128
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1786,7 +1786,7 @@ should set imagePullPolicy when set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: Always
livenessProbe:
failureThreshold: 6
@@ -1854,7 +1854,7 @@ should set nodeSelector if set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -1936,7 +1936,7 @@ should set preferred affinity when more than one replica is used:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2004,7 +2004,7 @@ should set probeTimeoutSeconds when set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2082,7 +2082,7 @@ should set required affinity when highAvailability.requireAntiAffinity is set:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2150,7 +2150,7 @@ should set resources when set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2225,7 +2225,7 @@ should set serviceAccountName when set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2293,7 +2293,7 @@ should set storage.requests when set in values and action is an Upgrade:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2361,7 +2361,7 @@ should set storage.storageClassName when set in values and action is an Upgrade:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -2429,7 +2429,7 @@ should set tolerations when set in values:
fieldPath: metadata.namespace
- name: RELEASE_NAME
value: RELEASE-NAME
- image: public.ecr.aws/gravitational/teleport-distroless:13.4.17
+ image: public.ecr.aws/gravitational/teleport-distroless:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
diff --git a/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap b/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap
index bdab689e29ed1..0146884d73898 100644
--- a/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap
+++ b/examples/chart/teleport-kube-agent/tests/__snapshot__/updater_deployment_test.yaml.snap
@@ -27,7 +27,7 @@ sets the affinity:
- --base-image=public.ecr.aws/gravitational/teleport-distroless
- --version-server=https://my-custom-version-server/v1
- --version-channel=custom/preview
- image: public.ecr.aws/gravitational/teleport-kube-agent-updater:13.4.17
+ image: public.ecr.aws/gravitational/teleport-kube-agent-updater:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
@@ -71,7 +71,7 @@ sets the tolerations:
- --base-image=public.ecr.aws/gravitational/teleport-distroless
- --version-server=https://my-custom-version-server/v1
- --version-channel=custom/preview
- image: public.ecr.aws/gravitational/teleport-kube-agent-updater:13.4.17
+ image: public.ecr.aws/gravitational/teleport-kube-agent-updater:13.4.18
imagePullPolicy: IfNotPresent
livenessProbe:
failureThreshold: 6
diff --git a/integrations/kube-agent-updater/version.go b/integrations/kube-agent-updater/version.go
index eb75e306a1374..06bfdd2c33b91 100644
--- a/integrations/kube-agent-updater/version.go
+++ b/integrations/kube-agent-updater/version.go
@@ -1,4 +1,4 @@
// Code generated by "make version". DO NOT EDIT.
package kubeversionupdater
-const Version = "13.4.17"
+const Version = "13.4.18"