v14.4.0
gravitational/teleportv14.4.0May 23, 2025by doggydogworld
AI Summary
This is an exceptional release for the discontinued Teleport 14 to backport Managed Updates v2, introducing a new automatic update mechanism. The release adds a new `teleport-update` binary that allows administrators to control agent update schedules and versions via `autoupdate_config` and `autoupdate_version` resources, and changes package binary locations from `/usr/local/bin` to `/opt/teleport`.
Key Highlights
- New automatic update mechanism via `teleport-update` binary for package manager-agnostic agent updates
- Package layout change: binaries moved to `/opt/teleport` (symlinked to previous location)
- Client tools (tctl, tsh) auto-updates controlled by cluster configuration
- Updates are opt-in - existing agents won't be automatically enrolled
- Managed Updates v2 provides smoother upgrade path for large deployments
Breaking Changes
- Package binaries now installed in `/opt/teleport` instead of `/usr/local/bin` (symlinks provided for backward compatibility)
New Features
- New `teleport-update` binary for automatic agent updates
- `autoupdate_config` resource for configuring agent update schedules
- `autoupdate_version` resource for specifying desired agent versions
- Opt-in enrollment via `teleport-update enable` command
- Package manager-agnostic update system (works with apt, yum, dnf, zypper)
- Automatic detection of Teleport edition (Community vs Enterprise) and variants (e.g., FIPS-compliant)
Full Release Notes
## Description
While Teleport 14 is discontinued and out-of-support, some users are still running it.
To help updating to a supported version, we are issuing exceptional v14 releases to
backport Managed Updates v2.
Managed Updates v2 offer a smoother upgrade path for existing users and should reduce
the cost and pain of updating Teleport agents in large deployments.
### Automatic Updates
14.4 introduces a new automatic update mechanism for system administrators to control which Teleport version their
agents are running. You can now configure the agent update schedule and desired agent version via the `autoupdate_config`
and `autoupdate_version` resources.
Updates are performed by the new `teleport-update` binary.
This new system is package manager-agnostic and opt-in. Existing agents won't be automatically enrolled, you can enroll
existing 14.4+ agents by running `teleport-update enable`.
`teleport-update` will become the new standard way of installing Teleport as it always picks the appropriate Teleport
edition (Community vs Enterprise), the cluster's desired version, and the correct Teleport variant (e.g. FIPS-compliant
cryptography).
You can find more information about the feature in [our documentation]().
### Package layout changes
Starting with 14.4.0, the Teleport DEB and RPM packages, notably used by the `apt`, `yum`, `dnf` and `zypper` package
managers, will place the Teleport binaries in `/opt/teleport` instead of `/usr/local/bin`.
The binaries will be symlinked to their previous location, no change should be required in your scripts or systemd units.
This change allows us to do automatic updates without conflicting with the package manager.
### Other fixes and improvements
* Client tools {tctl,tsh} auto-updates controlled by cluster configuration. [#52025](https://github.com/gravitational/teleport/pull/52025)
## Download
Download the current and previous releases of Teleport at https://goteleport.com/download.
## Plugins
Download the current release of Teleport plugins from the links below.
* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v14.4.0-linux-arm64-bin.tar.gz)
* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v14.4.0-linux-arm64-bin.tar.gz)
* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v14.4.0-linux-arm64-bin.tar.gz)
* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v14.4.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v14.4.0-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v14.4.0-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v14.4.0-darwin-universal-bin.tar.gz)
* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v14.4.0-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v14.4.0-darwin-amd64-bin.tar.gz)
* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v14.4.0-linux-arm64-bin.tar.gz)
* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v14.4.0-linux-arm64-bin.tar.gz)
* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v14.4.0-linux-arm64-bin.tar.gz)
* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v14.4.0-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v14.4.0-linux-arm64-bin.tar.gz)