v16.5.9

gravitational/teleportv16.5.9May 15, 2025by doggydogworld

AI Summary

This is a patch release (v16.5.9) of Teleport focusing on bug fixes and performance improvements. Key fixes include resolving Proxy cache initialization errors in large clusters, fixing Teleport Connect crashes after downgrades, and improving PIV PIN caching behavior. The release also adds Workload ID enhancements and FIPS agent support for teleport-update.

Key Highlights

  • Fixed Proxy cache initialization errors in clusters with large amounts of open web sessions
  • Resolved Teleport Connect crash after downgrading from a newer version
  • Improved performance of joining and audit log entries for failed joins
  • Added binary_path and binary_hash attributes to Unix workload attestor for Workload ID
  • Teleport-update now has full support for FIPS agent installations

New Features

  • Workload ID: Added binary_path and binary_hash to the Unix workload attestor's attributes
  • Workload identity audit log now includes attributes used in templating and rule evaluation
  • Teleport-update: full support for FIPS agent installations

Full Release Notes

## Description

* Terraform: Fixed Access List resource import. [#54803](https://github.com/gravitational/teleport/pull/54803)
* Fixed Proxy cache initialization errors in clusters with large amounts of open web sessions. [#54782](https://github.com/gravitational/teleport/pull/54782)
* Resolved an issue where the Web UI failed to display an error message when desktop session initialization failed. [#54765](https://github.com/gravitational/teleport/pull/54765)
* Prevent restrictive validation of cluster auth preferences from causing non-auth instances to become healthy. [#54763](https://github.com/gravitational/teleport/pull/54763)
* Improved performance of joining & improved audit log entries for failed joins. [#54749](https://github.com/gravitational/teleport/pull/54749)
* Resolved an issue that could cause Teleport Connect to crash after downgrading from a newer version. [#54741](https://github.com/gravitational/teleport/pull/54741)
* Workload ID: Added binary_path and binary_hash to the Unix workload attestor's attributes. [#54717](https://github.com/gravitational/teleport/pull/54717)
* Includes the attributes used in templating and rule evaluation within the audit log event for a workload identity credential issuance. [#54715](https://github.com/gravitational/teleport/pull/54715)
* Fix an issue with PIV PIN caching where a PIN that is incorrect would be cached. [#54698](https://github.com/gravitational/teleport/pull/54698)
* Teleport-update: full support for FIPS agent installations. [#54610](https://github.com/gravitational/teleport/pull/54610)

## Download

Download the current and previous releases of Teleport at https://goteleport.com/download.

## Plugins

Download the current release of Teleport plugins from the links below.
* Slack [Linux amd64](https://cdn.teleport.dev/teleport-access-slack-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-slack-v16.5.9-linux-arm64-bin.tar.gz) 
* Mattermost [Linux amd64](https://cdn.teleport.dev/teleport-access-mattermost-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-mattermost-v16.5.9-linux-arm64-bin.tar.gz)
* Discord [Linux amd64](https://cdn.teleport.dev/teleport-access-discord-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-discord-v16.5.9-linux-arm64-bin.tar.gz)
* Terraform Provider [Linux amd64](https://cdn.teleport.dev/terraform-provider-teleport-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/terraform-provider-teleport-v16.5.9-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/terraform-provider-teleport-v16.5.9-darwin-amd64-bin.tar.gz) | [macOS arm64](https://cdn.teleport.dev/terraform-provider-teleport-v16.5.9-darwin-arm64-bin.tar.gz) | [macOS universal](https://cdn.teleport.dev/terraform-provider-teleport-v16.5.9-darwin-universal-bin.tar.gz)
* Event Handler [Linux amd64](https://cdn.teleport.dev/teleport-event-handler-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-event-handler-v16.5.9-linux-arm64-bin.tar.gz) | [macOS amd64](https://cdn.teleport.dev/teleport-event-handler-v16.5.9-darwin-amd64-bin.tar.gz)
* PagerDuty [Linux amd64](https://cdn.teleport.dev/teleport-access-pagerduty-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-pagerduty-v16.5.9-linux-arm64-bin.tar.gz)
* Jira [Linux amd64](https://cdn.teleport.dev/teleport-access-jira-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-jira-v16.5.9-linux-arm64-bin.tar.gz)
* Email [Linux amd64](https://cdn.teleport.dev/teleport-access-email-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-email-v16.5.9-linux-arm64-bin.tar.gz)
* Microsoft Teams [Linux amd64](https://cdn.teleport.dev/teleport-access-msteams-v16.5.9-linux-amd64-bin.tar.gz) | [Linux arm64](https://cdn.teleport.dev/teleport-access-msteams-v16.5.9-linux-arm64-bin.tar.gz)