v17.5.5

gravitational/teleportv17.5.5Jul 21, 2025by doggydogworld

AI Summary

This is a patch release (v17.5.5) for Teleport with a caution against upgrading due to an introduced breaking change. The release includes fixes for backward compatibility with Access Lists for older Terraform providers, VNet DNS configuration on Windows/Active Directory, and a Go update to 1.23.11. It also adds UI improvements for bot instance sorting and new Enterprise features for SCIM integration enrollment.

Key Highlights

Fixed backward compatibility for Access List 'membershipRequires is missing' for older Terraform providers
Go updated to 1.23.11 for security and stability
VNet DNS configuration fixed on Windows hosts joined to Active Directory domains
Fixed tbot SPIFFE Workload API failing to renew SPIFFE SVIDs
Enterprise added support for generic SCIM Integration enrollment

Breaking Changes

This release introduces a breaking change (details not specified) that is fixed in a subsequent version - caution advised against upgrading

New Features

Bot instances are now sortable by latest heartbeat time in the web UI
VNet DNS is now available over IPv4
Terraform Provider now supports skipping proxy certificate verification in development environments
Enterprise: Added enrolment for a generic SCIM Integration

Full Release Notes

> [!CAUTION]  
> Do not upgrade to this version. Introduces a breaking change that is fixed in 17.5.5

* Fixed backward compatibility for Access List 'membershipRequires is missing' for older terraform providers. [#56743](https://github.com/gravitational/teleport/pull/56743)
* Fixed VNet DNS configuration on Windows hosts joined to Active Directory domains. [#56739](https://github.com/gravitational/teleport/pull/56739)
* Updated default client timeout and upload rate for Pyroscope. [#56731](https://github.com/gravitational/teleport/pull/56731)
* Bot instances are now sortable by latest heartbeat time in the web UI. [#56685](https://github.com/gravitational/teleport/pull/56685)
* Updated Go to 1.23.11. [#56680](https://github.com/gravitational/teleport/pull/56680)
* Fixed `tbot` SPIFFE Workload API failing to renew SPIFFE SVIDs. [#56663](https://github.com/gravitational/teleport/pull/56663)
* Fixed some icons displaying as white/black blocks. [#56620](https://github.com/gravitational/teleport/pull/56620)
* Terraform Provider: add support for skipping proxy certificate verification in development environments. [#56530](https://github.com/gravitational/teleport/pull/56530)
* Made VNet DNS available over IPv4. [#56476](https://github.com/gravitational/teleport/pull/56476)
* Fixed `heartbeat_connections_received_total` undercounting Database and Kubernetes heartbeats by 1. [#54726](https://github.com/gravitational/teleport/pull/54726)

Enterprise:
* Added enrolment for a generic SCIM Integration.
* Fixed a email integration enrollment documentation link.