|
1 | 1 | # Changelog |
2 | 2 |
|
| 3 | +## 18.2.0 (09/04/25) |
| 4 | + |
| 5 | +### Encrypted session recordings |
| 6 | + |
| 7 | +Teleport now provides the ability to integrate with Hardware Security Modules (HSMs) in order to encrypt session recordings prior to uploading them to storage. |
| 8 | + |
| 9 | +### AI session summaries |
| 10 | + |
| 11 | +Teleport Identity Security users are now able to view AI-generated summaries for SSH, Kubernetes and database sessions. |
| 12 | + |
| 13 | +### Updated session recordings page |
| 14 | + |
| 15 | +Session recordings page in Teleport web UI are now updated with a new design that will include session thumbnails and ability to view session summaries for Identity Security users. |
| 16 | + |
| 17 | +### Teleport Connect Managed Updates |
| 18 | + |
| 19 | +Teleport Connect is now able to detect when application updates are available and automatically apply them on the next restart. |
| 20 | + |
| 21 | +### Teleport Device Trust Intune Support |
| 22 | + |
| 23 | +Teleport now includes a new hosted plugin for Microsoft's Intune suite, allowing trusted devices to be synchronized from the Intune inventory. |
| 24 | + |
| 25 | +### Terraform support for Access List members |
| 26 | + |
| 27 | +Users are now able to provision Access Lists and their members (including other nested Access Lists) with terraform. |
| 28 | + |
| 29 | +### Long-term access requests UX |
| 30 | + |
| 31 | +Teleport access requests creation dialog in web UI now better differentiate between short and long-term access requests. |
| 32 | + |
| 33 | +### Database web terminal for MySQL |
| 34 | + |
| 35 | +Teleport web UI now provides terminal interface for MySQL database access. |
| 36 | + |
| 37 | +### Database access for AlloyDB |
| 38 | + |
| 39 | +Teleport now supports database access for GCP AlloyDB databases. |
| 40 | + |
| 41 | +### Other changes and improvements |
| 42 | + |
| 43 | +* Improved observability by adding health check metrics for healthy, unhealthy, and unknown states. Database health checks can now be monitored with these metrics. [#58708](https://github.com/gravitational/teleport/pull/58708) |
| 44 | +* Removed AccessList review notification check from tsh login/status flow. [#58662](https://github.com/gravitational/teleport/pull/58662) |
| 45 | +* Lock, unlock and delete from the Bot Details page, as well as viewing lock status. [#58653](https://github.com/gravitational/teleport/pull/58653) |
| 46 | +* Fixed internal access list membership caching issue that caused high CPU usage when the total number of members exceeded 200. [#58614](https://github.com/gravitational/teleport/pull/58614) |
| 47 | +* Fixed internal cache issue that could cause crashes in AWS IC, Database, and App access flows. [#58611](https://github.com/gravitational/teleport/pull/58611) |
| 48 | +* Fixed panic in `tbot`'s `ssh-multiplexer` service. [#58595](https://github.com/gravitational/teleport/pull/58595) |
| 49 | +* Teleport now honours Entra ID OIDC groups overage claim. The OIDC connector spec in Teleport must be updated to request OIDC `profile` scope and the enterprise application in Entra ID must be granted with `User.ReadBasic.All` Graph API permission for this feature to work. By default, Teleport will query the Microsoft Graph API `graph.microsoft.com` endpoint and filter user's group membership of "security groups" group type. This behaviour can be updated by configuring `entra_id_groups_provider` configuration field, which is available in the OIDC connector configuration spec. [#58593](https://github.com/gravitational/teleport/pull/58593) |
| 50 | +* Enhanced session recordings RBAC to enforce recording access based on rules that reference creator’s roles, traits, and resource properties. [#58563](https://github.com/gravitational/teleport/pull/58563) |
| 51 | +* Added support for configure SCIM Plugin with OIDC or Github Teleport Connectors. [#58554](https://github.com/gravitational/teleport/pull/58554) |
| 52 | +* Added `user_agent` field to MySQL database session start audit events. [#58523](https://github.com/gravitational/teleport/pull/58523) |
| 53 | +* `tbot` now supports the configuration of a default namespace for kubeconfig files generated by the `kubernetes/v2` service. [#58494](https://github.com/gravitational/teleport/pull/58494) |
| 54 | +* Reduced audit log clutter by compacting contiguous shared directory read/write events into a single audit log event. [#58446](https://github.com/gravitational/teleport/pull/58446) |
| 55 | +* Session metadata now appears next to SSH sessions in the UI. [#58405](https://github.com/gravitational/teleport/pull/58405) |
| 56 | +* Refreshed the list session recordings UI with thumbnails, more filtering options and a card/list view. [#58390](https://github.com/gravitational/teleport/pull/58390) |
| 57 | +* Added thumbnail and metadata generation for session recordings. [#58360](https://github.com/gravitational/teleport/pull/58360) |
| 58 | +* Teleport Connect now supports managed updates. [#58260](https://github.com/gravitational/teleport/pull/58260) |
| 59 | +* Teleport Connect now brings focus back from the browser to itself after a successful SSO login. [#58260](https://github.com/gravitational/teleport/pull/58260) |
| 60 | +* Added support for GCP AlloyDB. [#58202](https://github.com/gravitational/teleport/pull/58202) |
| 61 | +* Added support for encrypting session recordings at rest across all recording modes. Encryption can be enabled statically by setting `auth_server.session_recording_config.enabled: yes` in the Teleport file configuration, or dynamically by editing the `session_recording_config` resource and setting `spec.encryption.enabled: yes`. [#57959](https://github.com/gravitational/teleport/pull/57959) |
| 62 | +* Added SSH SELinux module management to teleport-update. [#57660](https://github.com/gravitational/teleport/pull/57660) |
| 63 | +* Added Terraform support for Access List members. [#57058](https://github.com/gravitational/teleport/pull/57058) |
| 64 | + |
3 | 65 | ## 18.1.8 (08/29/25) |
4 | 66 |
|
5 | 67 | * Fixed an issue introduced in v18.1.5 that caused desktop connection attempts to stall on the loading screen. [#58500](https://github.com/gravitational/teleport/pull/58500) |
|
0 commit comments