Maja 212f0acc26 Add leaf cluster to MFA prompt and fix resource casing; Improve look of MFA modal in Connect (#66714) ...

* Improve look of ReAuthenticate in Connect

* Display `<Text>` for reason only if reason is present.
* Drop "from trusted cluster" being appended to reason. This will be
  moved to api/mfa/prompt.go.
* Center text for browsermfa and sso so it matches webauthn.
* Consistent comma at the end of text for each method.

* Add leaf cluster name to prompt reason for MFA

* Fix resource type casing in MFA prompt

* Assert MFA prompt in tests

2026-05-14 07:27:11 +00:00

..

accessgraph/apiclient

Add OpenAPI-generated access graph REST client for tctl (#65949)

2026-05-11 22:50:05 +00:00

accesslists

refactor: return sentinel ErrDeniedAccessListDeletion for acl deletion error (#66692)

2026-05-13 15:42:23 +00:00

accessmonitoring

Revise predicate language docs and add contains(set, item) (#64864)

2026-04-01 19:11:15 +00:00

agentless

Rename NewSoftwarePrivateKey to NewPrivateKey (#53598)

2025-04-09 23:34:15 +00:00

asciitable

tsh request search, add support for --format flag (#62015)

2025-12-09 14:49:29 +00:00

auth

Apply overrides to Windows certificates (#66411)

2026-05-11 17:03:50 +00:00

authz

[refactoring] remove some deadcode (#66583)

2026-05-11 13:36:46 +00:00

automaticupgrades

chore: Bump golangci-lint to v2.7.2 (#62066)

2025-12-09 17:59:21 +00:00

autoupdate

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346)

2026-05-02 10:58:23 +00:00

aws

Add "tsh aws-profile" cmd to Generate AWS Profiles from AWS Identity Center Integration (#63032)

2026-03-05 18:12:06 +00:00

backend

Add DeleteBatch scaffolding and tests (#66258)

2026-05-04 11:39:25 +00:00

benchmark

pgx migration: all places outside engine + test server (#65596)

2026-04-13 14:31:23 +00:00

boundkeypair

MWI Scopes[4]: Scoped bot joining and bound keypair support (#65366)

2026-04-16 02:06:24 +00:00

bpf

Fix unreadable Enhanced Session Recording events (#64581)

2026-05-04 12:25:25 +00:00

cache

Prevent the LDAP reconciler from picking up dynamic desktops (#66609)

2026-05-14 02:31:49 +00:00

cgroup

use the audit login session ID to track sessions when using Enhanced Sesssion Recording (#63050)

2026-02-19 18:20:18 +00:00

client

Add leaf cluster to MFA prompt and fix resource casing; Improve look of MFA modal in Connect (#66714)

2026-05-14 07:27:11 +00:00

cloud

Stop loading host AWS config in mock provider (#66606)

2026-05-11 15:21:18 +00:00

componentfeatures

[Access Requests] Support SSH node resource constraints (#64403)

2026-04-01 21:31:16 +00:00

config

Add TLS options to app spec (#65995)

2026-05-05 15:50:04 +00:00

configurators

EC2 Auto Discover: add new required permission account:ListRegions (#61967)

2025-12-04 09:40:10 +00:00

connectmycomputer

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

cryptosuites

Add AppClient CA (#66273)

2026-04-30 19:05:23 +00:00

darwin

Updated Teleport codebase to AGPL3 license (#35259)

2023-12-01 17:48:14 +00:00

decision

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

defaults

[refactoring] remove some deadcode (#66583)

2026-05-11 13:36:46 +00:00

desktop

Refactor reversetunnelclient.Tunnel interface (#57674)

2025-08-21 20:16:55 +00:00

devicetpm

chore: Bump go-attestation to v0.6.0 (#61294)

2025-11-12 20:37:19 +00:00

devicetrust

Use the DeviceCollectedData.os_login_user field (#63389)

2026-02-03 14:19:37 +00:00

events

Add web ui audit event for AccessGraphSettingsUpdateCode (#66530)

2026-05-08 09:30:47 +00:00

expression

Revise predicate language docs and add contains(set, item) (#64864)

2026-04-01 19:11:15 +00:00

fixtures

Reduce testing symbols in production binaries (#55360)

2025-06-09 16:51:12 +00:00

gcp

Port gcp join method to new join service (#61205)

2025-11-18 00:46:04 +00:00

hardwarekey

lib/tbot: Add identity/key-agent service (#66535)

2026-05-13 10:04:29 +00:00

healthcheck

Support username in role templates and expressions (#64888)

2026-04-15 16:29:41 +00:00

httplib

[refactoring] remove some deadcode (#66583)

2026-05-11 13:36:46 +00:00

integrations

kube: consolidate duplicate EKS token generation (#65854)

2026-05-13 21:05:41 +00:00

inventory

Fixing scope propagation and heartbeat enforcement for kube service (#65894)

2026-04-24 00:36:08 +00:00

itertools

Add DynamicBatchSizeIter util (#61157)

2025-11-12 09:15:01 +00:00

join

Wildcard support for kubernetes join method (#66520)

2026-05-13 08:47:24 +00:00

jwt

Add Device Bound Session Credentials to App Access (#65431)

2026-04-28 22:35:47 +00:00

kube

kube: consolidate duplicate EKS token generation (#65854)

2026-05-13 21:05:41 +00:00

labels

Introduce logtest package (#56741)

2025-07-15 18:11:10 +00:00

limiter

limiter: Short-circuit when no rates or connections are configured (#63751)

2026-04-01 06:05:53 +00:00

linux

Apply remaining modernize changes. (#56037)

2025-06-25 21:25:29 +00:00

loginrule

feat: JSONPath interpolation for Login Rules (OIDC) (#56598)

2025-08-05 18:41:26 +00:00

loglimit

Fix bug in the log limiter (#63568)

2026-02-06 14:35:13 +00:00

modules

fips: Rename IsBoringBinary to IsFIPSBuild throughout (#66346)

2026-05-02 10:58:23 +00:00

msgraph

feat: msgraph user and group delta iterators (#66283)

2026-05-13 20:39:56 +00:00

multiplexer

pgx migration: all places outside engine + test server (#65596)

2026-04-13 14:31:23 +00:00

observability

[fix] Use provided registry in metrics.RegisterCollectors (#64919)

2026-03-24 14:17:20 +00:00

oidc

chore: Bump opentelemetry to v1.40.0 (#64014)

2026-02-20 18:45:30 +00:00

okta

Okta: Don't allow creating user_group Access Request in RO (#55420)

2025-06-10 11:09:04 +00:00

openssh

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

player

chore: Bump Go to 1.25.1 (#58875)

2025-09-15 21:49:53 +00:00

plugin

Initialize usage reporting via plugin registry after auth server setup (#64265)

2026-03-26 11:46:12 +00:00

plugins

proto PluginSyncFilter to filter input type converter (#62187)

2025-12-19 06:27:17 +00:00

proxy

rework scoped comparison helpers (#63359)

2026-03-18 21:23:25 +00:00

puttyhosts

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

relaypeer

Relay SSH routing logic and transport server (#58855)

2025-09-25 15:18:03 +00:00

relaytransport

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145)

2026-04-01 12:34:10 +00:00

relaytunnel

Kubernetes forwarding in the Relay Service (#60974)

2025-11-14 22:25:00 +00:00

release

Clean up some utils (#57423)

2025-08-01 18:42:18 +00:00

resourceusage

Convert lib/resourceusage to use slog (#50311)

2024-12-17 13:30:33 +00:00

resumption

Set Teleport version in SSH clients (#65004)

2026-04-07 18:06:00 +00:00

reversetunnel

[reversetunnel] respect KeepAliveCountMax in agent pool (#66513)

2026-05-07 12:33:09 +00:00

reversetunnelclient

Set Teleport version in SSH clients (#65004)

2026-04-07 18:06:00 +00:00

saml

Stop using text/template and html/template to enable DCE (#65401)

2026-04-22 15:54:43 +00:00

scopes

Wildcard support for kubernetes join method (#66520)

2026-05-13 08:47:24 +00:00

secret

Fix log messages and tsh command description (#61037)

2025-11-05 15:31:30 +00:00

secretsscanner

Extract gRPC bidi proxy to separate package and fix edge cases (#66143)

2026-05-11 10:38:30 +00:00

service

app: Fix stale comment in initApps (#66610)

2026-05-10 23:42:41 +00:00

services

Prevent the LDAP reconciler from picking up dynamic desktops (#66609)

2026-05-14 02:31:49 +00:00

session

Improve error message for terminal size unmarshalling (#62775)

2026-01-13 11:35:05 +00:00

srv

Prevent the LDAP reconciler from picking up dynamic desktops (#66609)

2026-05-14 02:31:49 +00:00

sshagent

Capture x11 and agent forwarding requests in trace. (#59292)

2025-09-18 19:43:20 +00:00

sshca

Fix headless login when in-band MFA is required (#66168)

2026-05-08 17:25:55 +00:00

sshutils

Capture reexec networking stderr for logging (#65202)

2026-04-29 20:04:39 +00:00

subca

Apply overrides to Windows certificates (#66411)

2026-05-11 17:03:50 +00:00

system

Convert lib/system to use slog (#50300)

2024-12-17 13:27:21 +00:00

systemd

Add join failure handling for ec2 using readyz health check (#64296)

2026-04-20 14:59:21 +00:00

tbot

lib/tbot: Add identity/key-agent service (#66535)

2026-05-13 10:04:29 +00:00

teleterm

Restore TDP/TDPB Field Limits (#66223)

2026-05-11 18:49:59 +00:00

terminal

Reduce the memory usage of the session recording processor by ~80% (#60266)

2025-10-15 15:21:54 +00:00

tfgen

tfgen: add hash to sanitized resource name (#66227)

2026-04-30 15:46:30 +00:00

tlsca

[Access Requests] Fix sentinel in legacy cert extension replacing actual resource IDs (#66556)

2026-05-08 16:53:04 +00:00

tlscatest

Add the tlscatest.GenerateSelfSignedCA helper (#64113)

2026-03-02 16:29:45 +00:00

tpm

Fix ./lib/tpm tests using -tags=tpmsimulator (#65807)

2026-04-16 15:07:00 +00:00

uds

chore: Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc to v1.5.0 (#44739)

2024-07-29 15:05:34 +00:00

ui

Align label sorting in Connect with what Web UI does (#48086)

2024-10-30 09:54:28 +00:00

usagereporter

initial draft (#64972)

2026-04-22 23:40:37 +00:00

usertasks

[web] add azure discovery rules, user tasks to integrations api (#65385)

2026-04-21 20:30:58 +00:00

utils

app: Raise upstream response-header cap to 1h (#66647)

2026-05-12 23:22:29 +00:00

versioncontrol

session-helper: submodule preparation and dependencies of lib/srv/reexec.go (#65145)

2026-04-01 12:34:10 +00:00

vnet

feat: added db vnet access to be embedded in tbot (#66503)

2026-05-08 16:15:08 +00:00

watcher

Adjust log level on some noisy entries (#61076)

2025-11-06 21:03:31 +00:00

web

Set global websocket read deadline once to avoid test flakes. (#65358)

2026-05-12 18:27:10 +00:00

windowsexec

Convert lib/windowsexec to use slog (#50307)

2024-12-17 04:47:52 +00:00

windowsservice

Connect: gracefully handle VNet service and app version mismatch (#64438)

2026-03-19 07:45:58 +00:00

winpki

Apply overrides to Windows certificates (#66411)

2026-05-11 17:03:50 +00:00