mirror of https://github.com/gravitational/teleport.git synced 2026-10-30 18:29:21 +08:00

Files

T

Tiago Silva 40abd14635 Kubernetes Secret storage for Agent's Identity (#13942 )

This MR introduces Kubernetes Secret storage for Teleport Kubernetes Agent state.

When running Teleport Agent inside a Kubernetes cluster where TELEPORT_REPLICA_NAME and KUBE_NAMESPACE exist, the agent will store identities and states in a Kubernetes Secret instead of local storage.

Otherwise, if the above environment variables are not present or not in Kubernetes, the agent persists state in SQLite.

Notes:

Fresh installs will enable the Kubernetes Secret Storage by default.
If PV storage is configured, the agent will store its identity in a Secret and use the PV for non-identity objects.
If the operator is upgrading from an existing release that didn't support Secret storage, the Helm chart will convert the objects to enable Kube Secret Storage. If the current object is a Deployment, the Helm chart installs a new Statefulset side by side and will trigger a Helm hook that is responsible for deleting the Deployment once Statefulset pods are healthy. Otherwise, if upgrading from a Statefulset the agent will read the credentials stored in PV and move them into Kube Secret.

Implementation of #12958
Related to #5585

2022-07-29 13:21:51 +00:00

aws

[auto] Update AMI IDs for 10.0.0 (#14251 )

2022-07-09 01:06:36 +00:00

bench

Fix coordinated omission bug (#4643 )

2020-12-01 11:04:31 -08:00

chart

Kubernetes Secret storage for Agent's Identity (#13942 )

2022-07-29 13:21:51 +00:00

etcd

Add ARM64 support for buildbox docker image (#9572 )

2021-12-29 03:33:22 +00:00

gke-auth

Revert "Fix shellcheck quotation warnings" (#4477 )

2020-10-07 14:00:02 -03:00

go-client

Bump go.mod to use Go 1.18 (#13771 )

2022-06-29 02:14:12 +00:00

jwt

Replace golint with revive (#8613 )

2021-10-19 14:00:24 -04:00

k8s-auth

k8s: add merge-kubeconfigs.sh script (#5677 )

2021-04-29 11:05:20 -07:00

launchd

Rename teleport.plist -> com.goteleport.teleport.plist (#5399 )

2021-02-01 10:16:42 -04:00

local-cluster

Preparation for 2.3

2017-06-21 20:14:40 -07:00

resources

Spelling fixes additional (#14823 )

2022-07-25 14:41:34 +00:00

systemd

Added Machine ID to examples.

2022-04-06 12:18:23 -07:00

upstart

Added upstart Teleport daemon script to examples

2017-08-19 20:34:13 -07:00

workflows

Bump go.mod to use Go 1.18 (#13771 )

2022-06-29 02:14:12 +00:00

README.md

Expand Examples Readme (#3120 )

2019-11-01 16:49:48 -07:00

README.md

Examples

Configuration Examples

local-cluster : Sample configuration of a 3-node Teleport cluster using just a single machine

Daemon Configuration

systemd : Service file for systemd
upstart : Start-up script for upstart

AWS examples

AWS: CloudFormation : CloudFormation templates as an example of how to setup HA Teleport in AWS using our AMIs.
AWS: Terraform : Terraform specifies example provisioning script for Teleport auth, proxy and nodes in HA mode.
AWS: EKS. External Link

Kubernetes - Helm Charts

Helm Chart - Teleport Enterprise : For deploying into Kubernetes using Helm
Helm Chart - Teleport Demo : An internal demo app showing Teleport components deployed into Kubernetes using Helm Charts.

README.md

Examples

Configuration Examples

Daemon Configuration

AWS examples

Kubernetes - Helm Charts

SSO Connector Examples and Trusted Cluster Examples

SSO Resources

Role

Trusted Cluster