mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-02 14:59:53 +08:00
Tiago Silva
40abd14635
This MR introduces Kubernetes Secret storage for Teleport Kubernetes Agent state. When running Teleport Agent inside a Kubernetes cluster where TELEPORT_REPLICA_NAME and KUBE_NAMESPACE exist, the agent will store identities and states in a Kubernetes Secret instead of local storage. Otherwise, if the above environment variables are not present or not in Kubernetes, the agent persists state in SQLite. Notes: Fresh installs will enable the Kubernetes Secret Storage by default. If PV storage is configured, the agent will store its identity in a Secret and use the PV for non-identity objects. If the operator is upgrading from an existing release that didn't support Secret storage, the Helm chart will convert the objects to enable Kube Secret Storage. If the current object is a Deployment, the Helm chart installs a new Statefulset side by side and will trigger a Helm hook that is responsible for deleting the Deployment once Statefulset pods are healthy. Otherwise, if upgrading from a Statefulset the agent will read the credentials stored in PV and move them into Kube Secret. Implementation of #12958 Related to #5585
20 lines
731 B
Go
20 lines
731 B
Go
/*
|
|
Copyright 2022 Gravitational, Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
// Package kubernetes implements Kubernetes Secret backend used for
|
|
// persisting identity and state for agent's running in Kubernetes clusters.
|
|
package kubernetes
|