Commit graph

104 commits

Author SHA1 Message Date
Gus Luxton 22c4915799
[auto] Update AMI IDs for 5.0.0 (#4981) 2020-11-25 17:04:19 -04:00
Gus Luxton 3dfc56624b
[auto] Update AMI IDs for 4.4.5 (#4868) 2020-11-19 19:13:23 -04:00
Gus Luxton c62f9865b6
Fixed a bug with making AMIs public (#4742) 2020-11-17 16:10:08 -04:00
Gus Luxton 2795df3f6a
Various AMI fixes (#4744) 2020-11-17 10:49:56 -04:00
Gus Luxton 8a1c226d5e
[auto] Update AMI IDs for 4.4.4 (#4743) 2020-11-09 14:49:05 -04:00
Travis Swientek 8df9a4f2fc
Utilize IMDS v2 endpoints for instance metadata. (#4649)
* Utilize IMDS v2 endpoints for instance metadata.
* DRY out the IMDS token header.
* Silence CURL output from token generation.

Co-authored-by: Gus Luxton <gus@gravitational.com>
2020-11-05 09:24:18 -06:00
Gus Luxton aaa2451908
[auto] Update AMI IDs for 4.4.1 (#4625) 2020-10-23 15:09:03 -03:00
Gus Luxton c949adfec4
Add auto PR logic (#4624) 2020-10-23 14:32:48 -03:00
Gus Luxton fe36035819
Update examples to 4.4 (#4608) 2020-10-21 16:00:17 -03:00
Gus Luxton 5a124f6d27
Remove Marketplace AMI builds, plus other tidying (#4502) 2020-10-13 11:44:34 -03:00
Gus Luxton 434775692a
Revert "Fix shellcheck quotation warnings" (#4477)
This reverts commit f06e9204d1.
2020-10-07 14:00:02 -03:00
Gus Luxton 17254fc824 Fix AWS AMI install script after shellcheck breakage 2020-10-07 09:18:52 -07:00
Andrew Lytvynov b37b02cd62 Update assets/aws/files/make-amis-public.sh
Co-authored-by: Gus Luxton <gus@gravitational.com>
2020-10-06 17:32:38 +00:00
Andrew Lytvynov 4b6cf2b2c9 Apply suggestions from code review
Co-authored-by: Gus Luxton <gus@gravitational.com>
2020-10-06 17:32:38 +00:00
Andrew Lytvynov f06e9204d1 Fix shellcheck quotation warnings
And enable all shellcheck checks in CI.
2020-10-06 17:32:38 +00:00
Gus Luxton 20d3dd3b68
Update Teleport Helm/Terraform/CloudFormation to 4.3.7 (#4453) 2020-10-05 18:28:40 -03:00
Andrew Lytvynov 8d7a217089 Run shellcheck during "make lint"
Shellcheck is a linter for shell scripts. Since we have quite a few of
those for release packaging and examples, we'll benefit from an extra
set of (robot) eyes.

Note: I disabled https://github.com/koalaman/shellcheck/wiki/Sc2086 to
make this PR smaller. That specific check is for the most frequent
mistake in our scripts - not quoting env var expansions. I'll do a
separate PR cleaning those up.

`build.assets/pkg` is no longer used and was removed.
2020-09-29 20:40:16 +00:00
Gus Luxton 09245cc091
Add scripts and Makefile targets to automatically update AMI IDs (#4219) 2020-08-24 17:17:34 -03:00
Gus Luxton c33dde5263
Add AMI builds to Drone (#4144) 2020-08-10 09:51:26 -03:00
Ben Arent 855738a475
Add docs / table for Prometheus endpoint. (#4069)
* Add docs / table for Prometheus endpoint.
2020-07-23 08:40:02 -07:00
Ben Arent c2f1eb3202
Teleport EKS Guide (#3921) 2020-07-14 11:03:13 -07:00
Travis Swientek 08551e36ba
AWS AMI Generate AIO Configuration (#3789)
* Update AMI Packer JSON Manifest

Method rename from `clean_ami_name` to new
`clean_resource_name`.

* Support all-in-one configuration AWS AMI.

Added conditional to support all-in-one (auth, proxy, node)
configuration for AWS AMI teleport-generate-config script.

* Improve AMI generation README.

* Addresses PR feedback.
2020-06-15 12:46:58 -05:00
Andrew Lytvynov 540f77526b Use tighter permissions for /var/lib/teleport everywhere
Automatic creation of the data folder in teleport does the right thing -
only make it accessible to owner. All other scripts and docs should do
the same.

Updates #3701
2020-05-15 16:45:56 +00:00
Gus Luxton 09ad24fdfd
Add keep_alive_interval to AMI config (#3453) 2020-03-19 11:37:21 -03:00
Forrest Marshall b941521526 don't overwrite host_uuid file 2020-03-05 10:30:20 -08:00
Gus Luxton 5b34237ce2
Use HTTPS for backend connections from LB with Terraform and ACM (#3399) 2020-03-03 15:49:24 -04:00
Gus Luxton 90e6b1f011
Fix typo which prevents us from renewing certificates for all-in-one installs (#3364) 2020-02-24 10:04:51 -04:00
Gus Luxton 84ed04b0c5
Add auth server LB public_addr to Teleport config (#3333) 2020-02-07 06:14:45 -08:00
Gus Luxton 6696cec6f0
Add tunnel listener and target group to Terraform example for use with ACM (#3302) 2020-01-27 13:38:44 -04:00
Gus Luxton 6cf3bcf5fe
Add additional AWS regions now supporting encryption at rest (#3273) 2020-01-14 11:57:02 -04:00
Gus Luxton f240b7109d
Add some clarity about RBAC based on customer feedback (#3206) 2019-12-14 10:32:03 -04:00
Gus Luxton 42ec959455
Remove old Cloudformation code (#3199) 2019-12-09 18:52:49 -04:00
Gus Luxton 80856fe2d0
Change AMI owners to use Amazon alias (#3148) 2019-11-13 13:38:10 -04:00
Gus Luxton 5d12b2f082
Update certbot to fix ACME v1 issue (#3146) 2019-11-13 10:27:58 -04:00
Gus Luxton 4efef0cab1
Added FIPS AMI build support (#3051) 2019-10-04 15:49:47 -03:00
Gus Luxton 435c546dba
/var/run/teleport -> /run/teleport (#3043) 2019-10-02 20:26:56 -03:00
Ben Arent d161538e2e
Additional IAM permissions (#3022)
* Update Terraform for IAM Requirements with S3 requirements.
2019-09-25 11:32:37 -07:00
Gus Luxton c7ba0ba85c Fix for AWS' filter syntax being terrible 2019-08-09 11:27:50 -03:00
Gus Luxton 897d601b70
Update AMI to handle EC2 instances with no public IP (#2896) 2019-08-06 12:35:38 -03:00
Gus Luxton 80b1e861a0
AMI fixes for Cloudformation (#2894) 2019-08-02 14:48:19 -03:00
Gus Luxton f9d194d0f5
Various small fixes for Grafana (#2836)
* Update default version to 4.0.0
* Various fixes for default Grafana password/dashboards, plus adding missing auth server data
2019-07-04 17:14:18 -03:00
Gus Luxton 30946414ad
Fix typo in AMI provisioning script (#2749)
* chown -> chmod
* Make default version a little newer
2019-05-28 20:25:32 -03:00
Gus Luxton 689bb5b4f8
Change cluster validation method from using CA cert to CA pin hash (#2602)
* Change cluster validation method from using CA cert stored in SSM to CA pin hash stored in SSM - also fixes issues with proxy/node being unable to join the cluster if the cluster name is reused. Split builds into local 'debug' versions and separate production/marketplace versions with different names
2019-03-14 12:11:16 +00:00
Gus Luxton fa26cd894f
Updates to copy license correctly when using Terraform (#2591)
* Fixes for Terraform documentation and license
* Update Makefile and README
* Makefile formatting fixes
* Add build timestamps back into Jenkins
* Add BuildTimestamp into user tags
* Add region to modify-image-attribute command
* Add owner ID into list command
2019-03-07 16:05:07 +00:00
Gus Luxton 1265d4cf63
Single AMI changes for Amazon Marketplace (#2486)
* Add single AMI build/setup
* Add ACM support to Terraform and Letsencrypt support to single AMI
* Finish Letsencrypt support for Single AMI, also add ACM to Single AMI and tidy up Terraform versioning
* Fix Letsencrypt cert acquistion, reduce startup timers from 5 minutes to 3 minutes, tweaks for ACM/non-ACM in Terraform
* Remove AWS-based license from Enterprise AMI to convert to BYOL
* Tidy up - move Cloudformation into a separate subdirectory and remove old Terraform code
* Updated TIG stack to latest versions and tested
* Tidy up CloudFormation builds and improve instructions
* Fix VPC variable name
2019-01-29 18:26:32 +00:00
Cove Schneider 8b299e9c28 spelling cleanup 2018-11-15 12:44:51 -08:00
Gus Luxton d8a23e0507
Update source_ami_filter in Packer template to prevent use of the minimal image. Also update Teleport version in Makefile to 3.0.1 (#2311) 2018-10-23 18:39:10 +01:00
Gus Luxton 25349bbe28
Add Jenkins jobs for building OSS/Enterprise AMIs for submitting to Amazon Marketplace (#1995)
Add Jenkinsfiles for CF build/release process
2018-06-07 11:18:08 -03:00
Gus Luxton ae86d551a6
Update Cloudformation to Teleport 2.6.1 (#1989) 2018-06-05 13:55:28 -03:00
Gus Luxton bc6aa7851b
Add support for use of existing VPC with Cloudformation (#1957)
- Cloudformation now expects an existing VPC, 2 public and 4 private subnets to run
- Updated Teleport to version 2.6.0
- Randomised domain name to make SSL certificate issuing work more frequently
- S3 buckets are now deleted after running
- Old AMIs/snapshots are deleted automtaically
2018-06-01 15:54:46 -03:00