Commit graph

264 commits

Author SHA1 Message Date
Gus Luxton 9275c0579a
teleport-kube-agent: Add support for annotations.serviceAccount (#7060)
This functionality is present in the `teleport-cluster` chart and it seems logical toduplicate it in the `teleport-kube-agent` chart.

Also adds missing documentation for `annotations.serviceAccount` to the `teleport-cluster` reference.
2021-05-26 13:03:03 -07:00
Gus Luxton 1b14d477c9
Update AMI IDs for 6.2.0 (#7037) 2021-05-26 11:17:51 -07:00
Gus Luxton 593e0e6145
helm: Don't package/update old teleport chart (#6902)
Also updates the teleport-cluster chart README and chart repo index page with links to the new Helm guides.
2021-05-25 10:53:11 -07:00
Gus Luxton 9d5e3e6a8e
helm: Fix antiAffinity in teleport-cluster (#6944)
The syntax for `requiredDuringSchedulingIgnoredDuringExecution` is different to that for `preferredDuringSchedulingIgnoredDuringExecution`.
2021-05-20 11:34:12 -07:00
Gus Luxton 925801440a
helm: Adds 'aws', 'gcp', 'standalone' and ‘custom’ modes to teleport-cluster chart (#6344) 2021-05-17 11:35:11 -03:00
Steven Martin d867edadae
Add sudo to systemd example commands (#6603) 2021-05-14 06:37:54 -07:00
Gus Luxton 94a28faaf2
Update locks.tf (#6798) 2021-05-12 11:35:49 -07:00
Steven Martin 0b2f39d86c
Gives inline info for Google Service account for SSO (#6728) 2021-05-12 09:52:18 -07:00
Andrew Lytvynov 9c25440e8d
k8s: add merge-kubeconfigs.sh script (#5677)
This script merges multiple kubeconfigs created with `get-kubeconfig.sh`
(or from anywhere else) into a single `merged-kubeconfig`.
2021-04-29 11:05:20 -07:00
Alexander Klizhentas 06b7dc5fd2
Teleport Slackbot for latest slackbot (#6522)
Co-authored-by: Ben Arent <ben@goteleport.com>
2021-04-20 19:08:05 -07:00
Brian Joerger d830ed6db7
Refactor api package and docs to use pkg.go.dev effectively. (#6388) 2021-04-20 16:44:17 -07:00
Ada 4afa82d78c
Update Terraform examples provider (#6332) 2021-04-16 15:03:14 -07:00
Jane Quintero cf67811a49 remove grafana pass var repeat 2021-04-15 14:02:16 -07:00
Brian Joerger 009dfedbd4
Update go-client to user new API client with tsh profile loader. (#6310)
* Update go-client to user new API client with tsh profile loader.

* Apply suggestions from code review

Co-authored-by: Andrew Lytvynov <andrew@goteleport.com>

Co-authored-by: Andrew Lytvynov <andrew@goteleport.com>
2021-04-15 10:10:25 -07:00
Steven Martin 39cafd6a1c
Added reverse tunnel port info to teleport-kube-agent readme (#5621) 2021-04-13 13:55:10 -07:00
Gus Luxton 52a29bb63f
helm: Improve linting and add log level override (#6330) 2021-04-08 08:02:29 -07:00
Ben Arent a04b377663
Update Google Workspace and Okta Docs (#6267)
* Update GSuite and Okta Docs
* s/suite/workspace
* Remove use of admin to use editor
2021-04-05 15:45:08 -07:00
Gus Luxton 300499e253
[auto] Update AMI IDs for 6.0.2 (#6283) 2021-04-02 20:32:46 -07:00
Yurii Matsiuk 7569413f99
Make authToken optional if secret exists (#6273)
Co-authored-by: Gus Luxton <webvictim@gmail.com>
Signed-off-by: Yurii Matsiuk <ymatsiuk@users.noreply.github.com>
2021-04-01 14:37:01 -03:00
Brian Joerger 4398797f14
Pass context through new gRPC converted endpoints. (#6118) 2021-03-23 18:26:52 -07:00
Ben Arent a11ee59c80
Getting started with Kubernetes (#5981) 2021-03-13 09:39:15 -08:00
J. Daniel Medeiros e538713fe0
Update README.md (#5989) 2021-03-13 09:23:13 -08:00
Ben Arent d6c2b6bc4c
Updates starter-cluster to Terraform 0.14 (#5535) 2021-03-12 16:05:43 -08:00
Gus Luxton 1102afb958
Update Helm charts to use Teleport 6 by default (#5983)
Also bump chart version so people who have pinned versions don't get auto-updated.
2021-03-12 13:40:17 -08:00
Brian Joerger 494782fe12
Convert Role endpoints to gRPC. (#5458) 2021-03-10 17:54:08 -08:00
Gus Luxton 09bf1ca931
[auto] Update AMI IDs for 6.0.1 (#5894) 2021-03-08 17:02:05 -04:00
Gus Luxton c01fe027e5
Publish teleport-cluster Helm chart (#5895)
* Publish teleport-cluster Helm chart

* Add teleport-cluster to Helm repo index HTML and update instructions
2021-03-08 08:06:54 -08:00
Andrej Tokarčík 539ba24550 Fix support for insecure etcd mode 2021-03-02 13:20:43 -08:00
Andrej Tokarčík 976d8517cb
Remove support for migrating from legacy etcd prefix (#5798)
This code should have been removed in 4.4.
2021-03-02 20:49:11 +01:00
Gus Luxton 85a31ce918
Add Kubernetes listener to HA Terraform (#5633) 2021-02-23 20:45:28 -04:00
Brian Joerger 488cf7b66c
API credential loaders (#5455) 2021-02-22 16:43:00 -08:00
Steven Martin 5f49e5a4c3
Fix for HA auth configmap (#5618)
`session_control_timeout` and `session_recording` were not in the right spacing in the auth_service HA configuration.
2021-02-19 13:26:51 -05:00
Steven Martin 3a7c7e80d9
Added recording type, session lockout and https key pair settings for teleport helm chart (#5555)
* Added recording type, session lockout as `auth_service` options  and https key pair as `proxy_service` option
2021-02-17 14:02:36 -05:00
Gus Luxton 3432520ef1
[auto] Update AMI IDs for 5.1.2 (#5479) 2021-02-10 00:58:39 -04:00
Steven Martin 974825d6f5
Add kubernetes_service option to teleport helm chart (#5490)
* Increment to version 0.0.10

* Add kubernetes_service option config
2021-02-08 19:28:08 -05:00
Gus Luxton e7efa6738a
Add linting for Helm charts with example values (#5495) 2021-02-08 17:08:05 -04:00
Loïc Cotonéa bbd69866c5
[BUG FIX] Wrong value name persistnce.pdName (#5457)
Co-authored-by: Gus Luxton <gus@gravitational.com>
2021-02-02 17:28:32 -04:00
Gus Luxton 2899a36dde
Rename teleport.plist -> com.goteleport.teleport.plist (#5399) 2021-02-01 10:16:42 -04:00
Steven Martin 335b923f4b
Allows specifying different public addresses for ssh, tunnel and k8s (#5422)
* Checks for public addresses to assign instead of default

* Provide examples of specifying different public addresses for ssh, tunnel and k8s

* Update Chart.yaml

* Update examples/chart/teleport/values.yaml

Co-authored-by: Gus Luxton <gus@gravitational.com>

* move example indentation

Co-authored-by: Gus Luxton <gus@gravitational.com>

* Update examples/chart/teleport/values.yaml

Co-authored-by: Gus Luxton <gus@gravitational.com>

* Update examples/chart/teleport/templates/config.yaml

Co-authored-by: Gus Luxton <gus@gravitational.com>

* spacing

Co-authored-by: Gus Luxton <gus@gravitational.com>

* spacing

Co-authored-by: Gus Luxton <gus@gravitational.com>

* spacing

Co-authored-by: Gus Luxton <gus@gravitational.com>

* can use different ports in the config based on the public addr setting

* Update examples/chart/teleport/values.yaml

Co-authored-by: Gus Luxton <gus@gravitational.com>

* Update examples/chart/teleport/values.yaml

Co-authored-by: Gus Luxton <gus@gravitational.com>

* spacing

Co-authored-by: Gus Luxton <gus@gravitational.com>

* spacing

Co-authored-by: Gus Luxton <gus@gravitational.com>

* spacing

Co-authored-by: Gus Luxton <gus@gravitational.com>

* spacing

Co-authored-by: Gus Luxton <gus@gravitational.com>

* spacing

Co-authored-by: Gus Luxton <gus@gravitational.com>

Co-authored-by: Gus Luxton <gus@gravitational.com>
2021-01-28 13:32:13 -05:00
Gus Luxton f7d542b3b0
teleport-kube-agent: Check whether Teleport version is >=6 before setting db_service key (#5407) 2021-01-26 13:45:19 -04:00
Gus Luxton 96f70860b6
Combined Helm chart for kube, app and db services (#5348) 2021-01-25 18:37:25 -04:00
Laurent Lavaud 1373490c95
Fix serviceAccount template (#5398)
current serviceAccount template failed to apply correctly
2021-01-25 13:50:39 -04:00
Andreas Lutro 23b80356b5
correct typo in onelogin connector config example (#5372) 2021-01-21 13:15:45 -04:00
Gus Luxton 8d40ce9b6a
Address post-release checklist items for 5.1 (#5223) 2021-01-20 17:13:42 -04:00
Rob Coward 20e6466525
Adding annotations to the serviceAccount definition (#5271)
* Adding annotations to the serviceAccount definition to allow IRSA to be used on AWS EKS deployments

* Adding separate settings for the auth service when deploying highAvailability and passing through loadBalancerSourceRanges when service type is LoadBalancer
2021-01-20 10:31:09 -04:00
Sasha Klizhentas 579ee120bc Adds simpler standalone k8s chart.
A new chart teleport-cluster helps users to get started
with Teleport on Kubernetes. It uses single node deployment with
persitent volumens and supports ACME.

A new quickstart guide will use this chart.
2021-01-18 09:43:41 -08:00
William Reed 40b68708af
checksum must be on pod, not deployment (#5289)
checksum must be on pod, not deployment
2021-01-13 11:20:14 -08:00
Marco Monaco b58c603c7d
Fix health check protocol (#5268)
proxy will not respond to plain HTTP requests, and the health check will fail otherwise
2021-01-11 19:10:25 -04:00
Gus Luxton 6e1726bc4c
Add teleport-kube-agent chart and remove unwanted charts (#5233) 2021-01-07 16:53:25 -04:00
Gus Luxton dd79d2a28c
[auto] Update AMI IDs for 5.1.0 (#5231) 2021-01-06 16:43:20 -04:00