Commit graph

81 commits

Author SHA1 Message Date
Gus Luxton 09ad24fdfd
Add keep_alive_interval to AMI config (#3453) 2020-03-19 11:37:21 -03:00
Forrest Marshall b941521526 don't overwrite host_uuid file 2020-03-05 10:30:20 -08:00
Gus Luxton 5b34237ce2
Use HTTPS for backend connections from LB with Terraform and ACM (#3399) 2020-03-03 15:49:24 -04:00
Gus Luxton 90e6b1f011
Fix typo which prevents us from renewing certificates for all-in-one installs (#3364) 2020-02-24 10:04:51 -04:00
Gus Luxton 84ed04b0c5
Add auth server LB public_addr to Teleport config (#3333) 2020-02-07 06:14:45 -08:00
Gus Luxton 6696cec6f0
Add tunnel listener and target group to Terraform example for use with ACM (#3302) 2020-01-27 13:38:44 -04:00
Gus Luxton 6cf3bcf5fe
Add additional AWS regions now supporting encryption at rest (#3273) 2020-01-14 11:57:02 -04:00
Gus Luxton f240b7109d
Add some clarity about RBAC based on customer feedback (#3206) 2019-12-14 10:32:03 -04:00
Gus Luxton 42ec959455
Remove old Cloudformation code (#3199) 2019-12-09 18:52:49 -04:00
Gus Luxton 80856fe2d0
Change AMI owners to use Amazon alias (#3148) 2019-11-13 13:38:10 -04:00
Gus Luxton 5d12b2f082
Update certbot to fix ACME v1 issue (#3146) 2019-11-13 10:27:58 -04:00
Gus Luxton 4efef0cab1
Added FIPS AMI build support (#3051) 2019-10-04 15:49:47 -03:00
Gus Luxton 435c546dba
/var/run/teleport -> /run/teleport (#3043) 2019-10-02 20:26:56 -03:00
Ben Arent d161538e2e
Additional IAM permissions (#3022)
* Update Terraform for IAM Requirements with S3 requirements.
2019-09-25 11:32:37 -07:00
Gus Luxton c7ba0ba85c Fix for AWS' filter syntax being terrible 2019-08-09 11:27:50 -03:00
Gus Luxton 897d601b70
Update AMI to handle EC2 instances with no public IP (#2896) 2019-08-06 12:35:38 -03:00
Gus Luxton 80b1e861a0
AMI fixes for Cloudformation (#2894) 2019-08-02 14:48:19 -03:00
Gus Luxton f9d194d0f5
Various small fixes for Grafana (#2836)
* Update default version to 4.0.0
* Various fixes for default Grafana password/dashboards, plus adding missing auth server data
2019-07-04 17:14:18 -03:00
Gus Luxton 30946414ad
Fix typo in AMI provisioning script (#2749)
* chown -> chmod
* Make default version a little newer
2019-05-28 20:25:32 -03:00
Gus Luxton 689bb5b4f8
Change cluster validation method from using CA cert to CA pin hash (#2602)
* Change cluster validation method from using CA cert stored in SSM to CA pin hash stored in SSM - also fixes issues with proxy/node being unable to join the cluster if the cluster name is reused. Split builds into local 'debug' versions and separate production/marketplace versions with different names
2019-03-14 12:11:16 +00:00
Gus Luxton fa26cd894f
Updates to copy license correctly when using Terraform (#2591)
* Fixes for Terraform documentation and license
* Update Makefile and README
* Makefile formatting fixes
* Add build timestamps back into Jenkins
* Add BuildTimestamp into user tags
* Add region to modify-image-attribute command
* Add owner ID into list command
2019-03-07 16:05:07 +00:00
Gus Luxton 1265d4cf63
Single AMI changes for Amazon Marketplace (#2486)
* Add single AMI build/setup
* Add ACM support to Terraform and Letsencrypt support to single AMI
* Finish Letsencrypt support for Single AMI, also add ACM to Single AMI and tidy up Terraform versioning
* Fix Letsencrypt cert acquistion, reduce startup timers from 5 minutes to 3 minutes, tweaks for ACM/non-ACM in Terraform
* Remove AWS-based license from Enterprise AMI to convert to BYOL
* Tidy up - move Cloudformation into a separate subdirectory and remove old Terraform code
* Updated TIG stack to latest versions and tested
* Tidy up CloudFormation builds and improve instructions
* Fix VPC variable name
2019-01-29 18:26:32 +00:00
Cove Schneider 8b299e9c28 spelling cleanup 2018-11-15 12:44:51 -08:00
Gus Luxton d8a23e0507
Update source_ami_filter in Packer template to prevent use of the minimal image. Also update Teleport version in Makefile to 3.0.1 (#2311) 2018-10-23 18:39:10 +01:00
Gus Luxton 25349bbe28
Add Jenkins jobs for building OSS/Enterprise AMIs for submitting to Amazon Marketplace (#1995)
Add Jenkinsfiles for CF build/release process
2018-06-07 11:18:08 -03:00
Gus Luxton ae86d551a6
Update Cloudformation to Teleport 2.6.1 (#1989) 2018-06-05 13:55:28 -03:00
Gus Luxton bc6aa7851b
Add support for use of existing VPC with Cloudformation (#1957)
- Cloudformation now expects an existing VPC, 2 public and 4 private subnets to run
- Updated Teleport to version 2.6.0
- Randomised domain name to make SSL certificate issuing work more frequently
- S3 buckets are now deleted after running
- Old AMIs/snapshots are deleted automtaically
2018-06-01 15:54:46 -03:00
Gus Luxton ca395d01be
Enable Jenkins to builld AWS Quickstart Packer images and deploy Cloudformation stack as part of CI/CD testing (#1920)
* Changes to Makefile and Packer template to allow automated builds, plus script to update AMI IDs

* Add basic Jenkinsfile

* Update Jenkinsfile with new curl/wget commands

* Add dir() statements to use assets/marketplace Makefile

* Split build steps up and add mkdir

* Correct path for build dir

* Use stash/unstash in Jenkinsfile

* Slight changes for Jenkins compatibility

* Jenkinsfile debugging

* Jenkinsfile debugging

* Jenkinsfile debugging

* file function only supported in newer versions of make than Jenkins has available

* Need to rebuild Packer AMIs fully to get correct timestamp

* Isolate Cloudformation step for testing

* Write credentials to file

* Allow overriding of Jenkins Cloudformation parameters path

* Add sleep

* Add debug mode

* Add region to aws wait

* Fix up debugging

* Fix up debugging

* Update Jenkinsfile to final form

* Changes to Makefile and Packer template to allow automated builds, plus script to update AMI IDs

* Add basic Jenkinsfile

* Update Jenkinsfile with new curl/wget commands

* Add dir() statements to use assets/marketplace Makefile

* Split build steps up and add mkdir

* Correct path for build dir

* Use stash/unstash in Jenkinsfile

* Slight changes for Jenkins compatibility

* Jenkinsfile debugging

* Jenkinsfile debugging

* Jenkinsfile debugging

* file function only supported in newer versions of make than Jenkins has available

* Need to rebuild Packer AMIs fully to get correct timestamp

* Isolate Cloudformation step for testing

* Write credentials to file

* Allow overriding of Jenkins Cloudformation parameters path

* Add sleep

* Add debug mode

* Add region to aws wait

* Fix up debugging

* Fix up debugging

* Update Jenkinsfile to final form

* Tidy up Makefile

* Remove debug values from AMI update script

* Add support for oss/ent

* Fix documentation

* Always take down Cloudformation stack after running

* Enable timestamps in build log
2018-05-09 11:52:11 -03:00
Gus Luxton 911d1d43ed
Merge branch 'master' into gus/readme-typo-fix 2018-04-25 17:53:08 -03:00
Gus Luxton a230608be7 Fixed a slight typo in README 2018-04-25 17:51:46 -03:00
Gus Luxton 8df6dd61eb Fixes issue with pip 10 being unable to remove requests library 2018-04-25 11:12:32 -03:00
Gus Luxton 9b8a3a299b Move teleport-quickstart-aws into teleport repo 2018-04-24 11:31:18 -03:00
Sasha Klizhentas 18adedcf8c Update dashboard and add metrics.
Minor change adding more diagrams to the builtin
dahsboard and add measuring of access point on the
wire latencies.
2018-02-06 13:27:38 -08:00
Sasha Klizhentas f84e9e0fe1 Add monitoring stack.
Demo monitoring stack sets up example monitoring
infrastructure:

* All nodes, auth servers and proxies
  run telegraf alongside them, polling prometheus
  diagnostic endpoints.

* Telegraf sends the data to InfluxDB database

* Grafana sets up cluster health dashboard
watching key teleport metrics - numbers of goroutines,
number of active sessions, file descriptors and so on.
2018-01-25 13:22:43 -08:00
Sasha Klizhentas a22e817db9 dashboard and detect dangling sessions, refs #931
* Improve Grafana dashboard and fix some metrics
* Add dectection for dangling sessions
* Add documentation for Perf Testing
2017-06-01 19:35:14 -07:00
Sasha Klizhentas 659255b620 monitoring, docs and fix forward on conn close 2017-05-28 15:37:21 -07:00
Sasha Klizhentas cea133f27c fix bench goroutine leak and add more stats 2017-05-14 12:47:04 -07:00
Sasha Klizhentas 7c50174566 add some monitoring units 2017-05-13 19:27:38 -07:00
Sasha Klizhentas 91b4a663b9 instrument with monitoring tools, fixes #935
* Add prometheus endpoint to expose system stats
* Add heealthz endpoint
* Add gops endpoint for real time troubleshooting
* Deprecate httprof endpoint
2017-05-13 18:32:10 -07:00
Ev Kontsevoy 1136e98ef3 Two changes:
1. Removed `assets` directory
2. Removed Gravity package building from the Makefile
3. Updated "Admin Guide" with the information regarding web assets.
2016-03-18 14:23:01 -07:00
Ev Kontsevoy 4e1548fb1d User Manual 2016-03-18 12:56:59 -07:00
Ev Kontsevoy 23eda5780b User manual edits 2016-03-18 12:36:33 -07:00
Ev Kontsevoy 034d2ce765 Removed old web UI 2016-03-18 11:14:06 -07:00
Ev Kontsevoy e02378baf8 Minor code refactoring and commenting...
...in preparation for server side chagnes
2016-02-29 19:00:45 -08:00
Ev Kontsevoy 4e2e82c0c7 Fixes #177 2016-02-29 19:00:45 -08:00
Ev Kontsevoy f95eb92f46 Two minor things:
1. Created Vagrant file to play with Teleport
2. Nicer CLI UI for 'nodes add'
2016-02-12 16:29:33 -08:00
Ev Kontsevoy 640c6cf772 Removed excessive INFO logging and fixed a bug
The bug was 'missing default shell'
2016-02-09 21:50:06 -08:00
klizhentas b72c76ea41 use environment variables 2016-02-04 13:45:59 -08:00
klizhentas 297c2e9915 update orbit manifest 2016-02-02 11:12:59 -08:00
Alex Lyulkov 287c7ac3c0 Removed valid tokens from signup client side 2016-01-25 16:15:41 +03:00