teleport/assets/aws
dependabot[bot] 0f890b02dc
Bump the go group in /assets/aws with 3 updates (#35296)
Bumps the go group in /assets/aws with 3 updates: [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2), [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) and [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2).


Updates `github.com/aws/aws-sdk-go-v2` from 1.23.2 to 1.23.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.23.2...v1.23.5)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.25.8 to 1.25.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.25.8...config/v1.25.11)

Updates `github.com/aws/aws-sdk-go-v2/service/ec2` from 1.137.3 to 1.138.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/service/ec2/v1.137.3...service/ec2/v1.138.2)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-04 14:21:50 +00:00
..
cmd Updated Teleport codebase to AGPL3 license (#35259) 2023-12-01 17:48:14 +00:00
files Enable FIPS mode at the OS level for AWS AMIs (#32625) 2023-10-31 21:21:11 +00:00
monitor-files Packer resources for hardened AMIs (#26126) 2023-05-22 08:39:19 +00:00
.gitignore Add AMI builds to Drone (#4144) 2020-08-10 09:51:26 -03:00
go.mod Bump the go group in /assets/aws with 3 updates (#35296) 2023-12-04 14:21:50 +00:00
go.sum Bump the go group in /assets/aws with 3 updates (#35296) 2023-12-04 14:21:50 +00:00
LICENSE Add AMI builds to Drone (#4144) 2020-08-10 09:51:26 -03:00
Makefile Assign reviewer on post-release PRs (#34651) 2023-11-29 18:23:16 +00:00
README.md Update AMI usage instructions (#25807) 2023-05-17 15:30:00 +00:00
single-ami.json Enable FIPS mode at the OS level for AWS AMIs (#32625) 2023-10-31 21:21:11 +00:00
single-ami.pkr.hcl Updated Teleport codebase to AGPL3 license (#35259) 2023-12-01 17:48:14 +00:00

Teleport AWS AMI creation.

Instructions for building Teleport AWS AMIs.

Development instructions

Prerequisites

AWS CLI and Packer are required to build Teleport AMIs.

Minimum versions:
awscli == 1.14
packer == v1.4.0

On macOS:

brew install awscli
brew install packer

On Linux:

apt install awscli
Follow instructions at: https://www.packer.io/docs/install/index.html

To build the OSS AMI

  1. Determine which AWS account you wish to build the AMI within.
  2. Ensure your local awscli profile is configured for this account, and you have adequate IAM roles to build AMIs (ec2, s3, vpc).
  3. Decide which region you'd like to build and distribute AMIs in. We'll use these in the next step.
  4. Set the following Makefile values:
Param Description
BUILD_VPC_ID With the region you selected in step 3, create or use an existing VPC. ex. vpc-xxxxxxxx.
BUILD_SUBNET_ID Within the VPC above, select a subnet. ex. subnet-xxxxxxxx
AWS_REGION Region you selected in step 3. ex. us-east-1
TELEPORT_VERSION Teleport version. See Teleport releases. ex. 4.2.10
INSTANCE_TYPE The instance type used for the build. ex. t2.micro
DESTINATION_REGIONS The regions the AMI will be replicated to. ex. us-east-1,us-east-2
  1. Run
make oss
  1. Once complete, your AMI should be available, in the regions you specified, with the name teleport-debug-ami-<type>-<version>. (e.g. teleport-debug-ami-oss-4.2.10)

Usage instructions

To see how to use your Teleport AMI to run a single-instance Teleport cluster, read our Getting Started Guide.

You can use your Teleport AMI to deploy EC2 instances running any Teleport service. To read how to join your instance to a Teleport cluster in order to protect resources in your infrastructure, see our Joining Services to a Cluster guides.

If you are hosting the Teleport Auth and Proxy Services yourself, read our guide to designing a high-availability architecture for your Teleport deployment.