{"id":28635465,"url":"https://github.com/cruxstack/terraform-teleport-configuration","last_synced_at":"2026-02-02T04:02:31.347Z","repository":{"id":294100216,"uuid":"985027893","full_name":"cruxstack/terraform-teleport-configuration","owner":"cruxstack","description":"Terraform module to configure Teleport, a zero-trust solution from Gravitational, to AWS in high-availability architecture","archived":false,"fork":false,"pushed_at":"2025-05-19T15:58:38.000Z","size":14,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-05-19T16:56:18.681Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://registry.terraform.io/modules/cruxstack/teleport-node/aws/latest","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cruxstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-05-16T23:47:03.000Z","updated_at":"2025-05-19T16:01:53.000Z","dependencies_parsed_at":"2025-05-19T00:20:35.453Z","dependency_job_id":"8d20a972-2275-463b-a975-2d839487ac87","html_url":"https://github.com/cruxstack/terraform-teleport-configuration","commit_stats":null,"previous_names":["cruxstack/terraform-teleport-management","cruxstack/terraform-teleport-configuration"],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/cruxstack/terraform-teleport-configuration","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-teleport-configuration","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-teleport-configuration/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-teleport-configuration/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-teleport-configuration/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cruxstack","download_url":"https://codeload.github.com/cruxstack/terraform-teleport-configuration/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cruxstack%2Fterraform-teleport-configuration/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":259509474,"owners_count":22868837,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-06-12T17:10:29.147Z","updated_at":"2026-02-02T04:02:26.323Z","avatar_url":"https://github.com/cruxstack.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# terraform-teleport-configuration\n\nOpinionated Terraform module for **configurating Teleport clusters**. It works\nfor both **Teleport Cloud** and **self-hosted cluster**. The module provisions\nand maintains:\n\n- Provision tokens using IAM, EC2 GitHub, etc. join methods\n- Roles with allow/deny rules and options\n- Identity-provider connectors for GitHub, Okta, generic SAML, etc.\n\n## Usage\n\n```hcl\nmodule \"teleport\" {\n  source  = \"cruxstack/configuration/teleport\"\n  version = \"x.x.x\"\n\n  tp_domain = \"teleport.example.com\"\n\n  tp_tokens = {\n    node = {\n      roles       = [\"App\", \"Db\", \"Node\"]\n      join_method = \"iam\"\n      aws = {\n        allow = [{ account = \"111111111111\"}]\n      }\n    }\n  }\n\n  tp_github_connector = {\n    enabled     = true\n    oauth_client = {\n      id     = \"xxxxxxxxx\"\n      secret = \"xxxxxxxxx\"\n    }\n    team_mappings = [{\n      org   = \"cruxstack\"\n      team  = \"developers\"\n      roles = [\"access\"]\n    }]\n  }\n}\n````\n\n## Inputs\n\n| Variable              | Type          | Default               | Description                                                  |\n|-----------------------|-------------- |-----------------------|--------------------------------------------------------------|\n| `enabled`             | `bool`        | `true`                | set to false to prevent the module from creating resources   |\n| `tp_edition`          | `string`      | `\"cloud\"`             | teleport edition                                             |\n| `tp_domain`           | `string`      | n/a                   | domain to the teleport proxy service                         |\n| `tp_tokens`           | `map(object)` | `{}`                  | token definitions keyed by name                              |\n| `tp_roles`            | `map(object)` | `{}`                  | teleport role definitions                                    |\n| `tp_github_connector` | `object`      | `{ enabled = false }` | github oauth connector settings                              |\n| `tp_okta_connector`   | `object`      | `{ enabled = false }` | okta saml connector settings                                 |\n| `tp_saml_connector`   | `object`      | `{ enabled = false }` | generic saml connector settings                              |\n\n## Outputs\n\n| Name                  | Type            | Description                                               |\n|-----------------------|-----------------|-----------------------------------------------------------|\n| `token_ids`           | `list(string)`  | ids of all `teleport_provision_token` resources           |\n| `role_names`          | `set(string)`   | set of role names managed by this module                  |\n| `github_connector_id` | `string`        | id of the github connector (`null` when connector disabled)|\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcruxstack%2Fterraform-teleport-configuration","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcruxstack%2Fterraform-teleport-configuration","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcruxstack%2Fterraform-teleport-configuration/lists"}