Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/edenreich/teleport-setup
Trying out Teleport version 14.
https://github.com/edenreich/teleport-setup
Last synced: about 5 hours ago
JSON representation
Trying out Teleport version 14.
- Host: GitHub
- URL: https://github.com/edenreich/teleport-setup
- Owner: edenreich
- Created: 2023-10-28T21:32:47.000Z (about 1 year ago)
- Default Branch: main
- Last Pushed: 2023-11-02T19:28:32.000Z (about 1 year ago)
- Last Synced: 2023-11-02T20:29:17.208Z (about 1 year ago)
- Language: Makefile
- Homepage:
- Size: 16.6 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
## Teleport Setup
- [Teleport Setup](#teleport-setup)
- [Prerequisites](#prerequisites)
- [Quick-Start](#quick-start)
- [Create RBAC](#create-rbac)
- [Invitation Link](#invitation-link)
- [TODO's](#todos)
This is an example for Teleport setup running on Kubernetes.
### Prerequisites
- docker
- k3d
### Quick-Start
1. First create a cluster:
```bash
make k8s-cluster
```
2. Deploy Teleport with its dependencies:
```bash
make k8s-up
```
### Create RBAC
1. Deploy the new role:
```bash
kubectl apply -f infra/teleport/roles/deployer.yaml
```
2. Deploy the user eden and give the deployer role:
```bash
kubectl apply -f infra/teleport/users/eden.yaml
```
### Invitation Link
Send an invitation link to eden for reset the password.
```bash
AUTH_POD=$(kubectl -n teleport get po -l app=teleport-cluster -o jsonpath='{.items[0].metadata.name}')
kubectl -n teleport exec -it "$AUTH_POD" -c teleport -- tctl users reset eden --ttl 8h
```
### TODO's
- [ ] Fix the issue of attempting to login from the tsh to the cluster, even with `--insecure` flag, resulting in:
```
ERROR REPORT:
Original Error: trace.aggregate connection error: desc = "transport: Error while dialing: failed to dial: tls: failed to verify certificate: x509: certificate signed by unknown authority"
Stack Trace:
github.com/gravitational/teleport/lib/client/api.go:4109 github.com/gravitational/teleport/lib/client.(*TeleportClient).ConnectToRootCluster
github.com/gravitational/teleport/tool/tsh/common/tsh.go:1915 github.com/gravitational/teleport/tool/tsh/common.onLogin
github.com/gravitational/teleport/tool/tsh/common/tsh.go:1331 github.com/gravitational/teleport/tool/tsh/common.Run
github.com/gravitational/teleport/tool/tsh/common/tsh.go:548 github.com/gravitational/teleport/tool/tsh/common.Main
github.com/gravitational/teleport/tool/tsh/main.go:24 main.main
runtime/proc.go:267 runtime.main
runtime/asm_arm64.s:1197 runtime.goexit
User Message: connection error: desc = "transport: Error while dialing: failed to dial: tls: failed to verify certificate: x509: certificate signed by unknown authority
```
- [ ] Try out new cluster auto discovery feature
- [ ] Explore also standalone servers auto discovery feature