-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
add teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz
teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json
- Loading branch information
1 parent
ffeefe3
commit 9968a82
Showing
5 changed files
with
230 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -37307,6 +37307,26 @@ entries: | |
| - https://giantswarm.github.io/giantswarm-test-catalog/teleport-plugin-event-handler-0.0.0-0ac8e89bfef3c3abc4cd4d16ff9ff6a39133906f.tgz | ||
| version: 0.0.0-0ac8e89bfef3c3abc4cd4d16ff9ff6a39133906f | ||
| teleport-tbot: | ||
| - annotations: | ||
| application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml | ||
| application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md | ||
| application.giantswarm.io/team: bigmac | ||
| application.giantswarm.io/values-schema: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json | ||
| apiVersion: v1 | ||
| created: "2024-08-22T13:03:15.78435938Z" | ||
| description: Teleport TBOT | ||
| digest: daef3920a058eced61e61f712a48b4d0984c2bc9bf5a6b7bf1c9b0e965465481 | ||
| home: https://github.com/giantswarm/teleport-tbot | ||
| icon: https://s.giantswarm.io/app-icons/teleport/1/light.png | ||
| keywords: | ||
| - Teleport | ||
| maintainers: | ||
| - email: [email protected] | ||
| name: giantswarm/team-bigmac | ||
| name: teleport-tbot | ||
| urls: | ||
| - https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz | ||
| version: 0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e | ||
| - annotations: | ||
| application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.2.0-d50e8aecbcfc851f400f1e5174cc02827aae6b19.tgz-meta/main.yaml | ||
| application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.2.0-d50e8aecbcfc851f400f1e5174cc02827aae6b19.tgz-meta/README.md | ||
|
|
@@ -41414,4 +41434,4 @@ entries: | |
| urls: | ||
| - https://giantswarm.github.io/giantswarm-test-catalog/zot-1.0.0-21b0af457fca705f0e3ab09f836213c46a310043.tgz | ||
| version: 1.0.0-21b0af457fca705f0e3ab09f836213c46a310043 | ||
| generated: "2024-08-22T13:02:51.882436312Z" | ||
| generated: "2024-08-22T13:03:15.782812929Z" | ||
Binary file not shown.
28 changes: 28 additions & 0 deletions
28
teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| # teleport-tbot app | ||
|
|
||
| Helm chart for the teleport-tbot app running in Giant Swarm clusters for internal use only. | ||
|
|
||
| - **Cluster E2E Test Suites**: Used to verify cluster registration with the Teleport cluster. | ||
| - **Access to Private E2E Clusters**: Used to access private E2E cluster using tbot generated kubeconfig. | ||
| - **Integration with [teleport-operator](https://github.com/giantswarm/teleport-operator)**: Used for join token management for cluster and node registration. | ||
|
|
||
| ## What is Teleport Bot? | ||
|
|
||
| `teleport-tbot` is an agent designed to use [Teleport Machine ID](https://goteleport.com/docs/enroll-resources/machine-id/getting-started/) to provide machines with an identity that can authenticate to a Teleport cluster. This enables secure access to registered resources such as Kubernetes clusters and more. | ||
|
|
||
| >[!IMPORTANT] | ||
| > Currently, this Helm chart is not general purpose and only works with `kubernetes` join method specific to Giant Swarm clusters. To set it up, follow these steps: | ||
| > 1. Create provision token for the bot, [see example here](https://github.com/giantswarm/teleport-fleet/blob/main/kubernetes/shared/templates/bot-glippy-token.yaml) | ||
| > 2. Create bot user pointing to above token and roles (e.g: teleport-operator, teleport-tbot). | ||
| > 3. In values.yaml, set `teleport.tokenName` to above bot token name and `enabled: true`. | ||
| ## Release process | ||
|
|
||
| Please follow the standard Giant Swarm release process. | ||
|
|
||
| 1. Merge you changes to `main` branch, ensuring the CHANGELOG is updated. | ||
| 2. Create a release branch named `main#release#VERSION`, where VERSION can be `major`, `minor`, or `patch`. | ||
| 3. Merge the Release PR. | ||
|
|
||
| ## Credit | ||
| - https://github.com/gravitational/teleport |
11 changes: 11 additions & 0 deletions
11
teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,11 @@ | ||
| annotations: | ||
| application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml | ||
| application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md | ||
| application.giantswarm.io/team: bigmac | ||
| application.giantswarm.io/values-schema: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json | ||
| chartApiVersion: v1 | ||
| chartFile: teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz | ||
| dateCreated: '2024-08-22T13:03:08.414707' | ||
| digest: daef3920a058eced61e61f712a48b4d0984c2bc9bf5a6b7bf1c9b0e965465481 | ||
| home: https://github.com/giantswarm/teleport-tbot | ||
| icon: https://s.giantswarm.io/app-icons/teleport/1/light.png |
170 changes: 170 additions & 0 deletions
170
teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,170 @@ | ||
| { | ||
| "$schema": "http://json-schema.org/schema#", | ||
| "type": "object", | ||
| "properties": { | ||
| "enabled": { | ||
| "type": "boolean" | ||
| }, | ||
| "global": { | ||
| "type": "object", | ||
| "properties": { | ||
| "podSecurityStandards": { | ||
| "type": "object", | ||
| "properties": { | ||
| "enforced": { | ||
| "type": "boolean" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "ciliumNetworkPolicy": { | ||
| "type": "object", | ||
| "properties": { | ||
| "enabled": { | ||
| "type": "boolean" | ||
| } | ||
| } | ||
| }, | ||
| "image": { | ||
| "type": "object", | ||
| "properties": { | ||
| "name": { | ||
| "type": "string" | ||
| }, | ||
| "tag": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| }, | ||
| "cronjob": { | ||
| "type" : "object", | ||
| "properties": { | ||
| "enabled": { | ||
| "type": "boolean" | ||
| }, | ||
| "image": { | ||
| "type": "object", | ||
| "properties": { | ||
| "name": { | ||
| "type": "string" | ||
| }, | ||
| "tag": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "teleport": { | ||
| "type": "object", | ||
| "properties": { | ||
| "tokenName": { | ||
| "type": "string" | ||
| }, | ||
| "proxyAddr": { | ||
| "type": "string" | ||
| }, | ||
| "teleportClusterName": { | ||
| "type": "string" | ||
| }, | ||
| "teleportVersion": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| }, | ||
| "pod": { | ||
| "type": "object", | ||
| "properties": { | ||
| "group": { | ||
| "type": "object", | ||
| "properties": { | ||
| "id": { | ||
| "type": "integer" | ||
| } | ||
| } | ||
| }, | ||
| "user": { | ||
| "type": "object", | ||
| "properties": { | ||
| "id": { | ||
| "type": "integer" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "podSecurityContext": { | ||
| "type": "object", | ||
| "properties": { | ||
| "seccompProfile": { | ||
| "type": "object", | ||
| "properties": { | ||
| "type": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "project": { | ||
| "type": "object", | ||
| "properties": { | ||
| "branch": { | ||
| "type": "string" | ||
| }, | ||
| "commit": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| }, | ||
| "registry": { | ||
| "type": "object", | ||
| "properties": { | ||
| "domain": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| }, | ||
| "resources": { | ||
| "type": "object", | ||
| "properties": { | ||
| "limits": { | ||
| "type": "object", | ||
| "properties": { | ||
| "cpu": { | ||
| "type": "string" | ||
| }, | ||
| "memory": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| }, | ||
| "requests": { | ||
| "type": "object", | ||
| "properties": { | ||
| "cpu": { | ||
| "type": "string" | ||
| }, | ||
| "memory": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| }, | ||
| "securityContext": { | ||
| "type": "object", | ||
| "properties": { | ||
| "seccompProfile": { | ||
| "type": "object", | ||
| "properties": { | ||
| "type": { | ||
| "type": "string" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |