From 9968a827cd472b297e4cfe5f932871a9553dc5be Mon Sep 17 00:00:00 2001 From: CatalogBot Date: Thu, 22 Aug 2024 13:03:17 +0000 Subject: [PATCH] add teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json --- index.yaml | 22 ++- ...7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz | Bin 0 -> 5181 bytes .../README.md | 28 +++ .../main.yaml | 11 ++ .../values.schema.json | 170 ++++++++++++++++++ 5 files changed, 230 insertions(+), 1 deletion(-) create mode 100644 teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz create mode 100644 teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md create mode 100644 teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml create mode 100644 teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json diff --git a/index.yaml b/index.yaml index 3acb4b5327..c784f36ea6 100644 --- a/index.yaml +++ b/index.yaml @@ -37307,6 +37307,26 @@ entries: - https://giantswarm.github.io/giantswarm-test-catalog/teleport-plugin-event-handler-0.0.0-0ac8e89bfef3c3abc4cd4d16ff9ff6a39133906f.tgz version: 0.0.0-0ac8e89bfef3c3abc4cd4d16ff9ff6a39133906f teleport-tbot: + - annotations: + application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml + application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md + application.giantswarm.io/team: bigmac + application.giantswarm.io/values-schema: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json + apiVersion: v1 + created: "2024-08-22T13:03:15.78435938Z" + description: Teleport TBOT + digest: daef3920a058eced61e61f712a48b4d0984c2bc9bf5a6b7bf1c9b0e965465481 + home: https://github.com/giantswarm/teleport-tbot + icon: https://s.giantswarm.io/app-icons/teleport/1/light.png + keywords: + - Teleport + maintainers: + - email: team-bigmac@giantswarm.io + name: giantswarm/team-bigmac + name: teleport-tbot + urls: + - https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz + version: 0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e - annotations: application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.2.0-d50e8aecbcfc851f400f1e5174cc02827aae6b19.tgz-meta/main.yaml application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.2.0-d50e8aecbcfc851f400f1e5174cc02827aae6b19.tgz-meta/README.md @@ -41414,4 +41434,4 @@ entries: urls: - https://giantswarm.github.io/giantswarm-test-catalog/zot-1.0.0-21b0af457fca705f0e3ab09f836213c46a310043.tgz version: 1.0.0-21b0af457fca705f0e3ab09f836213c46a310043 -generated: "2024-08-22T13:02:51.882436312Z" +generated: "2024-08-22T13:03:15.782812929Z" diff --git a/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz b/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz new file mode 100644 index 0000000000000000000000000000000000000000..0f9f132384c8daf14c6ed0cca58934658216bf2c GIT binary patch literal 5181 zcmV-D6vFEtiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PKBxbK5wQ`25XJ(LcspdHh03vMqU5Td6uv;@zFyN#csVvvqZQ z=Y`0YgqQ@l0BBp2@qP9yJopr4`Ju6AGeW9j5syZr8{OyznxMi2GcHu1CS3L2&WTXr zf~3he8%+IvzdzdFH-G#6e*5oWG}!-Uus<3NMtghvgZ*#%gZ+O0;2Y>~5{XqQmx_pQ z`Va1_J-C09L>S|WD9V`}djKTM5*nH3a7GDJ@{))&q`a4+A~8{940EM2Iqvmp<2o(27IFYE`=b7^>M%f$qPT63Wc35&d*@`0o8tn8r6Es*t2(n9x~Dq8lq-kR(SL z$Y_q~({jLK5?V~c&yq8bWb{WAl5#eNi-8xTj0DY;c|LWW!s&M(PrW&Bvc;er@wA3> z6HSjs8cNYZw#Y)VEYLM%*{V0_C3H4dVa8_OIW8`_h~?M|N<=(8g%qI-g~`X1&}0mn z6M<#Ke>D2=02t9&H&84qd$zEN^hH69yAj!Y3i)s9f5+VoF92)w|L*R=lK$Tv_P6@~ zF%mK|NiZJ6lq3>8Z0N%T^X@%RLzTu`+*QG~_BND=@5vMCo)tx-f1nx`L7U2<`L z%o7?dbj>zwnvxlgONsL9BBgawOr;V$K`DJt;7mUmI5F2kJBFF$5e>;txxh$h+4Lg8 z*=IiK=nSCjt*gJ7N9QPl^L&DlN_v048wl^J@o(t{wqh>s5|Jl z>h2D8UGEtj#xY2YBA#ZTxSlxr(aao(I8%6~yxMGfYqKv7>9F_t``83 zB>eJN&pm=CG zDo{C5DHj(SBU4l@0^8OM&i<4yQj)!_9>?A@0GRPa)899L{VFSnG38_M^&kI9*2}Lg zb*}$4>uwW$+`Rq|2L1k^wf+x>{oU>Q{}}0u(NX@6Ww}2FUmM%wUQaXMIUFGuv!4C= z%ztegXf3U4^T}t7RFRtro@s4{(jUVYr~UwZr+gZj4KNeV6C}(pORry7t*uS6x^V-C zvUCM5Re6Vf(^+$UU$^bEMh|O2-B{~p0=3h1XUTGIGv~UK;2rkdrm4SbM%;ejw;71B z0XL1hUM|<;EtQ~b)`9l&)bSOWJpkZs7;5e06_kLdG!AHUC;(rbX{nq~PXzySf z|MMv6%a`6OxS;76Br4DfQLCUgsU}M_$1%L>U0-{;mUncO5f(3<7)2&#%yabuh;d38 zx{VbGTyAJX%d}SwKZ6oEi(s^8e$w+mxO%n}kI`2XJr|IEM7ICz?J zW^t3txY_(LGPNuWl4WD~@&zc1k~}WS8p6-;ube9c1EMN+AS5OjDK2zP3ne@+PxeeW z7hz)_YLFPZLRyebHGScQ~&f3-ko%cI+~b=3vq6SZYcUaw;xtEr~6;E|-_kH%mydyzC#`YI*7Cm(@@3 zTD_MFX$6*{t{FH8L1sYQqRUKX_v$E<*)5>gTgr??tEg$pHl-rJ>a#Az!MI8bo|o$( z5|L084w@++!-T6q+kcKXWwdB{u4-ukupC)fYt}9-8ZCt#*4nhniY8KVQ3loOK@%4Y z3NcDWnKASA;Eg+0ge6Y6lE5z+NTuxuNm+!Zpo5BrJeJB3bCkfiGQp@+AY__JQXz{l zEGT7yMJ*CulM!<&H7d0@NyiQn#{#9)99i&ORPQJp3x2f#E*zl4T+KoILnuNx7C1%G zZm%Dk%`IZ)i26*Lwhh9TJS-2f3)+?ukY!-ylqOmfDT6o{l+CPj%hN1DLuWoU##0n& zWM(;y9aWr2a{(`kZX3~{g^<6j%3aql3uMY*%o@BKVHFJn$B`o7)3K>GJ;vo8q^(&^ zf-@UCT9%hurMu@U(zNJYr%Evt>1N-z`Q}D3Tx~KqpdF7jViY{9l?uXU2s`Jvcnv!y zpc2M!Ry7EgsNgWKktMPL35FCJY&G1NN=^MUyu#=#OY#|IWqj`g$zIY$cWOs*eQo3A z3-$fW6TJ5Gsn^M`HLbM&Y{b|mwtv^zfBXHV_diFwd)xTmM@def5f(4mfTc0urosx_ za6(ix?^PC};OsAa(qSJ)2@)3E)=I2YjeHVQQDzvKS5%@o#(9Ec@cZz}{`2*6{V8V> z@B+mG<~-L%!)HD@bpmAdVFAOa-9`zR_h>2#t=6Vp`qZiDLV>osGS7A&_b`fh&fNPL zw;+8%v860P{sd~q)CmlgWWFpwZ+HbiCQTr_a+;BWPcV~sN*89%r1`EdCD=;ZkD?a`Z^7ZFj=yC9+`a@Movj_fr>%E=3{ z^3p5y$jcU3*ZR%Q3-|6I%up4%5HRp}%AS1)k{hj|H;vU70uE6w6;FeRCwa=`n{lBd zEUSZn@nDW5Mj_jXne9mX#ujC;<1qRI#C$0zz!{WhG=8)50;4$x-_`fwXV9+ObJ_c! z61RW62w(lUEn9R=>?jg1UZI*w(yl8 z3TKPP>*r{9X3ZPT_K4pWr`p^3p<$)3vCo@^f7|G98~nF0_FGr>*z~O0nulnP(Yegi z*Pu8EHxjdMWjqGX+@2^zbHZjQ!xBi*(4GD?`0~O;%D_%oxH#c=MB*_~bMRZIMgB`e zdO0V%!;#F>a{IXEqpUPT@8ne6(V@7rGqKXB{k9FZVb3l*2ZdwM@Y$U4@88<`UupGM zM+41wjNtmZvI9Eo>!67c5wn&%WBi~-PQ&mHz_Gqpo~V?i$S&%zp26|QcW0&H15_6K z`qfFn(x&7;>sy!&U|LM|^uFZc93n1+Ho6vJhcDLXwqXI8ZOuOlo{rnLG{q$TgwuAu zE76mF3=PxV=%)sPfBoBcN1r|%ogST>oqqi5(TB6+!_z+-5uj6w_Tq(1OOHF1a1IDK z52OL>FMmJP)pCi3RG&Fzl+D6Mozpp$79f={A=--P%pDon6A)6I8tBXm?O~WOx&{=R z{a$0xMa#}XEz@+o>}{DdE7{Yi2a*Klv20lDwKe}zooDIYYi&G3xmUeZ&}`R@N(Y>7 z5_{?TVIqlARX(Kpa5eopacKg{zi*|{lh8c*WBT`uPII#MPLYIN1Oa zD(#ONG%hAQ1$?1BCfI%3{i9Pa@MYH&?G1v9^evH1=rkgUY?P3#yn7&0@cagb zJdkzwHmWzQg7Hcr(*uypdMV>^VW}HWfnrO~e4FvzZnnvFi&8O{omg^Xxsk>2cyB({(p>g$M=6*n&?4B!BcGBZ}m$n zt&;zXj6B-@@9u6p{&P6o+sgl=r1j^2Z)@MS2@j9IcS=Eqeu?59gSqbjG;A4fe6l{u}NMm%jfu*xvv0DCrp-6QxivbG?;iJzUO_ z!6c`Nc7Guw(K#`3;x5Xx2v-9+$0UJS!YB5)oU++#5SS1}FI;qMl}}jgJp+a_8;ANL z6F8+;MQGXodl|wpg=XiJ&}}@cp|Z>4ok{$qQ+Wq-U!O{@DvJWW;0a{X3|!Ro{OOHB~m$$6EQ{Z~K4y z+xwp$DXsZ_?QYm_e$dx%e9_l;pY-+b@J(O8?OERX6V&#)(c+%ahkYBk@fqMMmUzWi rezobc_DjLl=Y}=B@`J-q&Eaj@rfu4$?(}~F00960GE!&m0D=Gj#4|+W literal 0 HcmV?d00001 diff --git a/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md b/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md new file mode 100644 index 0000000000..4dcbb0934c --- /dev/null +++ b/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md @@ -0,0 +1,28 @@ +# teleport-tbot app + +Helm chart for the teleport-tbot app running in Giant Swarm clusters for internal use only. + +- **Cluster E2E Test Suites**: Used to verify cluster registration with the Teleport cluster. +- **Access to Private E2E Clusters**: Used to access private E2E cluster using tbot generated kubeconfig. +- **Integration with [teleport-operator](https://github.com/giantswarm/teleport-operator)**: Used for join token management for cluster and node registration. + +## What is Teleport Bot? + +`teleport-tbot` is an agent designed to use [Teleport Machine ID](https://goteleport.com/docs/enroll-resources/machine-id/getting-started/) to provide machines with an identity that can authenticate to a Teleport cluster. This enables secure access to registered resources such as Kubernetes clusters and more. + +>[!IMPORTANT] +> Currently, this Helm chart is not general purpose and only works with `kubernetes` join method specific to Giant Swarm clusters. To set it up, follow these steps: +> 1. Create provision token for the bot, [see example here](https://github.com/giantswarm/teleport-fleet/blob/main/kubernetes/shared/templates/bot-glippy-token.yaml) +> 2. Create bot user pointing to above token and roles (e.g: teleport-operator, teleport-tbot). +> 3. In values.yaml, set `teleport.tokenName` to above bot token name and `enabled: true`. + +## Release process + +Please follow the standard Giant Swarm release process. + +1. Merge you changes to `main` branch, ensuring the CHANGELOG is updated. +2. Create a release branch named `main#release#VERSION`, where VERSION can be `major`, `minor`, or `patch`. +3. Merge the Release PR. + +## Credit +- https://github.com/gravitational/teleport diff --git a/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml b/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml new file mode 100644 index 0000000000..1ec21e3a02 --- /dev/null +++ b/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml @@ -0,0 +1,11 @@ +annotations: + application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/main.yaml + application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/README.md + application.giantswarm.io/team: bigmac + application.giantswarm.io/values-schema: https://giantswarm.github.io/giantswarm-test-catalog/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json +chartApiVersion: v1 +chartFile: teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz +dateCreated: '2024-08-22T13:03:08.414707' +digest: daef3920a058eced61e61f712a48b4d0984c2bc9bf5a6b7bf1c9b0e965465481 +home: https://github.com/giantswarm/teleport-tbot +icon: https://s.giantswarm.io/app-icons/teleport/1/light.png diff --git a/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json b/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json new file mode 100644 index 0000000000..74dd90d8e0 --- /dev/null +++ b/teleport-tbot-0.3.0-cb7dd7c05aa36211ce6cfb0caf9e43bb6cc2535e.tgz-meta/values.schema.json @@ -0,0 +1,170 @@ +{ + "$schema": "http://json-schema.org/schema#", + "type": "object", + "properties": { + "enabled": { + "type": "boolean" + }, + "global": { + "type": "object", + "properties": { + "podSecurityStandards": { + "type": "object", + "properties": { + "enforced": { + "type": "boolean" + } + } + } + } + }, + "ciliumNetworkPolicy": { + "type": "object", + "properties": { + "enabled": { + "type": "boolean" + } + } + }, + "image": { + "type": "object", + "properties": { + "name": { + "type": "string" + }, + "tag": { + "type": "string" + } + } + }, + "cronjob": { + "type" : "object", + "properties": { + "enabled": { + "type": "boolean" + }, + "image": { + "type": "object", + "properties": { + "name": { + "type": "string" + }, + "tag": { + "type": "string" + } + } + } + } + }, + "teleport": { + "type": "object", + "properties": { + "tokenName": { + "type": "string" + }, + "proxyAddr": { + "type": "string" + }, + "teleportClusterName": { + "type": "string" + }, + "teleportVersion": { + "type": "string" + } + } + }, + "pod": { + "type": "object", + "properties": { + "group": { + "type": "object", + "properties": { + "id": { + "type": "integer" + } + } + }, + "user": { + "type": "object", + "properties": { + "id": { + "type": "integer" + } + } + } + } + }, + "podSecurityContext": { + "type": "object", + "properties": { + "seccompProfile": { + "type": "object", + "properties": { + "type": { + "type": "string" + } + } + } + } + }, + "project": { + "type": "object", + "properties": { + "branch": { + "type": "string" + }, + "commit": { + "type": "string" + } + } + }, + "registry": { + "type": "object", + "properties": { + "domain": { + "type": "string" + } + } + }, + "resources": { + "type": "object", + "properties": { + "limits": { + "type": "object", + "properties": { + "cpu": { + "type": "string" + }, + "memory": { + "type": "string" + } + } + }, + "requests": { + "type": "object", + "properties": { + "cpu": { + "type": "string" + }, + "memory": { + "type": "string" + } + } + } + } + }, + "securityContext": { + "type": "object", + "properties": { + "seccompProfile": { + "type": "object", + "properties": { + "type": { + "type": "string" + } + } + } + } + } + } +}