* Add backend code for listing EKS clusters through AWS OIDC integration.
* Remove leftover commented code.
Co-authored-by: Marco André Dinis <[email protected]>
* Add backend code for enrolling EKS clusters through AWS OIDC integration.
* Add autoupdater installation for the cloud.
* Use awslib to get principal role arn.
* Don't use frontend to set isCloud or enable automatic upgrades.
* Use version from stable/cloud for automatic upgrades on cloud.
* Create joinTokens for enrollment on the backend and per cluster. Return resourceId per cluster.
* Return early when we know access entry is present.
* Rename kubeConfig to kubeClientGetter
* Replace ctx with the groupCtx
* Add explanatory comment to the cluster admin policy const.
* Remove unnecessary config parameters settings.
* Fix value name
* Clean up downloaded chart.
* Name enrolled EKS cluster in Teleport according to EKS discovery pattern.
* Fix lint issues.
* Add missing article.
Co-authored-by: Marco André Dinis <[email protected]>
* Fix typo.
Co-authored-by: Tiago Silva <[email protected]>
* Add missing godoc.
* Fix tests.
* Add missing godocs
* Improve description of the EnrollEKSClusters function.
* Do not enable app discovery on v13 version of the chart.
* Add enrolled eks cluster arn to internal label for kube agent
* Fix typo
Co-authored-by: Tiago Silva <[email protected]>
* Improve error message.
Co-authored-by: Tiago Silva <[email protected]>
* Improve error message.
Co-authored-by: Tiago Silva <[email protected]>
* Improve error message.
Co-authored-by: Tiago Silva <[email protected]>
* Improve error type.
Co-authored-by: Tiago Silva <[email protected]>
* Reduce EKS join token TTL to 15 minutes.
* Increase concurrent EKS enrollment limit to 5
* Fix loopvar
Co-authored-by: Tiago Silva <[email protected]>
* Add todo.
* Use params for installKubeAgent func and log error of chart file cleanup
* Create temp directory for each EKS enrollment and delete that directory afterwards.
* Increase join token ttl to 30 minutes.
* Return eks cluster arn when listing.
* Fix getting helm settings.
* Fix tests
* Fix imports.
---------
Co-authored-by: Marco André Dinis <[email protected]>
Co-authored-by: Tiago Silva <[email protected]>
Prefer the stdlib version of the experimental package.
Includes a depguard update to prevent future regressions,
as well as an e-ref update to appease depguard.
Generated with:
$ gofmt -w -r '"golang.org/x/exp/slices" -> "slices"' . && \
make fix-imports
* AWS OIDC EICE: fix connection set up
Sending an SSH Public Key and creating the Tunnel are done in two
distinct moments.
When deciding wether to use a tunnel or a direct connection, we are now
creating the Tunnel and return the net.Conn which connects directly to
the EC2 Private IP.
The SSH Public Key is sent afterwards when the SSH protocol starts.
It also adds a metrics to the connection.
* improve error message
rosstimothy