RMU build Gen-1.5: II. Teleport - C. Share RMU Services Via Teleport

Ref: https://www.youtube.com/watch?v=cvW4b96aPL0

You can use proxmox to open separate shell windows to make copying/pasting between them easier.

On the teleport server:

1. Create a short lived token to “invite” the Proxmox application. Be sure to edit the <dc> portion in the following command
   • sudo tctl tokens add --type=app,node --app-name=<dc>-proxmox-webui --app-uri=https://localhost:8006
   • Take note of the token and ca_pin values

On the rmu server:

1. Install pre-req packages:
   • apt update -y && apt upgrade -y && apt install sudo -y
2. Install the teleport agent:
   • Ensure you run the following command with the version of teleport you installed
   • sudo curl https://goteleport.com/static/install.sh | bash -s <Teleport Version>
3. create the teleport application config:
   • Ensure that the proxy is pointed to your teleport domain name in the following command
   • Ensure that —-app-name has the correct data center code (dc) code in the following command (IE tp1, bu1, dl1, etc)
   • sudo teleport configure --output=file --proxy=teleport.<domain name>:443 --token=/var/lib/teleport/token --roles=app,node --app-name=<dc>-proxmox-webui --app-uri=https://localhost:8006
     • 
4. Save the token generated on the Teleport server:
   • sudo vi /var/lib/teleport/token
     • 
5. Save the ca_pin generated on the Teleport server:
   • sudo vi /var/lib/teleport/ca_pin
   • 

1. Edit the /etc/teleport.yaml to update the ca_pin resource:
   • sudo vi /etc/teleport.yaml
   • Update the ca_pin resource with the path to the ca_pin file /var/lib/teleport/ca_pin
   • Under ssh_service: in the same indentation of enabled: “yes” add the following
     • Note: change <dc> to your site’s DC code (IE tp1, sh1, bu1, dl1 etc.)

       jsx
                     labels:
                       dc: "<dc>"      
                       login: "root"

   • Remove commands: section

     yaml
                 commands:
                   - name: hostname
                     command: [hostname]
                     period: 1m0s

   • Under name: <dc>-proxmox-webui , in the same indentation of insecure_skip_verify:, change the value of insecure_skip_verify: to true and add the following:
     • Note: change <dc> to your site’s DC code (IE tp1, sh1, bu1, dl1 etc.)

       jsx
                         labels:
                           dc: "<dc>"

   • Sample /etc/teleport.yaml file:
   • Add teleport to /etc/hosts
     • sudo vi /etc/hosts
     • add an entry of 10.10.100.22 teleport.<domain>
       • Note: what you made in the domain section of prerequisites.
       • \
     • Save and quit the file
   • Start the teleport agent:
     • sudo systemctl enable teleport
     • sudo systemctl start teleport