Difference between revisions of "RMU build Gen-1.5: III. Maas - C. Share Services Via Teleport"

From Internet Computer Wiki
Jump to: navigation, search
(Updating page)
(Working on th epage)
Line 17: Line 17:
 
#* <code>sudo curl <<nowiki>https://goteleport.com/static/install.sh</nowiki>> | bash -s <teleport version></code>
 
#* <code>sudo curl <<nowiki>https://goteleport.com/static/install.sh</nowiki>> | bash -s <teleport version></code>
 
# create the Teleport application config:
 
# create the Teleport application config:
−
#* <code>sudo teleport configure --output=file --proxy=<domain name>:443 --token=/var/lib/teleport/token --roles=app,node --app-name=<dc>-maas --app-uri=<nowiki>http://localhost:5240</nowiki></code>
+
#*<code>sudo teleport configure --output=file --proxy=<domain name>:443 --token=/var/lib/teleport/token --roles=app,node --app-name=<dc>-maas --app-uri=<nowiki>http://localhost:5240</nowiki></code>
 +
#* [[File:Screenshot 2023-12-20 at 11.49.50 AM.png|800x800px]]
 
# Save the token generated on the Teleport server:
 
# Save the token generated on the Teleport server:
−
#* <code>sudo vi /var/lib/teleport/token</code>
+
#*<code>sudo vi /var/lib/teleport/token</code>
 +
#* [[File:Screenshot 2023-10-30 at 3.36.42 PM.png|800x800px]]
 
# Save the ca_pin generated on the Teleport server:
 
# Save the ca_pin generated on the Teleport server:
−
#* <code>sudo vi /var/lib/teleport/ca_pin</code>
+
#*<code>sudo vi /var/lib/teleport/ca_pin</code>
 +
#* [[File:Screenshot 2023-12-19 at 11.25.37 AM.png|800x800px]]
 
# Edit the <code>/etc/teleport.yaml</code> to update the <code>ca_pin</code> resource:
 
# Edit the <code>/etc/teleport.yaml</code> to update the <code>ca_pin</code> resource:
 
#* <code>sudo vi /etc/teleport.yaml</code>
 
#* <code>sudo vi /etc/teleport.yaml</code>
Line 30: Line 33:
 
# Sample <code>/etc/teleport.yaml</code> file
 
# Sample <code>/etc/teleport.yaml</code> file
 
# Add Teleport to <code>/etc/hosts</code>
 
# Add Teleport to <code>/etc/hosts</code>
−
#* <code>sudo vi /etc/hosts</code>
+
#*<code>sudo vi /etc/hosts</code>
 
#* add an entry of <code>10.10.100.22 <Domain name of your teleport server></code>  Note: what you made [[RMU build Gen-1.5: I. Prerequisites#Domain Name|here]]
 
#* add an entry of <code>10.10.100.22 <Domain name of your teleport server></code>  Note: what you made [[RMU build Gen-1.5: I. Prerequisites#Domain Name|here]]
 +
#* [[File:Screenshot 2023-12-19 at 11.39.48 AM.png|800x800px]]
 
#* Save and quit the file
 
#* Save and quit the file
 
# Start the Teleport agent:
 
# Start the Teleport agent:

Revision as of 19:24, 26 February 2024

This page is part of the Gen-1.5 RMU build runbook.

Go back to the previous section: B. Install Maas Software via APT

C. Share Services Via Teleport

Ref: https://www.youtube.com/watch?v=cvW4b96aPL0

On the teleport server:

  1. Create a short lived token to “invite” the MaaS application
    • tctl tokens add --type=app,node --app-name=<dc>-maas --app-uri=http://localhost:5240
    • Take note of the token and ca_pin values

On the maas server:

  1. Install the Teleport agent:
    • sudo curl <https://goteleport.com/static/install.sh> | bash -s <teleport version>
  2. create the Teleport application config:
    • sudo teleport configure --output=file --proxy=<domain name>:443 --token=/var/lib/teleport/token --roles=app,node --app-name=<dc>-maas --app-uri=http://localhost:5240
    • Screenshot 2023-12-20 at 11.49.50 AM.png
  3. Save the token generated on the Teleport server:
    • sudo vi /var/lib/teleport/token
    • Screenshot 2023-10-30 at 3.36.42 PM.png
  4. Save the ca_pin generated on the Teleport server:
    • sudo vi /var/lib/teleport/ca_pin
    • Screenshot 2023-12-19 at 11.25.37 AM.png
  5. Edit the /etc/teleport.yaml to update the ca_pin resource:
    • sudo vi /etc/teleport.yaml
    • Update the ca_pin resource with the file path to the token /var/lib/teleport/ca_pin
    • Add labels: section under ssh_service:
  6. Remove commands: section under ssh_service:
  7. Add labels: under app_service: -> apps: -> <dc>-maas service
  8. Sample /etc/teleport.yaml file
  9. Add Teleport to /etc/hosts
    • sudo vi /etc/hosts
    • add an entry of 10.10.100.22 <Domain name of your teleport server> Note: what you made here
    • Screenshot 2023-12-19 at 11.39.48 AM.png
    • Save and quit the file
  10. Start the Teleport agent:
    • sudo systemctl enable teleport
    • sudo systemctl start teleport

Continue to next section: D. Initial Configuration of Maas Server

Go to the index of the Gen-1.5 RMU build runbook.

Retrieved from "https://wiki.internetcomputer.org/w/index.php?title=RMU_build_Gen-1.5:_III._Maas_-_C._Share_Services_Via_Teleport&oldid=7425"