Difference between revisions of "RMU build Gen-1.5: III. Maas - C. Share Services Via Teleport"

Revision as of 19:25, 26 February 2024

This page is part of the Gen-1.5 RMU build runbook.

Go back to the previous section: B. Install Maas Software via APT

Ref: https://www.youtube.com/watch?v=cvW4b96aPL0

Create a short lived token to “invite” the MaaS application
- tctl tokens add --type=app,node --app-name=<dc>-maas --app-uri=http://localhost:5240
- Take note of the token and ca_pin values

Install the Teleport agent:
- sudo curl <https://goteleport.com/static/install.sh> | bash -s <teleport version>
create the Teleport application config:
- sudo teleport configure --output=file --proxy=<domain name>:443 --token=/var/lib/teleport/token --roles=app,node --app-name=<dc>-maas --app-uri=http://localhost:5240
Save the token generated on the Teleport server:
- sudo vi /var/lib/teleport/token
Save the ca_pin generated on the Teleport server:
- sudo vi /var/lib/teleport/ca_pin
Edit the /etc/teleport.yaml to update the ca_pin resource:
- sudo vi /etc/teleport.yaml
- Update the ca_pin resource with the file path to the token /var/lib/teleport/ca_pin
- Add labels: section under ssh_service:
```
labels:
    dc: "<dc>"
    login: "<admin user login>"
```

Remove commands: section under ssh_service:

commands:
  - name: hostname
    command: [hostname]
    period: 1m0s

Add labels: under app_service: -> apps: -> <dc>-maas service

- name: <dc>-maas
    uri: http://localhost:5240
    public_addr: ""
    insecure_skip_verify: false
    labels:
      dc: "<dc>"
      type: "maas"

Sample /etc/teleport.yaml file
Add Teleport to /etc/hosts
- sudo vi /etc/hosts
- add an entry of 10.10.100.22 <Domain name of your teleport server> Note: what you made here
- Save and quit the file
Start the Teleport agent:
- sudo systemctl enable teleport
- sudo systemctl start teleport

@@ Line 26: / Line 26: @@
 #* [[File:Screenshot 2023-12-19 at 11.25.37 AM.png|800x800px]]
 # Edit the <code>/etc/teleport.yaml</code> to update the <code>ca_pin</code> resource:
-#* <code>sudo vi /etc/teleport.yaml</code>
+#*<code>sudo vi /etc/teleport.yaml</code>
 #* Update the <code>ca_pin</code> resource with the file path to the token <code>/var/lib/teleport/ca_pin</code>
-#* Add <code>labels:</code> section under <code>ssh_service:</code>
+#* Add <code>labels:</code> section under <code>ssh_service:</code><syntaxhighlight lang="yaml">
-# Remove <code>commands:</code> section under <code>ssh_service:</code>
+labels:
-# Add <code>labels:</code> under <code>app_service: -> apps: -> <dc>-maas</code> service
+    dc: "<dc>"
+    login: "<admin user login>"
+</syntaxhighlight>
+# Remove <code>commands:</code> section under <code>ssh_service:</code><syntaxhighlight lang="yaml">
+commands:
+  - name: hostname
+    command: [hostname]
+    period: 1m0s
+</syntaxhighlight>
+# Add <code>labels:</code> under <code>app_service: -> apps: -> <dc>-maas</code> service<syntaxhighlight lang="yaml">
+- name: <dc>-maas
+    uri: http://localhost:5240
+    public_addr: ""
+    insecure_skip_verify: false
+    labels:
+      dc: "<dc>"
+      type: "maas"
+</syntaxhighlight>
 # Sample <code>/etc/teleport.yaml</code> file
 # Add Teleport to <code>/etc/hosts</code>