WIP: Trying to install teleport

common/environments.yaml

@@ -12,6 +12,8 @@ environments:
           enabled: false
       - openebs:
           enabled: true
+      - teleport:
+          enabled: true
   etersoft:
     kubeContext: etersoft
     values:
@@ -25,3 +27,5 @@ environments:
           enabled: false
       - localpath:
           enabled: true
+      - teleport:
+          enabled: false

installations/platform/helmfile.yaml

@@ -104,3 +104,11 @@ releases:
       bootstrap: true
     needs:
       - kyverno/kyverno
+  - name: teleport-cluster
+    installed: false
+    version: 16.4.2
+    chart: teleport/teleport-cluster
+    namespace: teleport-cluster
+    condition: teleport.enabled
+    inherit:
+      - template: default-env-values

values/badhouseplants/values.namespaces.yaml

@@ -7,3 +7,6 @@ namespaces:
   - name: games
   - name: pipelines
   - name: public-xray
+  - name: teleport-cluster
+    labels:
+      pod-security.kubernetes.io/enforce: baseline

values/badhouseplants/values.teleport-cluster.yaml

@@ -0,0 +1,20 @@
+clusterName: badhouseplants
+proxyListenerMode: multiplex
+acme: true
+acmeEmail: allanger@badhouseplants.net
+service:
+  type: ClusterIP
+ingress:
+  enabled: true
+proxy:
+  annotations:
+    ingress:
+      kubernetes.io/tls-acme: "true"
+      kubernetes.io/ingress.allow-http: "false"
+      kubernetes.io/ingress.global-static-ip-name: ""
+      cert-manager.io/cluster-issuer: badhouseplants-issuer-http01
+      traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
+      #tls:
+    #existingSecretName: teleport.badhouseplants.net
+publicAddr:
+  - teleport.badhousplants.net:443