Skip to content

Commit

Permalink
Merge branch 'branch/v9' into jim/v9/sqlbk
Browse files Browse the repository at this point in the history
  • Loading branch information
jimbishopp authored Apr 4, 2022
2 parents 0cf25b5 + 0af5852 commit 97c852b
Show file tree
Hide file tree
Showing 5 changed files with 52 additions and 0 deletions.
Binary file added docs/img/machine-id/jenkins.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
15 changes: 15 additions & 0 deletions docs/pages/machine-id/getting-started.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,21 @@ Teleport Cloud account.
If you have not set up a Teleport cluster before, follow the
[Getting started](https://goteleport.com/docs/getting-started) guide.

<Admonition type="note" title="Machine ID and TLS Routing">
TLS Routing support will be added to Machine ID in [Teleport
9.1](https://goteleport.com/docs/preview/upcoming-releases/#teleport-91). Until
that time, the Teleport Proxy Server will need to be configured with a
dedicated SSH listener.

```yaml
version: v1
proxy_service:
enabled: "yes"
listen_addr: "0.0.0.0:3023"
...
```
</Admonition>

## Step 1/4. Download and install Teleport (=teleport.version=)

In this step, you will be downloading and installing Teleport binaries onto the
Expand Down
15 changes: 15 additions & 0 deletions docs/pages/machine-id/guides/ansible.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,21 @@ You will need the following tools to use Teleport with Ansible.
- `ansible` >= (=ansible.min_version=)
- Optional tool `jq` to process `JSON` output

<Admonition type="note" title="Machine ID and TLS Routing">
TLS Routing support will be added to Machine ID in [Teleport
9.1](https://goteleport.com/docs/preview/upcoming-releases/#teleport-91). Until
that time, the Teleport Proxy Server will need to be configured with a
dedicated SSH listener.

```yaml
version: v1
proxy_service:
enabled: "yes"
listen_addr: "0.0.0.0:3023"
...
```
</Admonition>

In addition, if you already have not done so, follow the
[Machine ID Getting Started Guide](../getting-started.mdx) to create a bot
user and start Machine ID.
Expand Down
19 changes: 19 additions & 0 deletions docs/pages/machine-id/guides/jenkins.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,21 @@ You will need the following tools to use Teleport with Jenkins.
- Jenkins
- The `tctl` admin tool version >= (=teleport.version=)

<Admonition type="note" title="Machine ID and TLS Routing">
TLS Routing support will be added to Machine ID in [Teleport
9.1](https://goteleport.com/docs/preview/upcoming-releases/#teleport-91). Until
that time, the Teleport Proxy Server will need to be configured with a
dedicated SSH listener.

```yaml
version: v1
proxy_service:
enabled: "yes"
listen_addr: "0.0.0.0:3023"
...
```
</Admonition>

(!docs/pages/includes/tctl.mdx!)

## Architecture
Expand Down Expand Up @@ -54,6 +69,10 @@ scope for server access, reduce the blast radius if one pipeline is
compromised, and allow you to remotely audit and lock pipelines if you detect
malicious behavior.

<Figure align="left" bordered caption="Jenkins Deployments">
![Jenkins Deployments](../../../img/machine-id/jenkins.png)
</Figure>

## Step 1/2 Configure and start Machine ID

First, determine which role(s) you would like to assign to Machine ID running
Expand Down
3 changes: 3 additions & 0 deletions docs/pages/machine-id/introduction.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,9 @@ role-based access controls and audit.
Some of the things you can do with Machine ID:

- Machines can retrieve short-lived SSH certificates for CI/CD pipelines.
- Machines can retrieve short-lived X.509 certificates for use with databases
or applications. [Coming in Teleport
9.1](https://goteleport.com/docs/preview/upcoming-releases/#teleport-91).
- Configure role-based access controls and locking for machines.
- Capture access events in the audit log.

Expand Down

0 comments on commit 97c852b

Please sign in to comment.