Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Kubernetes Enhancements #3952

Closed
14 of 16 tasks
russjones opened this issue Jun 30, 2020 · 1 comment
Closed
14 of 16 tasks

Kubernetes Enhancements #3952

russjones opened this issue Jun 30, 2020 · 1 comment
Assignees
@awly
Labels
kubernetes-access
Milestone
5.0 "Snoqualmie"

Comments

@russjones
Copy link
Contributor

russjones commented Jun 30, 2020 •
edited by awly
Loading

RFD: #4455

  • add kubernetes_service to teleport.yaml
  • add kube_listen_addr to proxy_service
  • reverse tunnels (IoT mode) for kubernetes_service
  • k8s proxy request routing to kubernetes_service
  • support multiple clusters in kubeconfig
  • RBAC for k8s
    • labels on k8s clusters
    • kubernetes_labels filter on roles
  • complete k8s audit logs (all requests)
  • tsh
    • list/switch clusters
    • exec plugin for kubectl
  • register k8s clusters handled by proxies
  • helm one-liner to deploy proxy in k8s cluster
  • migration guide
  • update test plan
@russjones russjones added this to the 5.0 Codename TBD milestone Jun 30, 2020
@awly awly mentioned this issue Sep 18, 2020
Merged
@awly awly mentioned this issue Sep 21, 2020
Merged
awly pushed a commit that referenced this issue Sep 21, 2020
Add cluster_name to proxy kubernetes config
c3535e3 
Cluster name from this field plug all clusters from kubeconfig are
stored on the auth server via heartbeats.
This info will later be used to route k8s requests back to proxies.

Updates #3952
@awly awly mentioned this issue Sep 22, 2020
Closed
awly pushed a commit that referenced this issue Sep 24, 2020
Add cluster_name to proxy kubernetes config
bd89569 
Cluster name from this field plug all clusters from kubeconfig are
stored on the auth server via heartbeats.
This info will later be used to route k8s requests back to proxies.

Updates #3952
awly pushed a commit that referenced this issue Sep 29, 2020
Add cluster_name to proxy kubernetes config
3e2b9c8 
Cluster name from this field plug all clusters from kubeconfig are
stored on the auth server via heartbeats.
This info will later be used to route k8s requests back to proxies.

Updates #3952
awly pushed a commit that referenced this issue Sep 30, 2020
@awly
Add cluster_name to proxy kubernetes config
3c2e4e2 
Cluster name from this field plug all clusters from kubeconfig are
stored on the auth server via heartbeats.
This info will later be used to route k8s requests back to proxies.

Updates #3952
This was referenced Oct 1, 2020
Merged
Merged
This was referenced Oct 8, 2020
Merged
Merged
This was referenced Oct 21, 2020
Merged
Merged
This was referenced Nov 10, 2020
Merged
Closed
Merged
Merged
Merged
Merged
@awly
Copy link
Contributor

awly commented Nov 13, 2020

All core functionality is in. Remaining tasks are docs and deployment tooling.

@awly awly closed this as completed Nov 18, 2020
@awly awly mentioned this issue Nov 18, 2020
Closed
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@awly awly

Labels
kubernetes-access
Projects
None yet
Milestone
5.0 "Snoqualmie"
Development

No branches or pull requests
3 participants
@benarent @awly @russjones