You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Deploy teleport-operator as part of MC creation to ensure creation of teleport join token before we pivot from Kind to infrastructure provider (AWS, GCP, etc).
The text was updated successfully, but these errors were encountered:
As discussed with the team, we will be using short-lived certificate through Machine ID, teleport-operator no longer needs to be added to mc-bootstrap cause we won't be using static credential.
However, we get into chicken-egg problem, because cluster provider chart references a token which is created by teleport-operator, and since, Machine ID only works when Kubernetes API is ready, we will be creating a dummy teleport join token secret to unblock cluster provider chart, and later when teleport-operator is deployed via app collection, we roll out nodes again.
I think it's not ideal solution, but so far this is what we come up with, until we figure out a better way.
Deploy
teleport-operator
as part of MC creation to ensure creation of teleport join token before we pivot from Kind to infrastructure provider (AWS, GCP, etc).The text was updated successfully, but these errors were encountered: