Skip to main content

Teleport Cluster

Teleport is a unified access plane for infrastructure (SSH, Kubernetes API, databases, apps). This chart deploys the central Teleport proxy/auth cluster (clusterName in values.yaml, e.g. teleport.obmondo.com) that managed clusters join through.

Deprecated: Teleport is no longer KubeAid's default access layer — new clusters use the NetBird mesh with Keycloak SSO instead. This chart remains available for existing setups.

Why it's in KubeAid​

KubeAid previously used Teleport as the access layer for managed clusters: instead of distributing raw kubeconfigs, each managed cluster runs the teleport-kube-agent chart and joins this central cluster, so cluster access can be issued/revoked/audited from one place. On current clusters that role is filled by NetBird (mesh access) and Keycloak (SSO).

Upgrade​

  • Check pv is set to Retain

  • Backup data by taking a shell on the teleport-cluster pod

    tctl get all --with-secrets > state.yaml

  • Copy the backup to local laptop/desktop

    kubectl cp teleport-cluster/teleport-cluster-7dcbdbfc7d-drhg4:/backup.yaml .

    (teleport-cluster-7dcbdbfc7d-drhg4 is an example pod name — substitute the actual pod from kubectl get pods -n teleport-cluster.)

Docs​