icarus mngt - tbot

deploy/icarus-mngt/teleport-manifests/README.md

@@ -0,0 +1,6 @@
+# teleport
+
+``` bash
+tctl create -f deploy/icarus-mngt/teleport-manifests/manifest.yaml
+tctl bots update icarus-nodes-mngt --add-roles icarus-nodes-mngt
+```

deploy/icarus-mngt/teleport-manifests/manifest.yaml

@@ -0,0 +1,37 @@
+kind: bot
+version: v1
+metadata:
+  # name is a unique identifier for the Bot in the cluster.
+  name: icarus-nodes-mngt
+spec:
+  roles: []
+
+---
+
+
+kind: role
+version: v6
+metadata:
+  name: icarus-nodes-mngt # use the auto created bot role (created by bot yaml)
+spec:
+  allow:
+    # Allow login to the user 'ansible'.
+    logins: ['ansible']
+    # Allow connection to any node. Adjust these labels to match only nodes
+    # that Ansible needs to access.
+    node_labels:
+      '*': '*'
+
+---
+
+kind: token
+version: v2
+metadata:
+    name: icarus-nodes-mngt
+spec:
+    roles: [Bot]
+    bot_name: icarus-nodes-mngt
+    join_method: kubernetes
+    kubernetes:
+        allow:
+          - service_account: icarus-nodes-mngt:argo-runner