-
Notifications
You must be signed in to change notification settings - Fork 1.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Operator managed trusted_cluster guide #50847
base: master
Are you sure you want to change the base?
Conversation
Amplify deployment status
|
6f202fb
to
b1408a7
Compare
b1408a7
to
954c9a5
Compare
954c9a5
to
024116c
Compare
docs/pages/admin-guides/infrastructure-as-code/teleport-operator/trusted-cluster.mdx
Outdated
Show resolved
Hide resolved
docs/pages/admin-guides/infrastructure-as-code/teleport-operator/trusted-cluster.mdx
Outdated
Show resolved
Hide resolved
docs/pages/admin-guides/infrastructure-as-code/teleport-operator/trusted-cluster.mdx
Outdated
Show resolved
Hide resolved
|
||
## Prerequisites | ||
|
||
- Access to **two** Teleport cluster instances. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would clarify that we expect each cluster to be on a Linux server, then link to the Linux demo guide. Otherwise, I didn't know "instances" meant "VM instances" until I got a couple items into Step 1.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't think "instances" here means VM instance or has anything to do with linux. I believe what this is trying to convey is that in order to set up a trusted cluster that there must be TWO teleport clusters already deployed before the trust relationship can be established.
Replace `rootcluster.example.com` with the Teleport root cluster domain and | ||
`myuser` with your Teleport username. | ||
|
||
1. Generate the invitation token by running the following command: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Do we refer to join tokens as invitation token anywhere else in the docs?
1. Generate the invitation token by running the following command: | |
1. Generate the join token by running the following command: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A lot of the documentation was copied from the main trusted clusters doc https://goteleport.com/docs/admin-guides/management/admin/trustedclusters/.
I'll go ahead and update the wording to use 'join' in that guide as well.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It seems like we use 'invitation token' quite a bit in the docs actually. We might want to address this separately across all our docs.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We've not been very good at consistent naming in the past, but last year we consolidated the terms to "join method", and "join token": https://goteleport.com/docs/reference/join-methods/
You don't have to clean old pages, but it's better to favour the official terms in new pages.
The other guides in the section (user/role, access lists, agentless nodes) are covering all 3 IaC tools: terraform, tctl and the operator. Is it possible to do the same for this guide and use tabs to show the examples for every tool? Documentation fragmentation is a big issue for out IaC today and most users don't know how to create the basic resources with IaC. Consolidating all IaC tools in the same docs page helps reducing the gaps between IaC methods. |
The latest version of terraform does not support single quotes
Closes #22474
This PR adds a guide for how to manage trusted_clusters with the Teleport Operator.