64898b2c79
Some checks failed
Code scanning / CodeQL (push) Failing after 15s
Zulip production suite / Ubuntu 22.04 production build (push) Failing after 26s
Zulip production suite / Debian 12 production install with custom db name and user (push) Has been skipped
Zulip production suite / Ubuntu 22.04 production install and PostgreSQL upgrade with pgroonga (push) Has been skipped
Zulip production suite / Ubuntu 24.04 production install (push) Has been skipped
Zulip production suite / Ubuntu 26.04 production install (push) Has been skipped
Zulip production suite / Debian 13 production install (push) Has been skipped
Zulip production suite / 7.0 Version Upgrade (push) Has been skipped
Zulip production suite / 8.0 Version Upgrade (push) Has been skipped
Zulip production suite / 6.0 Version Upgrade (push) Has been skipped
Zulip production suite / 10.0 Version Upgrade (push) Has been skipped
Zulip production suite / 9.0 Version Upgrade (push) Has been skipped
Zulip production suite / 12.0 Version Upgrade (push) Has been skipped
Zulip production suite / 11.0 Version Upgrade (push) Has been skipped
GitHub Actions Security Analysis with zizmor / zizmor (push) Failing after 3s
Zulip CI / Debian 12 (Python 3.11, backend + documentation) (push) Failing after 26s
Zulip CI / Ubuntu 22.04 (Python 3.10, backend + frontend) (push) Failing after 3s
Zulip CI / Ubuntu 24.04 (Python 3.12, backend) (push) Failing after 25s
Zulip CI / Ubuntu 26.04 (Python 3.14, backend) (push) Failing after 25s
Zulip CI / Debian 13 (Python 3.13, backend) (push) Failing after 28s
Zulip production suite / Required jobs (push) Has been cancelled
Zulip CI / Required jobs (push) Has been cancelled
API Documentation Update Check / check-feature-level-updated (push) Has been cancelled
API Documentation Update Check / notify-if-api-docs-changed (push) Has been cancelled
49 lines
1.3 KiB
Puppet
49 lines
1.3 KiB
Puppet
# @summary Provide a local application proxy
|
|
# https://goteleport.com/docs/reference/machine-workload-identity/configuration/#application-proxy
|
|
class kandra::teleport::tbot {
|
|
include kandra::teleport::base
|
|
|
|
file { '/etc/tbot.yaml':
|
|
ensure => file,
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
source => 'puppet:///modules/kandra/tbot.yaml',
|
|
before => Service['tbot'],
|
|
notify => Exec['reload tbot'],
|
|
}
|
|
|
|
file { '/etc/systemd/system/tbot.service':
|
|
require => [
|
|
Package[teleport],
|
|
],
|
|
owner => 'root',
|
|
group => 'root',
|
|
mode => '0644',
|
|
source => 'puppet:///modules/kandra/tbot.service',
|
|
notify => [Exec['reload systemd'], Service['tbot']],
|
|
}
|
|
|
|
file { ['/var/lib/teleport/bot', '/var/lib/teleport/bot-identity']:
|
|
ensure => directory,
|
|
owner => 'teleport',
|
|
group => 'teleport',
|
|
mode => '0644',
|
|
require => Service['teleport'],
|
|
before => Service['tbot'],
|
|
}
|
|
|
|
service {'tbot':
|
|
ensure => running,
|
|
enable => true,
|
|
require => [Service['teleport'], Exec['reload systemd']],
|
|
}
|
|
|
|
# See the equivalent in kandra::teleport::part.
|
|
exec { 'reload tbot':
|
|
command => '/bin/systemctl reload tbot',
|
|
refreshonly => true,
|
|
require => Service['tbot'],
|
|
}
|
|
}
|