3 ms·
Yes, the security portion of our clusters is handled by Teleport, which is OSS and its architecture is well-documented here: http://gravitational.com/teleport/d
by old-gregg 9y ago
Yes, the security portion of our clusters is handled by Teleport, which is OSS and its architecture is well-documented here:
http://gravitational.com/teleport/docs/2.0/architecture/ http://gravitational.com/teleport/docs/2.0/architecture/
Teleport maps your corporate groups/roles to both SSH and Kubernetes.
- raesene6 9y agothanks for that. I was perhaps more thinking of areas around how you configure kubernetes. for example, do you use RBAC, do you configure kubelet authentication/authorization, what certificates are used by the API server for etcd authentication? that kind of thing :) If there's manifests/pod speccs for the components that'd probably have the answers...