search

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.68k stars 1.77k forks source link

[teleport-update] Support for Enterprise/FIPS migration #49451

Open sclevine opened 12 hours ago

sclevine commented 12 hours ago

This PR adds support for migrating agents to/from Enterprise or Enterprise FIPS editions of Teleport

This is accomplished by storing install flags in update.yaml, and appending _ent or _ent_fips to version directories.

ubuntu@legendary-mite:~$ ./teleport-update status
proxy: example.com
enabled: true
pinned: false
active:
    version: 16.4.7
    flags: [Enterprise]
target:
    version: 16.4.7
    flags: [Enterprise]
in_window: true
jitter: 1m0s

The teleport-update binary will be used to enable, disable, and trigger automatic Teleport agent updates. The new auto-updates system manages a local installation of the cluster-specified version of Teleport stored in /var/lib/teleport/versions.

RFD: https://github.com/gravitational/teleport/pull/47126 Goal (internal): https://github.com/gravitational/cloud/issues/10289