does not generate a config for clusterrole.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE does not generate a config for pdb.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot and tests for annotations.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: annotations: kubernetes.io/config: test-annotation kubernetes.io/config-different: 2 name: RELEASE-NAME namespace: NAMESPACE matches snapshot and tests for extra-labels.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: labels: app.kubernetes.io/name: teleport-kube-agent resource: config name: RELEASE-NAME namespace: NAMESPACE matches snapshot for affinity.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for all-v6.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: apps: - labels: environment: test name: grafana uri: http://localhost:3000 enabled: true auth_service: enabled: false db_service: databases: - labels: database: staging name: aurora protocol: postgres uri: postgres-aurora-instance-1.xxx.us-east-1.rds.amazonaws.com:5432 enabled: true kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name labels: cluster: testing proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: annotations: kubernetes.io/config: test-annotation kubernetes.io/config-different: 2 name: RELEASE-NAME namespace: NAMESPACE matches snapshot for aws-databases.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: aws: - regions: - us-east-1 tags: '*': '*' types: - rds - regions: - us-west-2 tags: env: development types: - rds enabled: true kubernetes_service: enabled: false proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for azure-databases.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: azure: - tags: '*': '*' types: - mysql - postgres - regions: - eastus - centralus resource_groups: - group1 - group2 subscriptions: - subID1 - subID2 tags: env: - dev - staging origin: alice types: - mysql enabled: true kubernetes_service: enabled: false proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for backwards-compatibility.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for ca-pin.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: ca_pin: - sha256:7e12c17c20d9cb504bbcb3f0236be3f446861f1396dcbb44425fe28ec1c108f1 join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for db.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: databases: - labels: database: staging name: aurora protocol: postgres uri: postgres-aurora-instance-1.xxx.us-east-1.rds.amazonaws.com:5432 enabled: true kubernetes_service: enabled: false proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for dynamic-app.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: true resources: - labels: '*': '*' auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: false proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for dynamic-db.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: true resources: - labels: '*': '*' kubernetes_service: enabled: false proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for imagepullsecrets.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for initcontainers.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for join-params-iam.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: iam token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for join-params-token.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for log-basic.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: json output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for log-extra.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - level - timestamp - component - caller output: json output: /var/lib/teleport/test.log severity: DEBUG proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for log-legacy.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: DEBUG proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for node-selector.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for pdb.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - level - timestamp - component - caller output: json output: /var/lib/teleport/test.log severity: DEBUG proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for resources.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for stateful.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for tolerations.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for v10.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: auth_servers: - proxy.example.com:3080 join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for v11.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster-name proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE matches snapshot for volumes.yaml: 1: | apiVersion: v1 data: teleport.yaml: |- app_service: enabled: false auth_service: enabled: false db_service: enabled: false kubernetes_service: enabled: true kube_cluster_name: test-kube-cluster proxy_service: enabled: false ssh_service: enabled: false teleport: join_params: method: token token_name: /etc/teleport-secrets/auth-token log: format: extra_fields: - timestamp - level - component - caller output: text output: stderr severity: INFO proxy_server: proxy.example.com:3080 version: v3 kind: ConfigMap metadata: name: RELEASE-NAME namespace: NAMESPACE