Adding support for teleport

Signed-off-by: chinkitp <chinkit.patel@gmail.com>

Author: chinkitp

cluster.yaml

@@ -6,6 +6,9 @@ metadata:
     projectName: audio
     dryRun: false
 
+apps:
+  sourceDirectoryPath: "apps"
+
 gitOps:
   directoryName: "./cluster"
 

cluster/infrastructure/controllers/kustomization.yaml

@@ -5,3 +5,4 @@ resources:
   - ./kubelet/components.yaml
   - ./headlamp/components.yaml
   - runtime-class.yaml
+  - ./teleport/

cluster/infrastructure/controllers/teleport/agent.yaml

@@ -0,0 +1,35 @@
+---
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: HelmRepository
+metadata:
+  name: teleport-kube-agent
+  namespace: kube-system
+spec:
+  interval: 24h
+  url: https://charts.releases.teleport.dev
+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: teleport-agent
+  namespace: kube-system
+spec:
+  chart:
+    spec:
+      chart: teleport-kube-agent
+      reconcileStrategy: ChartVersion
+      sourceRef:
+        kind: HelmRepository
+        name: teleport-kube-agent
+      version: 15.4.2
+  interval: 1m0s
+  values:
+    kubeClusterName: patel02
+    joinTokenSecret:
+      create: false
+    labels:
+      teleport.internal/resource-id: kubox-k8s
+      aws/Cluster: patel02
+      aws/Project: patel02
+    proxyAddr: sso.kubox.cloud:443
+    roles: kube,app,discovery

cluster/infrastructure/controllers/teleport/kustomization.yaml

@@ -0,0 +1,5 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - agent.yaml
+  - rbac.yaml

cluster/infrastructure/controllers/teleport/rbac.yaml

@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: developer
+rules:
+  - apiGroups: [""]
+    resources: ["*"]
+    verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: global-developer
+subjects:
+  - kind: Group
+    name: team-santoku
+    apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: developer
+  apiGroup: rbac.authorization.k8s.io
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: kubox-admin
+rules:
+  - apiGroups: ["*"]
+    resources: ["*"]
+    verbs: ["*"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: global-admin
+subjects:
+  - kind: Group
+    name: team-katana
+    apiGroup: rbac.authorization.k8s.io
+roleRef:
+  kind: ClusterRole
+  name: kubox-admin
+  apiGroup: rbac.authorization.k8s.io