Skip to content

ci: add pipeline to build/push distroless images to loadsmart registry#1

Merged
raphapr merged 9 commits into
masterfrom
ci/build-ls-binaries
Jun 25, 2025
Merged

ci: add pipeline to build/push distroless images to loadsmart registry#1
raphapr merged 9 commits into
masterfrom
ci/build-ls-binaries

Conversation

@raphapr
Copy link
Copy Markdown

@raphapr raphapr commented Jun 25, 2025

Motivation and context for the change

Teleport CE's license change (v16+) restricts commercial use of prebuilt binaries and containers. Loadsmart must build and use its own binaries from AGPLv3 source to remain compliant and maintain secure infrastructure access.

PLATFORM-6525

A clear description of the change

  • Build Loadsmart's own Teleport binaries from AGPLv3 source
  • Build a distroless container image
  • Push the image to a private ECR
  • Fix build errors related to Rust compilation
  • Add Terraform code for CircleCI/ECR configuration
  • Disable GitHub actions
  • Disable Atlantis

Testing

  • The change is covered with automated tests

Testing instructions

Rollback

  • The change can be automatically rolled back

Rollback instructions

@raphapr raphapr marked this pull request as ready for review June 25, 2025 19:40
@raphapr raphapr requested a review from a team June 25, 2025 19:40
Copy link
Copy Markdown

@giovannitoledols giovannitoledols left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

pair review. lgtm!

@raphapr raphapr merged commit 09b0cf2 into master Jun 25, 2025
7 checks passed
@loadsmart-deploy
Copy link
Copy Markdown

Locks and plans deleted for the projects and workspaces modified in this pull request:

  • dir: terraform/general workspace: default

@raphapr raphapr deleted the ci/build-ls-binaries branch June 25, 2025 21:04
raphapr added a commit that referenced this pull request Jun 26, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Jun 27, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Jun 27, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
@loadsmart loadsmart deleted a comment from loadsmart-deploy Jun 27, 2025
@loadsmart loadsmart deleted a comment from loadsmart-deploy Jun 27, 2025
raphapr added a commit that referenced this pull request Jun 30, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Jul 10, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Jul 10, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr pushed a commit that referenced this pull request Jul 10, 2025
…48008)

* Always attempt desktop discovery, even if LDAP is not ready

If Teleport loses it's connection to the LDAP server, it will
attempt to initiate a new condition when:

1. The user tries to connect to a desktop and Teleport fails
   to obtain the user's SID.
2. The periodic desktop discovery routine attempts to search
   LDAP for desktops.

In some circumstances, #2 never gets the chance to apply, since
discovery is skipped when LDAP is not ready. Additionally, if
LDAP is not ready, then you can't connect to a desktop, so #1
can't happen either, which means Teleport won't connect again
until it is restarted.

* Periodically use the LDAP connection when discovery is not enabled

If LDAP-based discovery is not enabled then we may go long periods
of time without trying to use the LDAP connection, which prevents
us from detecting disconnects (and restoring the connection) in a
timely manner.

When discovery is disabled, perform a read every 5 minutes and
reconnect if we detect a connection problem.

* Address review comments

* Fix some LDAP connection bugs

In gravitational#36281 we made some improvements to the LDAP reconnect behavior.
These changes considered the case where we had a connection to the
LDAP server but then got disconnected. They did not consider the case
where we never succesfully established a connection at all.

* Fix typo

---------

Co-authored-by: Gus Luxton <gus@goteleport.com>
raphapr added a commit that referenced this pull request Jul 10, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Jul 18, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Jul 24, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Aug 5, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Aug 5, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
raphapr added a commit that referenced this pull request Oct 3, 2025
#1)

* add terraform config

* add circleci config

* fix build errors

* include terraform lock file to the gitignore

* add disclaimer to the README

* Update CODEOWNERS

* update circleci to build and push the distroless image

* add PR template

* disable atlantis
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants