How do you add a teleport machine automatically?

[mertcangokgoz]

Hello,

I've started using Teleport and I'm very satisfied with it. I have nearly 1,000 machines and I want to add them all to Teleport in bulk. Currently, I'm doing it one by one, which is quite tedious.

I've researched this but couldn't find a method - I might have missed something.

What is the best practice approach for this?

[stevenGravy]

Greeting, auto-discovery is supported for AWS, Azure and GCP accounts. Please see https://goteleport.com/docs/enroll-resources/auto-discovery/servers/. If you are in another type of env typically ansible or other similar methods are used to enroll with installation scripts.

[mertcangokgoz]

Thank you. We use DigitalOcean and Vultr. I'm not sure if we can use the same enrollment script on multiple machines without issues, because when I tried it, it only detected one machine but caused problems with the other one.

I will check the documents again and make adjustments. Thank you.

[Imambash6]

This is the same issue that brought me here.
so no need for me to create a new issue, i'll hang around here for a solution specifically for Digital Ocean.

[mertcangokgoz]

I want to perform Teleport installations on my machines using Ansible. I have a few questions here:

1. The username used for SSH access varies between machines - how do we use this as a variable in the application?
2. The Debian and Ubuntu scripts look different, but would using a single enroll token cause any issues?

Is there an example of Teleport with Ansible?

@stevenGravy

[stevenGravy]

There is not a specific ansible install currently, may be something we add in the future. I would take a look at the linux options that best fit your env here. https://goteleport.com/docs/installation/linux/#installing-teleport-as-an-agent

[mertcangokgoz]

Can't we create a permanent join token manually? I couldn't see it in the documentation. I think I can write an Ansible playbook for the agent installation from the URL you sent for installing on 300 machines. I can handle most of the changes using the sed command and this method could work.

[stevenGravy]

You can create a static token on the auth service config. Instead of that I would create tokens as part of an initial script that sends the Ansible commands. Otherwise static or log running tokens open you up to unintended agents able to join from
anywhere.

[mertcangokgoz]

Could you help me? I think I was forgotten :)