How to add postgres db via teleport GUI

[mailman78]

I have an issue adding database via Teleport GUI:

root@pg4:# sudo bash -c "$(curl -fsSL https://teleport.sandbox.skidata.com/scripts/27d7b4510742d47bdfabed3a22f56288/install-database.sh)"
2025-02-19 12:05:29 CET [teleport-installer] TELEPORT_VERSION: 17.0.2
2025-02-19 12:05:29 CET [teleport-installer] TARGET_HOSTNAME: teleport.sandbox.skidata.com
2025-02-19 12:05:29 CET [teleport-installer] TARGET_PORT: 443
2025-02-19 12:05:29 CET [teleport-installer] JOIN_TOKEN: 27d7b4510742d47bdfabed3a22f56288
2025-02-19 12:05:29 CET [teleport-installer] CA_PIN_HASHES: sha256:08c445adbaaacc500b58923cacc9ab52a4713d265b12359b754f48e587a4eeb2
2025-02-19 12:05:29 CET [teleport-installer] Checking TCP connectivity to Teleport server (teleport.sandbox.skidata.com:443)
2025-02-19 12:05:29 CET [teleport-installer] Connectivity to Teleport server (via nc) looks good
2025-02-19 12:05:29 CET [teleport-installer] Detected host: linux-gnu, using Teleport binary type linux
2025-02-19 12:05:29 CET [teleport-installer] Detected arch: x86_64, using Teleport arch amd64
2025-02-19 12:05:29 CET [teleport-installer] Detected distro type: debian
2025-02-19 12:05:29 CET [teleport-installer] Using Teleport distribution: deb
2025-02-19 12:05:29 CET [teleport-installer] Created temp dir /tmp/teleport-pTK3spRQ2w
2025-02-19 12:05:29 CET [teleport-installer] Installing repo for distro ubuntu.
curl: (28) Failed to connect to apt.releases.teleport.dev port 443 after 278916 ms: Connection timed out
root@pg4:# ufw status
Status: active

To Action From

---

22/tcp ALLOW Anywhere
161/udp ALLOW Anywhere
9102/tcp ALLOW Anywhere
5666/tcp ALLOW Anywhere
2380/tcp ALLOW Anywhere
5432/tcp ALLOW Anywhere
8008/tcp ALLOW Anywhere
2379/tcp ALLOW Anywhere
22/tcp (v6) ALLOW Anywhere (v6)
161/udp (v6) ALLOW Anywhere (v6)
9102/tcp (v6) ALLOW Anywhere (v6)
5666/tcp (v6) ALLOW Anywhere (v6)
2380/tcp (v6) ALLOW Anywhere (v6)
5432/tcp (v6) ALLOW Anywhere (v6)
8008/tcp (v6) ALLOW Anywhere (v6)
2379/tcp (v6) ALLOW Anywhere (v6)

I have set up the rules on firewall, and we are behind cloudflare.

What might be an issue here?

After that I have tried, other things and in the end:

root@pg4:~# sudo bash -c "$(curl -fsSL https://teleport.sandbox.skidata.com/scripts/c2995fd25ebddf5ec840913933a27225/install-database.sh)"
curl: (22) The requested URL returned error: 503

Thanks in advance,
Dusko

Add to conversation
Requester Dusko Brnic Created Today, 12:37 PM Last activity Today, 12:37 PM
Id #13201 Status Open Severity S3 (General issue) Product Teleport Teleport Version 16.x
Teleport

[webvictim]

It appears that your server does not have outbound network connectivity to apt.releases.teleport.com, as indicated by this message:

curl: (28) Failed to connect to apt.releases.teleport.dev port 443 after 278916 ms: Connection timed out

In order for the install script to work correctly, it requires outbound connectivity to the internet.

[mailman78]

Hi webvictim,

I have made it. Firewall rule was needed. I have added database via GUI and if I try to connect as a client:

Do you know what to do?

[webvictim]

What does tsh db ls -v show? It should list database users that you are able to use.

If it does not, take a look at https://goteleport.com/docs/enroll-resources/database-access/troubleshooting/#access-to-db-denied

[mailman78]

btw, this URL is not valid:
https://goteleport.com/docs/database-access/troubleshooting/#access-to-db-denied

[webvictim]

Apologies, this is the new link: https://goteleport.com/docs/enroll-resources/database-access/troubleshooting/#access-to-db-denied

I'll get the original one fixed.

[mailman78]

Thanks!
Anyway, something is strange, as a developer-db user I can not see nothing:

Here it is role:


Why is that?
I have added db via teleport GUI...db service is running on database server