Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/gravitational/teleport/llms.txt

Use this file to discover all available pages before exploring further.

Teleport is an identity-aware infrastructure access platform that replaces shared credentials, VPNs, and bastion hosts with certificate-based authentication, fine-grained RBAC, and a complete audit trail. Whether you’re connecting to an SSH node, a Kubernetes cluster, a PostgreSQL database, or a Windows desktop — Teleport enforces consistent access controls and records every session.

Introduction

Understand what Teleport is, how it works, and when to use it.

Core Concepts

Learn about clusters, services, certificates, and the Teleport architecture.

Quickstart: Teleport Cloud

Get up and running with Teleport Cloud in minutes — no server required.

Quickstart: Self-Hosted

Deploy Teleport on your own Linux host and protect your first server.

Protect Your Infrastructure

Server Access

Certificate-based SSH to Linux servers with session recording and audit logs.

Kubernetes Access

kubectl access with RBAC, session recording, and per-cluster policies.

Database Access

Short-lived certs for PostgreSQL, MySQL, MongoDB, and more — no passwords.

Application Access

Securely expose internal web apps behind NAT without a VPN.

Desktop Access

Browser-based RDP for Windows desktops with zero agent install required.

Machine Identity

Issue short-lived certificates to workloads, bots, and CI/CD pipelines.

Access Controls

RBAC & Roles

Define who can access what using role-based and attribute-based policies.

Single Sign-On

Connect GitHub, Okta, Entra ID, or any OIDC/SAML provider in minutes.

MFA & Passwordless

Enforce hardware keys, TOTP, WebAuthn, and passwordless login cluster-wide.

Access Requests

Just-in-time privileged access with approval workflows and auto-expiry.

Deploy & Operate

Architecture Overview

Understand Auth Service, Proxy Service, and how agents connect.

Deploy a Cluster

Step-by-step guide to deploying Teleport on Linux or Kubernetes.

Configuration Reference

Complete teleport.yaml options for every service and backend.

Helm Deployment

Deploy and manage Teleport on Kubernetes using the official Helm chart.

Reference

tsh CLI

User-facing CLI for login, SSH, Kubernetes, database, and app access.

tctl CLI

Admin CLI for managing users, roles, tokens, nodes, and cluster config.

Terraform Provider

Manage Teleport resources as code with the official Terraform provider.

Go API Client

Programmatically manage your cluster with Teleport’s Go client library.

Build docs developers (and LLMs) love