Try out Teleport Assist
- Version 15.x
- Version 14.x
- Version 13.x
- Version 12.x
- Older Versions
- Available for:
Teleport Assist is currently in Preview.
This guide will help you understand how to set up and use Teleport Assist, an AI-powered assistant that helps you run commands, debug issues and navigate your infrastructure.
Teleport Assist is available starting from Teleport
v12.4 for Teleport
Before you get started with Teleport Assist, make sure you have the following:
- A running Teleport Community Edition cluster. For details on how to set this up, see our Getting Started guide.
- OpenAI Account: You will need an active OpenAI account with GPT-4 API access as Teleport Assist relies on OpenAI services.
If you don't have access to OpenAI GPT-4 API, you can still try out Teleport Assist by signing up for a Teleport Team plan.
Teleport Assist currently doesn't support Teleport clusters using the etcd backend. If your installation is using etcd, you can create a new cluster with any other backend or sign up for the Teleport Team plan.
Teleport Assist uses the GPT-4 model. Your account must have access to it if you want to use Teleport Assist.
Follow these steps to generate your OpenAI API key:
- Sign in to your OpenAI account or sign up if you don't have one.
- Navigate to the API section in your OpenAI dashboard.
- Click on "Create new secret key".
- Give your key a descriptive name.
- Click "Create secret key".
- Your new API key will be displayed. Make sure to copy it and save it in a
file on the system where the Teleport Proxy Service is running, e.g.,
/etc/teleport/openai_key. If you have multiple instances of Teleport Proxy, you must copy the file to all of them.
- Set read-only permissions and change the file owner to the user that the Teleport Proxy Service uses by running the following commands:
chmod 400 /etc/teleport/openai_key chown teleport:teleport /etc/teleport/openai_key
Remember, your API keys carry many privileges, so be sure to keep them secure! Do not share your secret API keys in publicly accessible areas.
To enable Teleport Assist, you need to provide your OpenAI API key. On each Proxy and Auth Service host, perform the following actions:
Open your Teleport configuration file. This is typically located at
Add your OpenAI API key to the
If the host is running the Auth Service, add the following section:
auth_service: assist: openai: api_token_path: /etc/teleport/openai_key
If the host is running the Proxy Service, add the following section:
proxy_service: assist: openai: api_token_path: /etc/teleport/openai_key
Save the changes and close the file.
Restart Teleport for the changes to take effect.
Make sure that your Teleport user has the
assistant permission. By default, users
editor roles have this permission. You can also
add it to a custom role. Here is an example:
kind: role version: v7 metadata: name: assist spec: allow: rules: - resources: - assistant verbs: - list - create - read - update - delete
Now that you have Teleport Assist enabled, you can start using it.
- Open Teleport's Web UI in your browser (e.g., https://teleport.example.com).
- Log in to the Web UI using your Teleport credentials.
- Click on the "Assist" button in the top left dropdown menu.
- Click "New Conversation" to start a new conversation with Teleport Assist.
Remember, Teleport Assist is powered by OpenAI, so the more specific your query, the better the response will be.
And that's it! You have now learned how to set up and use Teleport Assist. For more details and advanced configuration options, check out the other pages in our documentation.