Skip to main content
Version: 19.x (unreleased)

Kubernetes Clusters

Protect Kubernetes clusters with granular role-based access controls, audit logging, and session recording.

Report an Issue

Enroll your first Kubernetes cluster

Log in with SSO and securely access enrolled Kubernetes clusters. Manage access within clusters with granular RBAC down to specific cluster resources, and achieve compliance needs with session recordings and detailed audit logs.

Get started with Kubernetes access

Kubernetes Access overview

Securely access Kubernetes clusters with SSO, RBAC and audit logging.

Troubleshooting

Common Kubernetes access issues and their solutions.

Access controls

RBAC for Kubernetes

Learn how Teleport's Kubernetes Service intercepts API requests and enforces access with Teleport roles.

Configure and set up

Set up Teleport roles to manage Kubernetes access with a hands-on example using a local Kubernetes cluster.

Auto-discover Kubernetes clusters

Azure Kubernetes Service (AKS) auto-discovery

Automatically discover any AKS cluster and enroll it in Teleport.

Elastic Kubernetes Service (EKS) auto-discovery

Automatically discover any EKS cluster and enroll it in Teleport

Google Kubernetes Engine (GKE) auto-discovery

Automatically register your GKE clusters with Teleport

Additional registration options

Dynamic Kubernetes registration

Manage clusters without changing each service's configuration files.

Using AWS IAM joining

Use an AWS IAM identity to automatically enroll a Kubernetes cluster with Teleport.

Using a static kubeconfig

Run Teleport Kubernetes Service on a Linux host outside the cluster to manage access.