Teleport Universal Access Plane
www.goteleport.com
Role Based Access Control
(RBAC) for SSH and
Kubernetes Access
© Teleport, 2020 | goteleport.com

● Brief overview of Teleport
● Comparing RBAC vs other methods for
securing access in your enterprise
● Defining and using Roles within Teleport
● Demonstration with multiple configured
Roles
Agenda
Role Based Access Control (RBAC) for SSH and
Kubernetes Access

3
SSO

Role Based Access Control (RBAC)
Roles defined within an enterprise allow for
control assignable to multiple users in a
more centralized approach. Other common
methods include Discretionary Access
Control(DAC) and Mandatory Access
Control (MAC).

Role Based Access Control
Roles defined within an enterprise allow for
control assignable to multiple users in a
more centralized approach. Other common
methods include Discretionary Access
Control(DAC) and Mandatory Access
Control (MAC).
RBAC

RBAC in Teleport
● Allowed and Denied
● Label Access
● Request Roles for Access Workflow
● Logins
● Kubernetes Groups/Users
● Time To Live (TTL)
● Teleport features access
Defining roles in Teleport

SSO to Roles
Developer
DB Admin
Dev
Builder
Dev DB
Groups/Roles
Teleport
Roles
User
Auth Connector
Resources
Usernames: jeff, k8s..
App

RBAC
- Enables partitioning access to SSH,
Applications and K8s to individual
Teleport clusters trusted to a single
cluster.
- Root cluster roles are mapped to clusters’
individual roles
TRUSTED CLUSTERS

Demonstration

How can you do this easily?
●
●
●
●
https://github.com/gravitational/teleport

Recommended Next Steps
Read “RBAC for SSH & K8s”
https://goteleport.com/teleport/docs/enterprise/ssh-rbac
Check us out on Github
https://github.com/gravitational/teleport
Download Teleport
https://gravitational.com/teleport/download

Q & A

Thanks!