Say Goodbye to Manual Kubernetes User Access Onboarding
summary
Claims that replacing manual onboarding with open source Teleport removes copied credentials by issuing short-lived x509 certificates per session, mapping SSO identities to Kubernetes RBAC, and routing traffic through a reverse proxy tunnel for encrypted connectivity. Demo shows tsh + kubeconfig issuance, session revocation, and centralized audit logs, and notes Teleport 11 adds GitHub Actions and automatic service discovery. Backing stats include ~50% Kubernetes adoption and ~40% of clusters with lax privileges plus millions of leaked secrets, framing urgency and effectiveness.
AI-written summary · about
chapters (9)
- 0:00Security pain points
- 3:51Human error and breaches
- 7:03Kubernetes access risks
- 8:53Kubernetes Iceberg complexity
- 11:04Introducing Teleport
- 14:58Teleport architecture
- 16:03Live demo
- 20:39Teleport features
- 21:00Future of Teleport
related talks
30mWhy Machines Deserve Rights: Rethinking Automated Infrastructure Access with OSS Te...
28mFrom Network Engineer to K8s Developer: Lessons Learned via Telepresence
26mSecuring Access to Kubernetes Infrastructure with Kubernetes Zero Trust Principles
25mSecuring Kubernetes Multi-Tenancy: Navigating Challenges Through DevSecOps Control and Visibility
26mScaling Multi-cluster Kubernetes at Teleport Cloud
45mBeyond cluster-admin: Getting Started with Kubernetes Users and Permissions
30mSecuring Kubernetes Multi-Tenancy
01h 59mBuilding Secure Kubernetes Clusters with Identity Management