Teleport Kubernetes Access

Teleport Kubernetes Access is a dedicated, zero-trust Kubernetes access management gateway engineered to provide secure, identity-aware access to multi-cloud and on-premises Kubernetes clusters. Designed to replace static kubeconfig files and unmanaged cluster certificates, it integrates cluster access directly with enterprise single sign-on (SSO) and role-based access control.

The solution deploys as a lightweight proxy within or alongside Kubernetes clusters (Amazon EKS, Azure AKS, Google GKE, Red Hat OpenShift, Minikube). Core capabilities include unified kubectl authentication using short-lived client certificates, mapping SSO identity groups directly to Kubernetes RBAC roles, centralized cluster discovery across multi-cloud environments, and comprehensive audit logging that records every kubectl command, API request, and interactive exec session. Engineers use their standard kubectl CLI tools without modifying existing development workflows.

Cloud-native enterprises, DevOps teams, and platform engineering organizations deploy Teleport Kubernetes Access to protect production container environments from unauthorized modifications and lateral movement. It integrates smoothly with Okta, Microsoft Entra ID, GitHub, and corporate SIEM platforms. Common operational use cases include providing developers with granular, temporary access to specific Kubernetes namespaces, recording all interactive pod exec sessions for security auditing, eliminating the distribution of static admin kubeconfig files, and demonstrating compliance with SOC 2, HIPAA, and PCI-DSS standards.