Skip to main content
Account

Course

Teleport for Kubernetes

Learn to deploy, configure, and operate Teleport as the access layer for your Kubernetes clusters. From zero to a fully working setup with identity-based access, role-based controls, just-in-time privilege escalation, and full audit logging.

  • 6 of 6 lessons available
  • Intermediate
Taught by David Flanagan
View curriculum
Teleport for Kubernetes Course Cover

Curriculum

Getting Started

2 of 2 available
  1. Introduction to Teleport for Kubernetes

    Understand the problem with default Kubernetes access — long-lived credentials, no revocation, and audit gaps — and how Teleport solves it with short-lived certificates, real identities, and full audit logging.

  2. Deploying a Teleport Cluster on Kubernetes

    Deploy a working Teleport cluster on Kubernetes using Helm, with TLS certificates via cert-manager and an admin user ready to log in.

Access Control

2 of 2 available
  1. Identity-Based User Access & RBAC

    Replace manually configured users with GitHub SSO authentication, map GitHub teams to Teleport roles, and access your Kubernetes clusters with short-lived certificates tied to real identities.

  2. Two-Layer RBAC with Teleport Boundaries

    Build a two-layer RBAC model where Teleport controls which Kubernetes groups a user's certificate carries, and Kubernetes RBAC controls what those groups can do — with deny rules creating hard security boundaries.

Advanced Features

2 of 2 available
  1. Just-in-Time Access for Incidents

    Implement just-in-time access requests so nobody has standing admin privileges — when paged at 3 AM, engineers request temporary elevated access that is peer-reviewed and time-bounded.

  2. Auditing and Session Recording

    Explore Teleport's audit logging, session recording, and live session joining — every kubectl command, every exec session, tied to a real identity with full playback capabilities.

Learning objectives

  • Deploy Teleport on Kubernetes with Helm
  • Configure identity-based access with GitHub SSO
  • Implement fine-grained RBAC with defense in depth
  • Set up just-in-time access requests for incidents
  • Use audit logging and session recording

About this Course

Kubernetes access is broken by default. Long-lived kubeconfig credentials, shared identities, no revocation, and audit logs that can’t tell you who did what. This course fixes that.

Over six hands-on videos, you’ll deploy Teleport on Kubernetes from scratch using Helm, wire up GitHub SSO for identity-based authentication, build a two-layer RBAC model with defense in depth, implement just-in-time access requests for incident response, and explore Teleport’s audit logging and session recording capabilities.

Everything is built on the Teleport Community Edition, which is free and open source. The video walkthroughs demonstrate the setup on a local Kind cluster — no cloud account required.

By the end of this course, you’ll have the foundations for securing your Kubernetes access with real identities, least privilege, time-bounded elevation, and a complete audit trail.