Teleport Notes

FOR MORE INFORMATION SEE HERE: https://github.xdr.accenturefederalcyber.com/mdr-engineering/msoc-infrastructure/wiki/Teleport-for-the-End-User

Also more notes at ~/xdr-terraform-live/test/aws-us-gov/mdr-test-c2/090-instance-teleport/README.md (Same readme in test and prod)

Client Installation

brew install teleport

Usage

tsh --proxy=teleport.xdr.accenturefederalcyber.com login
tsh ls
tsh --proxy=teleport.xdr.accenturefederalcyber.com ls
tsh --proxy=teleport.xdrtest.accenturefederalcyber.com ssh caasp-phantom
tshd scp brad.poulton@sensu.pvt.xdrtest.accenturefederalcyber.com:sensu_support.tgz .

Troubleshooting

rm -rf ~/.tsh/

Compliance Notes

https://goteleport.com/teleport/how-it-works/fedramp-ssh-kubernetes/ https://goteleport.com/teleport/how-it-works/soc2-ssh-kubernetes/ https://goteleport.com/docs/config-reference/

Client Notes

For cli use, you need to specify the certificate

SSL_CERT_FILE=/var/lib/teleport/xdr_wildcard_chain.pem /usr/local/bin/tctl