2 ms·
The obvious benefit is that synchronizes Kubernetes auth with SSH access, i.e. you don't have to authenticate twice if your organization uses SSH-based tools an
by old-gregg 8y ago
The obvious benefit is that synchronizes Kubernetes auth with SSH access, i.e. you don't have to authenticate twice if your organization uses SSH-based tools and k8s-based tooling, moreover it extends the same RBAC rules to both SSH and k8s, i.e. "developers must not touch production data" will be enforced for both "ssh production-host" and "kubectl exec production-pod".
The second, perhaps less obvious, benefit is Teleport's built-in audit as shown in the video, i.e. all your interactions with all Kubernetes clusters are logged in one centralized place for audit purposes (and, in the case of the interactive sessions) can be replayed in a Youtube-like player.
But yes, if you don't need the audit, and you don't use SSH, and if you only have one k8s cluster, this may be an overkill.