mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-01 21:52:02 +08:00
Paul GottschlingandAlex Fornuto
a93aaa7e6e
An issue with `gravitational/docs` caused the docs linter to stop catching issues for a period of time. Now that we have addressed the linter issue, this change addresses warnings/errors flagged by the linter. Co-authored-by: Alex Fornuto <alex.fornuto@goteleport.com>
73 lines
2.2 KiB
Plaintext
73 lines
2.2 KiB
Plaintext
---
|
|
title: Machine ID
|
|
description: Teleport Machine ID introduction, demo and resources.
|
|
---
|
|
|
|
# Machine ID
|
|
|
|
Machine ID is a service that programmatically issues and renews short-lived
|
|
certificates to any service account (e.g., a CI/CD server) by retrieving
|
|
credentials from the Teleport Auth Service. This enables fine-grained
|
|
role-based access controls and audit.
|
|
|
|
Machine ID supports the following Teleport features:
|
|
- [Server Access](./getting-started.mdx)
|
|
- [Database Access](./guides/databases.mdx)
|
|
- [Kubernetes Access](./guides/kubernetes.mdx) (*in Teleport v10.1*)
|
|
- [Application Access](./guides/applications.mdx) (*in Teleport v10.1*)
|
|
- Note: [AWS Console](../application-access/cloud-apis/aws-console.mdx) and API access is currently unsupported.
|
|
- [Teleport API Access](../api/introduction.mdx)
|
|
|
|
These features are supported in Teleport Enterprise and Teleport Cloud.
|
|
|
|
The following features are **not** yet supported by Machine ID:
|
|
- [Desktop Access](../desktop-access/introduction.mdx)
|
|
- [User Impersonation](../access-controls/guides/impersonation.mdx): Machine
|
|
ID uses Role Impersonation which cannot be combined with User Impersonation
|
|
- Multifactor authentication like [WebAuthn](../access-controls/guides/webauthn.mdx) and [Passwordless](../access-controls/guides/passwordless.mdx)
|
|
- [AWS Console Access](../application-access/cloud-apis/aws-console.mdx)
|
|
|
|
{
|
|
/*
|
|
TODO(russjones): Once we have a demo video for Machine ID, include it here.
|
|
|
|
## Demo
|
|
|
|
Let's create a bot and use the machine identity to connect to a server.
|
|
|
|
<video
|
|
autoPlay
|
|
loop
|
|
muted
|
|
playsInline
|
|
controls
|
|
>
|
|
<source
|
|
src="../../img/database-access/dbaccessdemo.mp4"
|
|
type="video/mp4"
|
|
/>
|
|
|
|
<source
|
|
src="../../img/database-access/dbaccessdemo.webm"
|
|
type="video/webm"
|
|
/>
|
|
|
|
Your browser does not support the video tag.
|
|
</video>
|
|
*/
|
|
}
|
|
|
|
## Getting started
|
|
|
|
- [Getting started](./getting-started.mdx): Getting started with Teleport Machine ID
|
|
- [Architecture](./architecture.mdx): A technical overview of how Machine ID works
|
|
|
|
## Guides
|
|
|
|
(!docs/pages/includes/machine-id/guides.mdx!)
|
|
|
|
## FAQ & Troubleshooting
|
|
|
|
Finally, check out [Frequently Asked Questions](./faq.mdx) and the
|
|
[troubleshooting guide](./faq.mdx) for common questions and issues.
|