teleport-plugins

Set of plugins for Teleport

Access API

The access package exposes a simple API for managing access requests which can be used for writing plugins. More info can be found in access/README.md, including instructions on how to properly provision necessary certificates.

Example

The access/example plugin automatically approves access requests based on a user whitelist. This is a good place to start if you are trying to understand how to use the access API.

Use make access-example to build the plugin and ./build/access-example configure to print out a sample configuration file.

Slack Bot

See setup instructions on Teleport's website

A basic slack plugin (WIP) can be found in access/slack. The plugin can be built with make access-slack and instructions for configuring the plugin can be found in the plugin's README.

JIRA Bot

• See detailed setup instructions for Jira Cloud on the website
• See detailed setup instructions for Jira Server on the website

A basic Teleport / JIRA integration (WIP) can be found in access/jira. The plugin can be built with make access-jira and instructions for configuring the plugin can be found in the plugin's README.

Mattermost Bot

See setup instructions on Teleport's website

Mattermost is a private cloud messaging platform (think Slack for enterprise). Teleport provides a Mattermost integration that supports request flows similar to Slack integration above. The plugin can be built with make access-mattermost, and instructions for configuring the plugin can be found in the plugin's README.

Pagerduty Extension

See setup instructions on Teleport's website

A Teleport integration with Pagerduty that allows your team to treat Teleport permission requests as Pagerduty incidents, and provides Pagerduty special actions to approve or deny permission requests. Run make teleport-pagerduty to build it. More docs in the README.

Webhooks

teleport-webhooks provides webhooks compatibility for Teleport. It allows sendind webhooks when a new request is created, or a request state is changed, and it allows optionally listening for the 3rd party app callbacks to facilitate the approval workdlow. See more in the access/webhooks/README.md

Notes

Use scripts/dep for dependencies management. It is a wrapper over dep which ignores git submodules.