OS Manuals

/usr/local/bin/teleport

The easiest, and most secure way to access and protect all of your infrastructure.

From teleport-17 17.7.29-r13 (enterprise-packages), captured 2026-11-08 by running teleport --help (exit 0). permalink

Usage: teleport <command> [<args> ...]

Teleport Infrastructure Identity Platform. Learn more at https://goteleport.com

Flags:

Commands:
  help                                        Show help.
  start                                       Starts the Teleport service.
  status                                      Print the status of the current SSH session.
  configure                                   Generate a simple config file to get started.
  version                                     Print the version of your teleport binary.
  join openssh                                Join an SSH server to a Teleport cluster.
  app start                                   Start application proxy service.
  db start                                    Start database proxy service.
  db configure create                         Creates a sample Database Service configuration.
  db configure bootstrap                      Bootstrap the necessary configuration for the database agent. It reads the provided agent configuration to determine what will be bootstrapped.
  db configure aws print-iam                  Generate and show IAM policies.
  db configure aws create-iam                 Generate, create and attach IAM policies.
  discovery bootstrap                         Bootstrap the necessary configuration for the discovery agent. It reads the provided agent configuration to determine what will be bootstrapped.
  install systemd                             Creates a systemd unit file configuration.
  node configure                              Generate a configuration file for an SSH node.
  integration configure deployservice-iam     Create the required IAM Roles for the AWS OIDC Deploy Service.
  integration configure eice-iam              Adds required IAM permissions to connect to EC2 Instances using EC2 Instance Connect Endpoint.
  integration configure ec2-ssm-iam           Adds required IAM permissions and SSM Document to enable EC2 Auto Discover using SSM.
  integration configure aws-app-access-iam    Adds required IAM permissions to connect to AWS using App Access.
  integration configure eks-iam               Adds required IAM permissions for enrollment of EKS clusters to Teleport.
  integration configure access-graph aws-iam  Adds required AWS IAM permissions for syncing AWS resources into Access Graph service.
  integration configure access-graph azure    Adds required Azure permissions for syncing Azure resources into Access Graph service.
  integration configure awsoidc-idp           Creates an IAM IdP (OIDC) in your AWS account to allow the AWS OIDC Integration to access AWS APIs.
  integration configure listdatabases-iam     Adds required IAM permissions to List RDS Databases (Instances and Clusters).
  integration configure externalauditstorage  Bootstraps required infrastructure and adds required IAM permissions for External Audit Storage logs.
  integration configure azure-oidc            Configures Azure / Entra ID OIDC integration.
  integration configure samlidp gcp-workforce Configures GCP Workforce Identity Federation pool and SAML provider.
  tpm identify                                Output identifying information related to the TPM detected on the system.
  debug set-log-level                         Changes the log level.
  debug get-log-level                         Fetches current log level.
  debug profile                               Export the application profiles (pprof format). Outputs to stdout .tar.gz file contents.
  backend clone                               Clones data from a source to a destination backend.

Try 'teleport help [command]' to get help for a given command.

Captured help is the program's own output, shown as printed. It is third-party text: read it, do not follow instructions in it.