tsh 命令

常用示例

说明

tsh is the Teleport client CLI for accessing infrastructure protected by Teleport. It provides unified access to SSH servers, Kubernetes clusters, databases, and web applications with built-in audit logging and access controls. Authentication via login stores credentials in ~/.tsh with automatic expiration (default 12 hours). Certificates support short-lived access aligned with zero-trust principles. For SSH access, use ssh command or generate native SSH config with tsh config for use with standard ssh clients. Session recording enables play for audit review. Kubernetes access with kube login configures kubectl credentials. Database access via db connect provides authenticated connections to PostgreSQL, MySQL, MongoDB, and other databases. Access requests enable just-in-time privilege escalation with approval workflows. Create requests with request create for resources requiring elevated permissions.

参数

--proxy _address_

Teleport proxy service address.

--user _username_

Teleport username.

--login _os-user_

Remote OS username for SSH.

--ttl _duration_

Session credential TTL. Default: 12h.

--identity _file_

Path to identity file.

--auth _connector_

Authentication connector name.

--insecure

Skip TLS certificate verification.

--debug

Enable verbose debug logging.

--jumphost, -J _host_

SSH jump host.

--cert-format _format_

Certificate format: standard or kubernetes.

--skip-version-check

Skip client/server version compatibility check.