Secure and Simplify Jenkins RBAC and Audit with Teleport

Teleport can be used with Jenkins to provide secure access to resources in your infrastructure without the need for a VPN. This integration is achieved through Teleport's Machine ID feature, which allows for the creation of short-lived certificates for non-interactive users like CI/CD systems.1

Here's how you can set up and use Teleport with Jenkins:

• Configure and start Machine ID:
  • Create a role for Machine ID (e.g., api-workers).
  • Add a bot user with the created role.
  • Set up the necessary directories and permissions.
  • Create a configuration file for Machine ID.
  • Set up a systemd service to run Machine ID.2. Update and run Jenkins pipelines: After setting up Machine ID, you can update your Jenkins pipelines to use Teleport. Here's an example of how to modify a Jenkins pipeline to use Teleport for running a command on a remote host:2

perlsteps { sh "ssh -F /opt/machine-id/ssh_config root@node-name.example.com hostname"}

This simple change allows Jenkins to use short-lived certificates provided by Teleport's Machine ID, enabling secure access to your infrastructure resources.By integrating Teleport with Jenkins, you can:

• Provide Jenkins with short-lived certificates tied to a machine identity.
• Rotate, audit, and control access using Teleport's built-in access controls.
• Improve the security of your CI/CD pipelines by limiting the scope of access for each pipeline.1