Subcommands43 subcommands
tsh version
Print the version
tsh ssh
Run shell or execute a command on a remote SSH node
tsh apps
View and control proxied applications
tsh apps ls
List available applications
tsh apps login
Retrieve short-lived certificate for an app
tsh apps logout
Remove app certificate
tsh apps config
Print app connection information
tsh proxy
Run local TLS proxy allowing connecting to Teleport in single-port mode
tsh proxy ssh
Start local TLS proxy for ssh connections when using Teleport in single-port mode
tsh proxy db
Start local TLS proxy for database connections when using Teleport in single-port mode
tsh db
View and control proxied databases
tsh db ls
List all available databases
tsh db login
Retrieve credentials for a database
tsh db logout
Remove database credentials
tsh db env
Print environment variables for the configured database
tsh db config
Print database connection information. Useful when configuring GUI clients
tsh db connect
Connect Connect to a database
tsh join
Join the active SSH session
tsh play
Replay the recorded SSH session
tsh ls
List remote SSH nodes
tsh clusters
List available Teleport clusters
tsh login
Log in to a cluster and retrieve the session certificate
tsh logout
Delete a cluster certificate
tsh status
Display the list of proxy servers and retrieved certificates
tsh env
Print commands to set Teleport session environment variables
tsh request
Manage access requests
tsh request ls
List access requests
tsh request show
Show request details
tsh request new
Create a new access request
tsh request review
Review an access request
tsh kube
Manage available kubernetes clusters
tsh kube ls
Get a list of kubernetes clusters
tsh kube login
Login to a kubernetes cluster
tsh kube sessions
Get a list of active kubernetes sessions
tsh kube exec
Execute a command in a kubernetes pod
tsh kube join
Join an active Kubernetes session
tsh mfa
Manage multi-factor authentication (MFA) devices
tsh mfa ls
Get a list of registered MFA devices
tsh mfa add
Add a new MFA device
tsh mfa rm
Remove a MFA device
tsh config
Print OpenSSH configuration details
OptionsOn tsh itself
-l--login
Remote host login
--proxy
SSH proxy address <Teleport proxy address>
--user
SSH proxy user <user>
--ttl
Minutes to live for a SSH session <time>
-i--identity
Identity file <file>
--cert-format
SSH certificate format <value>
--insecure
Do not verify server's certificate and host name. Use only in test environments
--auth
Specify the name of authentication connector to use <value>
--skip-version-check
Skip version checking between server and client
-d--debug
Verbose logging to stdout
-k--add-keys-to-agent
Controls how keys are handled. Valid values are [auto no yes only]
--enable-escape-sequences
Enable support for SSH escape sequences. Type '~?' during an SSH session to list supported sequences. Default is enabled
--bind-addr
Override host:port used when opening a browser for cluster logins
