Replacing Static SSH Keys with Teleport Certificates: An Architecture Note
Long-lived SSH keys create persistent access risk. This note covers using Teleport to issue short-lived X.509 certificates for Linux fleet access, including the smallest viable topology, trust boundaries, and failure modes.