gravitational/teleport ? reverse-engineered prompt

Build me a self hosted secure access platform for infrastructure, something my team can use to sign in once and safely reach servers, Kubernetes clusters, databases, Windows machines, internal web apps, and cloud tools from one place.

I want it to avoid long lived keys and passwords by using short lived certificates, and it should support MFA plus single sign on with common identity providers like GitHub, Okta, OIDC, or SAML. Please include role based and attribute based permissions, just in time access requests for elevated roles, secure tunnels for resources behind NAT or firewalls so we do not need a VPN or bastion host, and full audit trails with session recording where it makes sense.

It should have both a web UI and a CLI, show what resources are available and their status, and work as one main Go based service I can run on Linux or in Kubernetes. Please make it feel production ready with sane defaults, docs, and examples. Look up current docs online if you need to.