You’re right, in Gravity clusters Teleport is embedded into
gravity-site pod which acts as an auth/proxy server for Teleport nodes which are running on cluster nodes as systemd units. Right now there is no way to disable the embedded Teleport.
As for configuration, right now Gravity provides a set of its own cluster configuration resources, all supported resources are listed here. Many of these resources are actually very similar (if not exactly the same) to their respective Teleport counterparts (such as auth connectors, roles, etc.) with some extensions, because Gravity is basically built on top of Teleport.
When it comes to configuring the embedded Teleport, Gravity does not provide direct access to the “raw” Teleport configuration file, but rather provides a resource that exposes certain configuration fields. Check out Authentication Gateway resource to see what’s currently possible.
Now, going back to your specific queries, for example to configure certificate for the cluster web UI (if that’s what you meant by “SSL certificates”), you can use TLS Key Pair resource.
Speaking of trusted clusters, Gravity provides a Trusted Cluster resource as well, however I’m not sure if will work for your use case, as its primary purpose is connecting standalone Gravity clusters to an Ops Center which is not a part of the Community Edition (I don’t think OSS version even supports this resource).
If I understood correctly, you mentioned you want to connect a bare Teleport cluster to a Gravity cluster, or vice versa. To be honest, I’m not even sure this use-case is supported - I’ve personally never tried it but it’s an interesting idea indeed.
Just thinking out loud, a Gravity cluster is just a “superset” of a Teleport cluster and is a valid Teleport cluster so technically anything you can do with Teleport you should be able to do with Gravity, including using
tsh (which I know works) or
tctl (which I’ve never tried) - as I mentioned above you can use
gravity-site as a
--proxy which is available on port 32009 on the cluster nodes.
But as I said, unfortunately this particular use-case is not officially supported/tested at the moment so while this may work, I’m not certain it won’t cause any side-effects to the Gravity-specific operations.