Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add OCI tags docs #52405

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
30 changes: 30 additions & 0 deletions docs/pages/admin-guides/management/guides/oracle-tags.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
---
title: Oracle Cloud Tags as Teleport Agent Labels
description: How to set up Teleport agent labels based on Oracle Cloud labels
h1: Sync Oracle Cloud tags and Teleport agent labels
Comment on lines +2 to +4
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The title uses Teleport Agent the description and h1 use Teleport agent. Let's be consistent across all three.

---

When running on an Oracle Cloud (OCI) Compute instance, Teleport will
automatically detect and import the instance's freeform and defined tags
as Teleport labels for SSH nodes, applications, databases, and Kubernetes clusters.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Do we prefer node or ssh server in user facing docs? cc @ptgott

Suggested change
as Teleport labels for SSH nodes, applications, databases, and Kubernetes clusters.
as Teleport labels for SSH servers, applications, databases, and Kubernetes clusters.

Tags imported this way will have the `oracle/` prefix.

When the Teleport process starts, it fetches all tags from OCI instance
metadata and adds them as labels. The instance's image must support IMDSv2.
The process will update the tags every hour, so newly created or deleted tags
will be reflected in the labels.
Comment on lines +7 to +15
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should we note in this section that no additional permissions are required to be granted to the OCI instance?


If the freeform tag `teleporthostname` is present, its value (must be lower case)
will override the node's hostname.

```code
$ tsh ls
Node Name Address Labels
-------------------- -------------- -------------------------------------------------------------------------------------------
fakehost.example.com 127.0.0.1:3022 oracle/testing=yes,oracle/definedTagNamespace/environment=staging,oracle/teleporthostname=fakehost.example.com
```

<Notice type="note">
For services that manage multiple resources (such as the Database Service), each resource will receive the
same tags from Oracle.
</Notice>
Loading