Close
logodocs

Tags

Tags are a form of metadata that can be applied to specific entities in strongDM. Each Tag is a key and optional value pair.

strongDM entities that support Tags:

Tag Details

  • Maximum key length: 128 UTF-8 characters
  • Maximum value length: 256 UTF-8 characters
  • Maximum 50 tags per entity
  • Allowed characters: letters, numbers, and spaces representable in UTF-8, and the following characters: + - = . _ : / @
  • Case-sensitive: team=strongDM is different from team=strongdm
  • An entity can only have one value of a key at a time (If you have two tags env=prod and env=dev you can only assign one of them to a resource).

Tag Management

Tags are managed through any of the strongDM programmatic interfaces. The Admin UI does not support Tags at this time. This article will focus on Tag management through the CLI, but you can refer to the API docs for more info.

Reading Tags

When using list with the CLI, the right-most column will show current tags, if any, in a comma-separated list.

sdm admin servers list -e
Server ID <columns removed for clarity> Tags
rs-7bb96dd41d9ac70b <columns removed for clarity> auth=ssh-cert
rs-299c6d443f322956 <columns removed for clarity> creator=john,docs=true,env=support

As in this example, you may need to add -e to show extended information, like Tags.

Creating Tags

You can add or update Tags with the flag --tags.

sdm admin users update --email user1@test.com --tags 'loc=US'

When adding multiple Tags, use a comma-separated list.

sdm admin datasources update postgres --id rs-0835300a78ea36a0 --tags 'region=west,env=production,os=linux'

To add a Tag without a value, leave the value out of the command.

sdm admin servers update rdp --id rs-299c6d443f322956 --tags 'region=,env=,os='

Updating Tags

In this example, we will use list to search for a specific User with a Filter, then run an update command to modify the loc Tag.

sdm admin users list --filter 'email:admin@user.com'
User ID First Name Last Name Email Tags
a-707fe3f43c34e1dc admin user admin@user.com loc=US

We will use the same --tags flag we used to add the Tag, but this time we will supply a new value to the loc key.

sdm admin users update --email 'admin@user.com' --tags 'loc=EU'

Now we see the Tag with the new value.

sdm admin users list --filter 'email:admin@user.com'
User ID First Name Last Name Email Tags
a-707fe3f43c34e1dc admin user admin@user.com loc=EU

Deleting Tags

Let's start with a User that has 3 tags.

sdm admin users list --filter 'email:admin@user.com'
User ID First Name Last Name Email Tags
a-707fe3f43c34e1dc admin user admin@user.com env=prod,loc=EU,team=docs

To remove a single Tag we will supply the --delete-tags flag, passing in the key of the Tag we wish to remove.

sdm admin users update --email admin@user.com --delete-tags 'loc'

To remove multiple Tags we will add the keys additional keys in a comma-separated format. Any keys that do not exist will simply be ignored.

sdm admin users update --email admin@user.com --delete-tags 'loc,env,team'

Lastly, to delete all Tags at once use the flag --delete-all-tags.

sdm admin users update --email admin@user.com --delete-all-tags

Chaining Commands

You can also combine these operations. For example, to delete all Tags and replace them with new tags:

sdm admin users update --email admin@user.com --delete-all-tags --tags 'a=1,b=2'
Automation — Previous
Filters
Next — Automation
Containers