Defined Tags
Types
Free form tags - basic implementation
Consist of key and a value
Syntax: key=value
Example: environment=production, project=alpha
Defined Tags - more features
Contained in Tag Namespace
Defined schema
Secured with policy
Free form tags - basic implementation
Consist of key and a value
Syntax: key=value
Example: environment=production, project=alpha
Defined Tags - more features
Contained in Tag Namespace
Defined schema
Secured with policy
Defined Tags
- Defined from the OCI console → Governance → Tags
- A Tag namespace is a container for a set of tag keys definitions.
- Tags must be set up in tenancy before using them.
- The tag consists of a namespace, a key, and a value.
- Tag key definition specifies its key and what types of values are allowed
- Tag definition can be static or a list of values.
- Tag value can be a variable as $(iam.principle.name)
- The tags usage: <Tag Namespace>.<Tag name>=<value>
- Example:
- Namespace: Operations
Key: Environment
- The tag will be Operations.Environment='Development'
- Tags Cannot be deleted but can be retired
- Retired tags cannot be applied to resources
- Retired tags can be reactivated
Secured with policy Example
Allow group ComputeUsers to use tag-namespaces in compartment financial_applications where target.tag-namespace.name='Operations'
Users in the ComputeUsers group can now apply the tag namespace "Operations" to resources in compartment financial_applications.
Comments
Post a Comment