Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
72 changes: 68 additions & 4 deletions docs/pages/machine-workload-identity/deployment/deployment.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -47,10 +47,74 @@ guide](linux.mdx) is compatible with most platforms. For
custom approaches, you can also read the [Machine & Workload Identity Reference](../../reference/machine-id/machine-id.mdx)
and [Architecture](../../reference/architecture/machine-id-architecture.mdx) to plan your deployment.

### Self-hosted infrastructure

Read the following guides for how to deploy Machine ID on your cloud platform or
on-prem infrastructure.
<TileGrid
tiles={[
{
icon: <Icon name="aws" size="xl" />,
to: "./aws",
name: "AWS",
},
{
icon: <Icon name="azure" size="xl" />,
to: "./azure",
name: "Azure",
},
{
icon: <Icon name="azureDevops" size="xl" />,
to: "./azure-devops",
name: "Azure DevOps",
},
{
icon: <Icon name="bitbucket" size="xl" />,
to: "./bitbucket",
name: "BitBucket Pipelines",
},
{
icon: <Icon name="circleci" size="xl" />,
to: "./circleci",
name: "CircleCI",
},
{
icon: <Icon name="gitlab" size="xl" />,
to: "./gitlab",
name: "GitLab CI",
},
{
icon: <Icon name="githubActions" size="xl" />,
to: "./github-actions",
name: "GitHub Actions",
},
{
icon: <Icon name="googleCloud" size="xl" />,
to: "./gcp",
name: "Google Cloud",
},
{
icon: <Icon name="kubernetes2" size="xl" />,
to: "./kubernetes",
name: "Kubernetes",
},
{
icon: <Icon name="kubernetes" size="xl" />,
to: "./kubernetes-oidc",
name: "Kubernetes OIDC",
},
{
icon: <Icon name="linux" size="xl" />,
to: "./linux",
name: "Linux",
},
{
icon: <Icon name="lock" size="xl" />,
to: "./linux-tpm",
name: "Linux TPM",
}
]}
/>

### Further reading

**CI/CD**

| Platform | Installation method | Join method |
|----------------------------------------|-------------------------------------------------|-----------------------------------------------------|
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -13,14 +13,40 @@ issues flexible short-lived identities to workloads in your infrastructure.
- [Introduction to SPIFFE](./spiffe.mdx): Learn about Secure Production Identity Framework For Everyone (SPIFFE) and how it is implemented by Teleport Workload Identity
- [Getting Started with Workload Identity](./getting-started.mdx): Getting started with Teleport Workload Identity for SPIFFE

## Guides
- [Configuring Workload Identity and AWS OIDC Federation](./aws-oidc-federation.mdx): Configuring AWS to accept Workload Identity JWTs as authentication using OIDC Federation
- [Configuring Workload Identity and AWS Roles Anywhere](./aws-roles-anywhere.mdx): Configuring AWS to accept Workload Identity certificates as authentication using AWS Roles Anywhere
- [Configuring Workload Identity and Azure Federated Credentials](./azure-federated-credentials.mdx): Configuring Azure to accept Workload Identity JWTs as authentication using Azure Federated Credentials
- [Configuring Workload Identity and GCP Workload Identity Federation with JWTs](./gcp-workload-identity-federation-jwt.mdx): Configuring GCP to accept Workload Identity JWTs as authentication using Workload Identity Federation
- [Workload Identity and tsh](./tsh.mdx): Issuing SPIFFE SVIDs using Workload Identity and tsh
## Configuration Guides

## Configuration & management
<TileGrid
tiles={[
{
icon: <Icon name="aws" size="xl" />,
to: "./aws-oidc-federation",
name: "AWS OIDC Federation",
},
{
icon: <Icon name="awsIdentity" size="xl" />,
to: "./aws-roles-anywhere",
name: "AWS Roles Anywhere",
},
{
icon: <Icon name="azure" size="xl" />,
to: "./azure-federated-credentials",
name: "Azure Federated Credentials",
},
{
icon: <Icon name="googleCloud" size="xl" />,
to: "./gcp-workload-identity-federation-jwt",
name: "GCP Workload Identity Federation",
},
{
icon: <Icon name="code" size="xl" />,
to: "./tsh",
name: "Manually issue SPIFFE SVIDs with Teleport CLI tool tsh",
}
]}
/>


## Configuration management
- [Best Practices for Teleport Workload Identity](./best-practices.mdx): Answers common questions and describes best practices for using Teleport Workload Identity in production.
- [JWT SVIDs](./jwt-svids.mdx): An overview of the JWT SVIDs issued by Teleport Workload Identity
- [SPIFFE Federation](./federation.mdx): An overview of the Teleport Workload Identity SPIFFE Federation feature.
Expand Down
Loading