Skip to content

Commit 07e864e

Browse files
committed
docs: drafting tiled approach for mwi
1 parent cf1620b commit 07e864e

File tree

2 files changed

+105
-10
lines changed

2 files changed

+105
-10
lines changed

docs/pages/machine-workload-identity/machine-id/deployment/deployment.mdx

Lines changed: 72 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,15 +42,84 @@ authentication methods:
4242

4343
## Deployment guides
4444

45-
The guides in this section show you how to deploy Machine ID and join it
46-
to your cluster. Choose a guide based on the platform where you intend to run
47-
Machine ID.
45+
The guides in this section show you how to deploy Machine ID and join it to your cluster.
46+
Choose a guide based on the platform where you intend to run Machine ID.
4847

4948
If a specific guide does not exist for your platform, the [Linux
5049
guide](linux.mdx) is compatible with most platforms. For
5150
custom approaches, you can also read the [Machine ID Reference](../../../reference/machine-workload-identity/machine-id/machine-id.mdx)
5251
and [Architecture](../../../reference/architecture/machine-id-architecture.mdx) to plan your deployment.
5352

53+
<TileGrid
54+
tiles={[
55+
{
56+
icon: <Icon name="aws.svg" size="xl" />,
57+
to: "./aws",
58+
name: "AWS",
59+
},
60+
{
61+
icon: <Icon name="azureDevops" size="xl" />,
62+
to: "./azure",
63+
name: "Azure",
64+
},
65+
{
66+
icon: <Icon name="azure-devops.svg" size="xl" />,
67+
to: "./azure-devops",
68+
name: "Azure DevOps",
69+
},
70+
{
71+
icon: <Icon name="bitbucket" size="xl" />,
72+
to: "./bitbucket",
73+
name: "BitBucket Pipelines",
74+
},
75+
{
76+
icon: <Icon name="circleci" size="xl" />,
77+
to: "./circleci",
78+
name: "CircleCI",
79+
},
80+
{
81+
icon: <Icon name="gitlab" size="xl" />,
82+
to: "./gitlab",
83+
name: "GitLab CI",
84+
},
85+
{
86+
icon: <Icon name="githubActions" size="xl" />,
87+
to: "./github-actions",
88+
name: "GitHub Actions",
89+
},
90+
{
91+
icon: <Icon name="googleCloud" size="xl" />,
92+
to: "./gcp",
93+
name: "Google Cloud",
94+
},
95+
{
96+
icon: <Icon name="kubernetes2" size="xl" />,
97+
to: "./kubernetes",
98+
name: "Kubernetes",
99+
},
100+
{
101+
icon: <Icon name="kubernetes-oidc" size="xl" />,
102+
to: "./kubernetes-oidc",
103+
name: "Kubernetes OIDC",
104+
},
105+
{
106+
icon: <Icon name="linux" size="xl" />,
107+
to: "./linux",
108+
name: "Linux",
109+
},
110+
{
111+
icon: <Icon name="linux-tpm" size="xl" />,
112+
to: "./linux-tpm",
113+
name: "Linux TPM",
114+
},
115+
{
116+
icon: <Icon name="spacelift" size="xl" />,
117+
to: "./spacelift",
118+
name: "Spacelift",
119+
}
120+
]}
121+
/>
122+
54123
### Self-hosted infrastructure
55124

56125
Read the following guides for how to deploy Machine ID on your cloud platform or

docs/pages/machine-workload-identity/workload-identity/workload-identity.mdx

Lines changed: 33 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,14 +14,40 @@ issues flexible short-lived identities to workloads in your infrastructure.
1414
- [Introduction to SPIFFE](./spiffe.mdx): Learn about Secure Production Identity Framework For Everyone (SPIFFE) and how it is implemented by Teleport Workload Identity
1515
- [Getting Started with Workload Identity](./getting-started.mdx): Getting started with Teleport Workload Identity for SPIFFE and Machine ID
1616

17-
## Guides
18-
- [Configuring Workload Identity and AWS OIDC Federation](./aws-oidc-federation.mdx): Configuring AWS to accept Workload Identity JWTs as authentication using OIDC Federation
19-
- [Configuring Workload Identity and AWS Roles Anywhere](./aws-roles-anywhere.mdx): Configuring AWS to accept Workload Identity certificates as authentication using AWS Roles Anywhere
20-
- [Configuring Workload Identity and Azure Federated Credentials](./azure-federated-credentials.mdx): Configuring Azure to accept Workload Identity JWTs as authentication using Azure Federated Credentials
21-
- [Configuring Workload Identity and GCP Workload Identity Federation with JWTs](./gcp-workload-identity-federation-jwt.mdx): Configuring GCP to accept Workload Identity JWTs as authentication using Workload Identity Federation
22-
- [Workload Identity and tsh](./tsh.mdx): Issuing SPIFFE SVIDs using Workload Identity and tsh
17+
## Configuration Guides
2318

24-
## Configuration & management
19+
<TileGrid
20+
tiles={[
21+
{
22+
icon: <Icon name="awsSvg" size="xl" />,
23+
to: "./aws-oidc-federation",
24+
name: "AWS OIDC Federation",
25+
},
26+
{
27+
icon: <Icon name="aws-identity-center.svg" size="xl" />,
28+
to: "./aws-roles-anywhere",
29+
name: "AWS Roles Anywhere",
30+
},
31+
{
32+
icon: <Icon name="azure.svg" size="xl" />,
33+
to: "./azure-federated-credentials",
34+
name: "Azure Federated Credentials",
35+
},
36+
{
37+
icon: <Icon name="googleCloud.svg" size="xl" />,
38+
to: "./gcp-workload-identity-federation-jwt",
39+
name: "GCP Workload Identity Federation",
40+
},
41+
{
42+
icon: <Icon name="code.svg" size="xl" />,
43+
to: "./tsh",
44+
name: "Manually issue SPIFFE SVIDs with Teleport CLI tool tsh",
45+
}
46+
]}
47+
/>
48+
49+
50+
## Configuration management
2551
- [Best Practices for Teleport Workload Identity](./best-practices.mdx): Answers common questions and describes best practices for using Teleport Workload Identity in production.
2652
- [JWT SVIDs](./jwt-svids.mdx): An overview of the JWT SVIDs issued by Teleport Workload Identity
2753
- [SPIFFE Federation](./federation.mdx): An overview of the Teleport Workload Identity SPIFFE Federation feature.

0 commit comments

Comments
 (0)