Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions docs/pages/includes/machine-id/bot-spec.mdx
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
```yaml
kind: bot
version: v1
metadata:
# name is a unique identifier for the bot in the cluster.
name: robot
spec:
# roles is a list of roles that the bot should be able to generate credentials
# for.
roles:
- editor
# traits controls the traits applied to the Bot user. These are fed into the
# role templating system and can be used to grant a specific Bot access to
# specific resources without the creation of a new role.
traits:
- name: logins
values:
- root
```
10 changes: 10 additions & 0 deletions docs/pages/machine-id/reference/configuration.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -388,3 +388,13 @@ type: kubernetes_secret
# This must be in the same namespace that `tbot` is running in.
name: my-secret
```

## Bot resource

The `bot` resource is used to manage Machine ID Bots. It is used to configure
the access that is granted to a Bot.

(!docs/pages/includes/machine-id/bot-spec.mdx!)

You can apply a file containing YAML that defines a `bot` resource using
`tctl apply -f ./bot.yaml`.
9 changes: 9 additions & 0 deletions docs/pages/reference/resources.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -252,3 +252,12 @@ spec:

version: v2
```

## Bot

Bot resources define a Machine ID Bot identity and its access.

Find out more on the
[Machine ID configuration reference](../machine-id/reference/configuration.mdx).

(!docs/pages/includes/machine-id/bot-spec.mdx!)