Role template not picking up user traits for node_labels

[nikhil-31]

Type:

How to

Question

Role templates are not picking up user traits for node_labels? Using teleport version 6.1.5

Role 1

kind: role
version: v3
metadata:
  name: test-role
spec:
  allow:
    logins: ['ubuntu', 'ec2-user']
    node_labels:
      'group': ['{{internal.group}}']

User 1

kind: user
version: v2
metadata:
  name: jane doe
spec:
  roles: ['test-role']
  traits:
    group: ['a-group']

[ahelwer]

Through experimenting I suspect there are only certain traits that are supported by the {{internal.traitname}} template functionality. They include:

• kubernetes_groups
• kubernetes_users
• db_users
• db_names
• logins

I can't find any reference documentation on this, though. See also this question.