System Tags

About System Tags

A system tag is a label that consists of a name and an optional description. You can associate system tags with application profiles and application deployments, either at the tier level or globally. You also can use system tags to add system tag matching rules to aging policies, scaling policies, security profiles, and deployment environments. 

When Governance mode is enabled, you must specify the system tag in the request body for applicable CloudCenter REST APIs. See Submit Job for an example.


If rules-based governance is enabled, the system takes various automatic actions based on the tags that are associated with resources and the system tag matching rules that are added. For example:

  • An aging policy that includes system tags matching rules is enforced against application deployments that include associated tags that correspond to these rules.
  • A security profile that includes system tags matching rules is enforced against application deployments that include associated tags that correspond to these rules.
  • An application profile that includes associated tags deploys to a deployment environment that includes corresponding system tags matching rules.

Tag Restrictions

When adding tags, be aware of the following restrictions:


  •  Adding tags to AWS Deployments

    For each application VM, AWS displays 10 tags. This is an AWS restriction. If you exceed this limit, the first 10 tags are displayed in this section. The remaining tags are ignored. Refer to http://docs.aws.amazon.com for additional information.

  • A Subtenant owner in Governance mode cannot use a tag that is shared by the parent tenant owner to deploy a job. The reason being cloud and cloud accounts cannot be shared due to a complex combination of possible cases. Additionally, the child tenant can have its own precedence order, and changing that order might disturb parents priorities.

  • Child tenants can use tags, but they have to apply their own resource mapping again for these tags to work.

Managing System Tags

To manage system tags, click System Tags in the CCM UI main menu to display the System Tags page.

The System Tags page lists configured system tags and lets you perform the following tasks:

Task
Description
Add a new system tag.

Click the Add System Tag link.

See Adding System Tag Matching Rules (this page) for details.

View or update an existing system tag.

Click the Edit link in the Actions column for the system tag. The Edit System Tag page for the system tag displays.

See Adding System Tag Matching Rules (this page) for a description of the fields that you can update. If you make updates, click the Save button on the Edit System Tag page to save your changes.

Delete a system tag.

Click the Delete link in the Actions column for the system tag.

Adding a System Tag

When you add a system tag, you create a new tag based on configuration settings that you make. To add a system tag, follow these steps:

  1. On the System Tags page, click the Add System Tag link.
    The Add System Tag page displays.
  2. In the Name field, enter a brief and unique descriptive name for the system tag.
    The name can include letters, numbers, and underscores (_). 
  3. (Optional) In the Description field, enter a brief description of the system tag.
  4. Click the Save button.

Managing System Tag Matching Rules

The Tag Matching dialog that this section describes is available only if rules-based governance is enabled. See Governance Rules for details.

You can add one or more system tag matching rules to an aging policy, scaling policy, deployment environment, or security profile. Then, when you associate system tags with a resource, the system takes appropriate actions based on system tags matching rules that correspond to resources with associated tags. You also can edit or remove system tag matching rules.

Each matching rule includes the following components:

  • A list of one of more system tags
  • A requirement that any listed system tag must be matched ("Any") or all system tags must be matched ("All").

For example, assume that the system tags Dev and Prod are defined in your system. Also assume that you want use these tags in a scaling policy so that the policy is enforced against deployment environments with which these tags are associated. The following table explains how different system tag matching rules would be enforced:

System Tag Matching RuleEffect
Match Any of Dev ProdThe policy is enforced against deployment environments with which either the Dev or the Prod system tags are associated. (The policy would also be enforced if both tags were associated with the deployment environment.)
Match All of Dev ProdThe policy is enforced against deployment environments with which both the Dev and the Prod system tags are associated.

Adding System Tag Matching Rules

To add system tag matching rules, enter information in the Tag Matching dialog as follows:

  1. From the Match drop-down list at the top of the dialog, choose either of the following:
    • Any–The rule requires that at least one of the system tags that it specifies be matched 
    • All–The rule requires that all of the system tags that it specifies be matched
  2. In the next field, enter the list of system tags that must be matched according to the Match rule that you chose.
    You can click in this field to display a list of system tags and then choose the tag that you want. You also can start typing characters in this field to display system tags that start with those characters.
  3. Click Add.
    A rule is created and appears under the Rule list. The tags are linked by "OR" if you chose "Any" in Step 1. The tags are linked by "AND" if you chose "All." For example:
    • If you chose Any in Step 1 and you chose tags called Dev and Prod in Step 2, the rule appears as "Has (Dev OR Prod)." 
    • If you chose All in Step 1 and you chose tags called Dev and Prod in Step 2, the rule appears as "Has (Dev AND Prod)."
  4. Repeat this procedure as needed to add more rules.

Editing a System Tag Matching Rule

 To edit a system tag matching rule, follow these steps in the Tag Matching dialog:

 Click the Edit icon for the rule that you want to edit.

  1. From the Match drop-down list that appears, choose either of the following:
    • Any–The rule requires that at least one of the system tags that it specifies be matched
    • All–The rule requires that all of the system tags that it specifies be matched
  2. In the next field, update the list of system tags that must be matched according to the Match rule that you chose.
    To add a system tag, click in this field to display a list of system tags and then choose the tag that you want. You also can start typing characters in this field to display system tags that start with those characters.
    To remove a system tag, click the X next to the tag. 
  3. Click Update.

Removing a System Tag Matching Rule 

To remove a system tag matching rule, follow these steps in the Tag Matching dialog: 

  1. Click the Trash Can icon for the rule that you want to remove.
  2. Click yes.

Isolation Tags

Isolation tags are different from system tags. Isolation tags are based on the string provided by a user when launching a job. See Security and Firewall Rules > Isolation Tags and the Submit Job API pages for additional context.