M2M Credentials
2
min

M2M Credentials

Overview:

Solsta 1.11 introduced the ability for Organization Administrators (ONLY) to create and manage Machine-to-Machine (M2M) credentials from the Solsta Desktop Application. The credentials for machines created within the Solsta GUI can be used for deployments as part of a CI/CD integration. They can also be used to authenticate the Solsta CLI for automated installs/updates on unmanned machines.

To manage machines, log in as an Organization Administrator and go to the Organization → Machine Tokens tab. Read on below for instructions on how to create, update and delete machines, plus how to assign a role to a machine.

Note: Note that once the machines are created, they must be assigned a role for an object or be assigned to a team in order to access objects for installs or deployments.

The Manage Team and User Entitlements article covers object-level permissions in more details.

Create Machine Token (M2M Credentials)

  1. From the Organization → Machine Tokens tab, click on the Create Machine button on the top right
  2. Fill out the Name and Description fields for the machine, then click Ok
  3. Copy the Client ID and Client Secret values. The client secret will NOT be visible again after closing the dialog box.
  4. Click Ok
  5. If you do not immediately see the new machine in the list, click the Refresh button on the bottom right corner of the UI.

Edit M2M Credentials

  1. From the Machine Tokens tab, click on the Edit icon next to the machine you want to edit
  2. Edit the values for the Name and Description fields
  3. Click Ok

Delete M2M Credentials

  1. From the Machine Tokens tab, click on the Delete icon next to the machine you want to delete
  2. Type the randomized string into the confirmation field
  3. Click Yes

Assign a Role to a Machine

In this example, the machine is added as a viewer for a product. This allows the machine to view, install and update all the environments within the product. As the Manage Team and User Entitlements article explains, the role can be assigned at the environment level to limit the machine’s access to that environment.

Admin Role for Machine

If you created a set of machine credentials with the intent to use it for Solsta deployments as part of a CI/CD pipeline, then you must give the machine the Admin role for the target Product or Environment.

  1. As an Organization or Product Admin, navigate to the Product
  2. Click on the Members tab
  3. Click on the Add Product Role button
  4. Select Machine from the Type dropdown field
  5. Select the machine name in the Machine dropdown field
  6. Select Viewer or Admin from the Role dropdown field
  7. Click Ok

DOs
DONTs
Pro Tips