Azure-devops-docs: Info about "deployment group tags"?

[RubixRevenge]

"Enable you to use machine tags to limit deployment to specific sets of target servers." -- No information found about "tags" whether by word search of this webpage or a Google search.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 3b38c265-be4c-b038-e3a9-783a5e5ce659
• Version Independent ID: 67da69da-3651-a8f4-f06a-c35aa3aa98fc
• Content
• Content Source
• Service: unspecified

[alexhomer1]

The topic says: "The tags you assign allow you to limit deployment to specific servers when the deployment group is used in a [Deployment group phase]." The link is to a topic https://docs.microsoft.com/en-us/vsts/build-release/concepts/process/phases#deployment-group-phase containing the text "You can select specific sets of servers from a deployment group to receive the deployment by specifying the machine tags that you have defined for each server in the deployment group." and a screenshot showing the task with the "Required tags" option textbox. You can use this feature, for example, by tagging some servers as "database" and some as "web" and then specifying either "database" or "web" as the required tag. Or you can use multiple tags to select different sets of machines for the same deployment where this is appropriate.

[snvchandu1983]

I need to understand how to connect to a Deployment Pool from a DMZ servers to TFS Servers which are in CORP network. I am unable to do that so.. Please let me know what king of script should i need to use as our target servers are in DMZ domains and my TFS in on CORP network domain. I am trying to run the script and it is not able to connect. Is it any firewall issue. or please provide interesting pointers to get issue resolved very soon

[alexhomer1]

Thank you for your feedback. I have passed this on to the product team for advice.

[shashban]

Build and deployment agents can work across untrusted domains, but need line of sight with the TFS servers.
If the DMZ domain can not talk to the CORP over HTTP, then the connectivity will fail.

@chrisrpatterson for additional inputs.

[shashban]

Closing the issue due to no activity for a long time

[alain27espina]

The machine tag for deployment group phase/stage, is it possible to put a variable there (not hard-coded value) so that it can be evaluated during processing the deployment? Or in general, can you change the machine tag dynamically/programmatically (via script or powershell task) during execution time?

[eanders-MS]

Machine tags are of the form "name:value", but all the deployment group tags samples are simpler: "db", "web", etc. How can it work when a machine tag requires a name and a value?