docs: update session summaries predicate examples (#65516)

This commit is contained in:
Steven Martin
2026-04-09 14:37:41 +00:00
committed by GitHub
parent badd1f326c
commit bf4eaaf436
@@ -670,11 +670,11 @@ session, and user.
| resource.metadata.labels | Resource labels | `equals(resource.metadata.labels["env"], "prod")` |
| resource.metadata.name | Resource name. In case of SSH servers, it's the server ID. | `resource.name == "production-cluster"` |
| resource.spec.addr | Server address (SSH sessions only) | `resource.spec.addr == "123.123.123.123:3022"` |
| resource.spec.db_protocol | Database protocol (database sessions only). See [DB resource reference](../reference/infrastructure-as-code/teleport-resources/db.mdx) for supported values. | `resource.spec.protocol == "postgres"` |
| resource.spec.db_protocol | Database protocol (database sessions only). See [DB resource reference](../reference/infrastructure-as-code/teleport-resources/db.mdx) for supported values. | `resource.spec.db_protocol == "postgres"` |
| resource.spec.hostname | Server hostname (SSH sessions only) | `resource.spec.hostname == "dummy-host"` |
| resource.spec.uri | Database URI (database sessions only) | `has_prefix(resource.spec.uri, "db-host")` |
| session | The session that is being matched. This object supports all the fields of `session.end` and `db.session.end` events, so we only name the most useful ones here. | |
| session.cluster_name | Name of the Teleport cluster | `cluster_name == "teleport.example.com"` |
| session.cluster_name | Name of the Teleport cluster | `session.cluster_name == "teleport.example.com"` |
| session.db_name | Name of database (the underlying one, not the Teleport resource; database sessions only) | `session.db_name == "orders"` |
| session.db_service | Database service name (database sessions only) | `session.db_service == "prod-db-service"` |
| session.kubernetes_groups | List of Kubernetes groups (Kubernetes sessions only) | `contains(session.kubernetes_groups, "viewers")` |