Create a MySQL TCP target
TCP targets provide a generic way to connect to any service Boundary has access to, including MySQL databases.
The following examples use a direct target address for simplicity, but HashiCorp recommends that you configure host catalogs and host sets for scaled production deployments.
Complete the following steps to create a TCP target to connect to a MySQL server.
- Log in to Boundary.
- Select an org, and then select the project where you want to create a target.
- Select Targets under Project Actions.
- Click New Target.
- Complete the following fields:
- Name: (Required) A name for identification purposes, such as
mysql-dev-server. The name must be unique. - Description: (Optional) An optional description of the target for identification purposes.
- Type: (Required) Select TCP to create a TCP target.
- Target Address (Optional) If you are not using host catalogs and host sets, you can enter a target address instead to map the target to a single address. This must be a valid IP address or DNS name.
- Default Port (Required) The default port on which to connect, such as
3306. - Aliases (Optional) A unique identifier for the target, which makes the target easier to connect to using the CLI or transparent sessions. To create an alias, complete the following fields, and then click Add:
- Select scope: Select the scope in which to create the alias. You must create org and project suffixes before you can create an alias in the target's project scope. Otherwise, you can only create the alias in the
globalscope. Refer to Create a suffix for a scope for more information. - Alias value: Enter the string that you want to use as the alias to represent the target. An alias's value can be a hostname or a DNS-like string.
- Select scope: Select the scope in which to create the alias. You must create org and project suffixes before you can create an alias in the target's project scope. Otherwise, you can only create the alias in the
- Name: (Required) A name for identification purposes, such as
- Click Save.
Configure a brokered application credential
You can configure a brokered application credential for end users to connect to the target. Brokered credentials are exposed to the end user to allow them to authenticate to a target manually, or using connect helpers.
You can configure credentials for the TCP target using:
- Static credentials (
username_passwordorssh_private_key) - Vault generic credential library
Refer to the Configure targets with credential brokering page to learn how to configure a target with credential brokering.
Next steps
To learn how to connect to a target, refer to Connection workflows.
To use target aliases to connect to targets:
- Create a target alias
- Connect to a target using an alias
- After you set up a target alias, you can optionally Configure transparent sessions for end users.