Traffic Access Bindings
TrafficAccessBindings
is an assignment of roles to a set of users or
teams to access resources under a Traffic group. The user or team
information is obtained from an LDAP server that should have been
configured as part of Service Bridge installation. Note that a
TrafficRoleBinding
can be created or modified only by users who
have SET_POLICY
permission on the Traffic group.
The following example assigns the traffic-admin
role to users
alice
, bob
, and members of the traffic-ops
team for
traffic group g1
under workspace w1
owned by the tenant
mycompany
.
apiVersion: rbac.tsb.tetrate.io/v2
kind: TrafficAccessBindings
metadata:
organization: myorg
tenant: mycompany
workspace: w1
group: g1
spec:
allow:
- role: rbac/traffic-admin
subjects:
- user: alice
- user: bob
- team: traffic-ops
TrafficAccessBindings
TrafficAccessBindings
assigns permissions to users of traffic groups.
Field | Description | Validation Rule |
allow | List of tetrateio.api.tsb.rbac.v2.Binding | – |