Common TSB configurations shared between TSB components.
Common Kubernetes configuration shared by all components in the
- Affinity
- CNI
- Capabilities
- ClientIPConfig
- ConfigMapKeySelector
- ContainerPort
- CrossVersionObjectReference
- Deployment
- DeploymentStrategy
- EnvVar
- EnvVarSource
- ExternalMetricSource
- GlobalDeployment
- GlobalJob
- GlobalService
- HorizontalPodAutoscalerSpec
- Job
- KubernetesComponentSpec
- KubernetesIstioComponentSpec
- KubernetesJobComponentSpec
- KubernetesSpec
- LocalObjectReference
- MetricSpec
- MetricTarget
- NodeAffinity
- NodeSelector
- NodeSelectorRequirement
- NodeSelectorTerm
- ObjectFieldSelector
- ObjectMetricSource
- PodAffinity
- PodAffinityTerm
- PodAntiAffinity
- PodSecurityContext
- PodsMetricSource
- PreferredSchedulingTerm
- ResourceFieldSelector
- ResourceMetricSource
- Resources
- RollingUpdateDeployment
- SELinuxOptions
- SeccompProfile
- SecretKeySelector
- SecurityContext
- Service
- ServiceAccount
- ServicePort
- SessionAffinityConfig
- Sysctl
- Toleration
- WeightedPodAffinityTerm
- WindowsSecurityContextOptions
- istio.operator.v1alpha1.IntOrString
- istio.operator.v1alpha1.K8sObjectOverlay
- istio.operator.v1alpha1.K8sObjectOverlay.PathValue
- k8s.io.api.core.v1.Toleration
- k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelector
- k8s.io.apimachinery.pkg.apis.meta.v1.LabelSelectorRequirement
Configuration to describe a TSB management plane installation.
Configuration to describe a TSB control plane installation.
- ControlPlaneComponentSet
- ControlPlaneSpec
- ElasticSearchSettings
- HpaAdapter
- IsolationBoundary
- Istio
- IstioRevision
- ManagementPlaneSettings
- MeshExpansionSettings
- NGAC
- Oap
- Onboarding
- OnboardingOperator
- OnboardingPlane
- OnboardingRepository
- OpenTelemetryCollector
- RateLimitServer
- Satellite
- XCP
- istio.operator.v1alpha1.K8sObjectOverlay
- istio.operator.v1alpha1.K8sObjectOverlay.PathValue
Configuration to describe components in the TSB data plane.
Specifies configuration of the Onboarding Agent.
Specification of matching workloads with AWS-specific identities.
Specification of matching workloads with JWT identities.
Authorizes matching workloads to join the mesh and become a
Registry record of a workload onboarded into the mesh.
Getting started with Tetrate Service Bridge CLI.
Config commands
- tctl config
- tctl config clusters
- tctl config clusters delete
- tctl config clusters list
- tctl config clusters rename
- tctl config clusters set
- tctl config profiles
- tctl config profiles delete
- tctl config profiles export
- tctl config profiles get-current
- tctl config profiles import
- tctl config profiles list
- tctl config profiles rename
- tctl config profiles set
- tctl config profiles set-current
- tctl config users
- tctl config users delete
- tctl config users list
- tctl config users rename
- tctl config users set
- tctl config view
Experimental commands
- tctl experimental
- tctl experimental app-ingress
- tctl experimental app-ingress docker-compose
- tctl experimental app-ingress docker-compose generate
- tctl experimental app-ingress kubernetes
- tctl experimental app-ingress kubernetes generate
- tctl experimental app-ingress kubernetes install
- tctl experimental audit
- tctl experimental debug
- tctl experimental debug dashboard
- tctl experimental debug list-components
- tctl experimental debug log-level
- tctl experimental es-validate
- tctl experimental gitops
- tctl experimental gitops grant
- tctl experimental service-account
- tctl experimental service-account create
- tctl experimental service-account delete
- tctl experimental service-account gen-key
- tctl experimental service-account get
- tctl experimental service-account revoke-key
- tctl experimental service-account token
- tctl experimental sidecar-bootstrap
- tctl experimental status
- tctl experimental troubleshoot
- tctl experimental troubleshoot log-explorer
- tctl experimental troubleshoot log-explorer cluster
- tctl experimental troubleshoot log-explorer request
- tctl experimental troubleshoot log-explorer service
- tctl experimental verify
- tctl experimental wait
Install commands
- tctl install
- tctl install cluster-certs
- tctl install cluster-service-account
- tctl install demo
- tctl install image-sync
- tctl install manifest
- tctl install manifest cluster-operators
- tctl install manifest control-plane-secrets
- tctl install manifest management-plane-operator
- tctl install manifest management-plane-secrets
Guide describing how to use our REST API for communication with TSB.
Service to manage the configuration for Gateways.
- Gateway
- CreateEgressGatewayRequest
- CreateGatewayGroupRequest
- CreateIngressGatewayRequest
- CreateTier1GatewayRequest
- DeleteEgressGatewayRequest
- DeleteGatewayGroupRequest
- DeleteIngressGatewayRequest
- DeleteTier1GatewayRequest
- GetEgressGatewayRequest
- GetGatewayGroupRequest
- GetIngressGatewayRequest
- GetTier1GatewayRequest
- ListEgressGatewaysRequest
- ListEgressGatewaysResponse
- ListGatewayGroupsRequest
- ListGatewayGroupsResponse
- ListIngressGatewaysRequest
- ListIngressGatewaysResponse
- ListTier1GatewaysRequest
- ListTier1GatewaysResponse
Service to manage gateway settings in Istio Direct mode.
Service to manage telemetry metrics.
Service to manage the Telemetry Sources.
Service to manage centralized approval policies.
Service to manage centralized approval policies.
Service to manage access control policies for TSB resources
Service to manage access roles in Service Bridge.
Service to map registered services to configuration groups.
Service to manage registration of services in the TSB Service Registry.
Service to manage security settings in Istio Direct mode.
Service to manage security settings.
- Security
- CreateSecurityGroupRequest
- CreateSecuritySettingsRequest
- CreateServiceSecuritySettingsRequest
- DeleteSecurityGroupRequest
- DeleteSecuritySettingsRequest
- DeleteServiceSecuritySettingsRequest
- GetSecurityGroupRequest
- GetSecuritySettingsRequest
- GetServiceSecuritySettingsRequest
- ListSecurityGroupsRequest
- ListSecurityGroupsResponse
- ListSecuritySettingsRequest
- ListSecuritySettingsResponse
- ListServiceSecuritySettingsRequest
- ListServiceSecuritySettingsResponse
Service to manage traffic settings in Istio Direct mode.
Service to manage traffic settings.
- Traffic
- CreateServiceRouteRequest
- CreateTrafficGroupRequest
- CreateTrafficSettingsRequest
- DeleteServiceRouteRequest
- DeleteTrafficGroupRequest
- DeleteTrafficSettingsRequest
- GetServiceRouteRequest
- GetTrafficGroupRequest
- GetTrafficSettingsRequest
- ListServiceRoutesRequest
- ListServiceRoutesResponse
- ListTrafficGroupsRequest
- ListTrafficGroupsResponse
- ListTrafficSettingsRequest
- ListTrafficSettingsResponse
Service to manage clusters onboarded in TSB.
Provide information about the Service bridge platform.
Service to manage Organizations in TSB
Service to manage Users and Teams in TSB
- Teams
- CreateServiceAccountRequest
- CreateTeamRequest
- DeleteServiceAccountKeyRequest
- DeleteServiceAccountRequest
- DeleteTeamRequest
- GenerateServiceAccountKeyRequest
- GetServiceAccountJWKSRequest
- GetServiceAccountRequest
- GetTeamRequest
- GetUserRequest
- JWKS
- ListServiceAccountsRequest
- ListServiceAccountsResponse
- ListTeamsRequest
- ListTeamsResponse
- ListUsersRequest
- ListUsersResponse
- TokenResponse
Service to manage TSB tenants.
Service to manage TSB workspaces.
IAM APIs for authentication.
Guide describing how to use our gRPC API for communication with TSB.
OpenAPI Extensions available to configure APIs.
Authentication and authorization configs at gateways, security group level
Configurations to build a tier1 gateway.
Group of istio resources that are not directly related to traffic, security, and gateways.
A metric is a measurement about a service, captured at runtime.
Configuration for assigning access roles to users of any resource in TSB.
Configuration for assigning access roles to users of applications.
Configuration for assigning access roles to users of gateway groups.
Configuration for assigning access roles to users of istio internal groups.
Configuration for assigning access roles to users under an organization.
Configuration for assigning access roles to users of security groups.
Configuration for assigning access roles to users under a tenant.
Configuration for assigning access roles to users of traffic groups.
Configuration for assigning access roles to users of workspaces.
Security settings for proxy workloads in a security group.
Service specific security settings for proxy workloads in a security group.
Settings for the Web Application Firewall component, based on the Modsecurity/Coraza Seclang.
Configuration affecting routing for services in a traffic group.
Configurations to group a set of proxy workloads in a workspace for traffic management.
Traffic settings for proxy workloads in a traffic group.
Definition of objects shared by different APIs.
Configuration for specifying global settings in an organization.
Configuration for specifying default traffic and security settings in a workspace.
Guide describing how to use our YAML API for communication with TSB.
Reference to TSB CRD yamls
Guide on how to install the `httpbin` workload that is used in various examples.
How to Install Open Policy Agent
Guide on how to install the `sleep` workload that is used in various examples.