Tenant Access Bindings

The differences between TSB and Tetrate Istio Subscription Plus (TIS+)

Tetrate Istio Subscription Plus (TIS+) utilizes many of the same components as the Tetrate Service Bridge(TSB) product but has the several distinctions.

DEPRECATED: use Access Bindings instead.

TenantAccessBindings is an assignment of roles to a set of users or teams to access resources under a Tenant. The user or team information is obtained from an LDAP server that should have been configured as part of Istio Subscription Plus installation. Note that a TenantAccessBinding can be created or modified only by users who have SET_POLICY permission on the Tenant.

The following example assigns the tenant-admin role to users alice, bob, and members of the t1 team owned by the tenant mycompany. Use fully-qualified name (fqn) when specifying user and team

apiVersion: rbac.tsb.tetrate.io/v2
kind: TenantAccessBindings
metadata:
  organization: tis+
  tenant: tis+
spec:
  allow:
  - role: rbac/tenant-admin
    subjects:
    - user: organization/myorg/users/alice
    - user: organization/myorg/users/bob
    - team: organization/myorg/teams/t1

TenantAccessBindings

TenantAccessBindings assigns permissions to users of tenants.

Field	Description	Validation Rule
allow	List of tetrateio.api.tsb.rbac.v2.Binding The list of allowed bindings configures the different access profiles that are allowed on the resource configured by the policy.	–