Security Settings Management

Intro

Resources

• SecurityGroup allow grouping the proxy workloads in a set of namespaces owned by its parent workspace
• SecuritySetting allows configuring security related properties such as TLS authentication and access control for traffic arriving at a proxy workload in a security group

tsb/security/v2

• SecurityGroup
• SecuritySetting

SecuritySetting

Sample

sample/security-management/securitysetting.yaml

---
apiVersion: security.tsb.tetrate.io/v2
kind: SecuritySetting
metadata:
  organization: tsbdemo
  tenant: bookinfo
  workspace: bookinfo-workspace
  group: bookinfo-securitygroup
  name: bookinfo-sg
spec:
  authenticationSettings:
    trafficMode: REQUIRED

Fields

Interpretations of fields in the sample

• authenticationSettings: Defines if mTLS is required to be enabled or not