Tetrate Service BridgeVersion: next

Gateway Access Bindings

DEPRECATED: use Access Bindings instead.

GatewayAccessBindings is an assignment of roles to a set of users or teams to access resources under a Gateway group. The user or team information is obtained from an LDAP server that should have been configured as part of Service Bridge installation. Note that a GatewayAccessBinding can be created or modified only by users who have SET_POLICY permission on the Gateway group.

The following example assigns the gateway-admin role to users alice, bob, and members of the gateway-ops team for all the gateways in group g1 under workspace w1 owned by the tenant mycompany. Use fully-qualified name (fqn) when specifying user and team

apiVersion: rbac.tsb.tetrate.io/v2
kind: GatewayAccessBindings
metadata:
  organization: myorg
  tenant: mycompany
  workspace: w1
  group: g1
spec:
  allow:
  - role: rbac/gateway-admin
    subjects:
    - user: organization/myorg/users/alice
    - user: organization/myorg/users/bob
    - team: organization/myorg/teams/gateway-ops

GatewayAccessBindings

GatewayAccessBindings assigns permissions to users of gateway groups.

Field	Description	Validation Rule
allow	List of tetrateio.api.tsb.rbac.v2.Binding The list of allowed bindings configures the different access profiles that are allowed on the resource configured by the policy.	–

GatewayAccessBindings​

GatewayAccessBindings