sandromello/roles-and-bindings.md

Created July 6, 2020 20:32

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/sandromello/d9b2f2584e7d62858c7ea7269629dbc6.js"></script>
Save sandromello/d9b2f2584e7d62858c7ea7269629dbc6 to your computer and use it in GitHub Desktop.

Raw

Token Input

input:
  token:
    sub: foo
    group: tenant-admin
    tenant: tn-3293298
  method: GET
  path: /v1/saga/

Tenant Role

{
   "metadata": {
      "name": "tenant-admin",
      "annotations": {
         "desc": "an annotation"
      }
   },
   "spec": {
      "resources": [
         "/v1/payments/*",
         "/v2/wallet/*",
         "/v1/saga/*"
      ],
      "verbs": [
         "GET",
         "PUT",
         "POST",
         "PATCH",
         "DELETE"
      ]
   }
}

Tenant Binding

{
   "metadata": {
      "name": "tenant-admin-group",
      "annotations": {
         "desc": "an annotation"
      }
   },
   "spec": {
      "kind": "Group",
      "roleRef": {
         "kind": "Tenant",
         "name": "tenant-admin"
      }
   }
}