Istio Internal Access Bindings

DEPRECATED: use Access Bindings instead.

IstioInternalAccessBindings is an assignment of roles to a set of users or teams to access resources under a Istio internal group. The user or team information is obtained from an LDAP server that should have been configured as part of Service Bridge installation. Note that a IstioInternalAccessBinding can be created or modified only by users who have SET_POLICY permission on the Istio internal group.

The following example assigns the istiointernal-admin role to users alice, bob, and members of the istiointernal-ops team for istio internal group g1 under workspace w1 owned by the tenant mycompany. Use fully-qualified name (fqn) when specifying user and team

apiVersion: rbac.tsb.tetrate.io/v2
kind: IstioInternalAccessBindings
metadata:
  organization: myorg
  tenant: mycompany
  workspace: w1
  group: g1
spec:
  allow:
  - role: rbac/istiointernal-admin
    subjects:
    - user: organization/myorg/users/alice
    - user: organization/myorg/users/bob
    - team: organization/myorg/teams/istiointernal-ops

IstioInternalAccessBindings

IstioInternalAccessBindings assigns permissions to users of istio internal groups.