Version: 1.5

wf create policy assignment

Creates an assignment allowing workspace members to assign roles

Synopsis

By creating an assignment on a role an administrator is allowing the workspace members covered by the policy to assign that role to another managed resource in Wayfinder (the most common use case being a robot).

Assigments cover who can apply the role and optionally to which resource the policy can be applied, i.e, we can limit the assignment to allow apply to all robots, or to a specific robot.

Workspace members can then self-serve those policies using the $ wf assign command.

wf create policy assignment [flags]

Examples

# Create an assignment for the plan cluster.deployment
$ wf create policy assignment --role cluster.deployment

# Create an assignment for the policy wayfinder.example
$ wf create policy assignment --policy cluster.deployment

Options

      --dry-run                  Shows the resource but does not apply or create (defaults: false)
      --group strings            One or more workspaces to apply
  -h, --help                     help for assignment
      --robot strings            One or more robots accounts
      --role string              Name of the role you intend to permit
      --scope strings            One or more subject scopes to apply the role
      --subject strings          One or more subjects to apply
      --workspace-role strings   One or more workspace roles to apply the role

Options inherited from parent commands

      --debug              Indicates we should use debug / trace logging (default: false)
      --force              Used to force an operation to happen (default: false)
      --no-wait            Indicates we should not wait for resources to provision
  -o, --output string      Output format of the resource (json,yaml,table,template) (default "table")
      --profile string     Use a profile other than your default for this command
      --show-headers       Indicates we should display headers on table out (default true)
      --verbose            Enables verbose logging for debugging purposes (default: false)
  -w, --workspace string   The workspace you are operating within