Skip to main content
Version: 1.6

wf assign

wf assign

Assign allows you to assign a role to a robot

Synopsis

Assignment lets workspace members assign a security policy to one more robots. A common example would be to create a robot and then assign a deployment role to the robot to permit deploying an application into the cluster. You cannot assign policies to human users—humans use role assumption rather than statically assigned policies (see wf assume --help).

Assignment policies are granted to workspace members by the workspace administrator, who has the rights to specify constraints on who can assign a policy to a robot, and any other requirements that must be met.

wf assign [flags]

Examples


# Create a robot token and assign a policy to permit deployment to cluster A
$ wf create robot ci

$ wf assign --robot ci --role robot.admin --cluster <cluster> --namespace <namespace>
# View the assignements that you can make

# View all the roles that are available. Use -o yaml to view policy.
$ wf get roles --all

Options

      --cluster string          Cluster is the cluster parameter for the role
--dry-run Render the resource to screen rather than implement
-h, --help help for assign
--namespace string Namespace is for namespace scoped roles
--namespaceclaim string Namespaceclaim is for namespace scoped roles
--non-interactive Do not prompt for user input
--robot string Robot is the robot to assign a role to
--role string Role is the role to assign

Options inherited from parent commands

      --debug              Indicates we should use debug / trace logging (default: false)
--force Used to force an operation to happen (default: false)
--no-wait Indicates we should not wait for resources to provision
-o, --output string Output format of the resource (json,yaml,table,template) (default "table")
--profile string Use a profile other than your default for this command
--show-headers Indicates we should display headers on table out (default true)
--verbose Enables verbose logging for debugging purposes (default: false)
-w, --workspace string The workspace you are operating within

SEE ALSO

  • wf - wf provides a cli for Wayfinder