wf assign

wf assign

Assign allows you to assign a role to a robot

Synopsis

Assignment lets workspace members assign a security policy to one more robots. A common example would be to create a robot and then assign a deployment role to the robot to permit deploying an application into the cluster. You cannot assign policies to human users—humans use role assumption rather than statically assigned policies (see wf assume --help).

Assignment policies are granted to workspace members by the workspace administrator, who has the rights to specify constraints on who can assign a policy to a robot, and any other requirements that must be met.

wf assign [flags]

Examples

# Create a robot token and assign a policy to permit deployment to cluster A
$ wf create robot ci

$ wf assign --robot ci --role robot.admin --cluster <cluster> --namespace <namespace>
# View the assignements that you can make

# View all the roles that are available. Use -o yaml to view policy.
$ wf get roles --all

Options

      --cluster string          Cluster is the cluster parameter for the role
      --dry-run                 Render the resource to screen rather than implement
  -h, --help                    help for assign
      --namespace string        Namespace is for namespace scoped roles
      --namespaceclaim string   Namespaceclaim is for namespace scoped roles
      --non-interactive         Do not prompt for user input
      --robot string            Robot is the robot to assign a role to
      --role string             Role is the role to assign

Options inherited from parent commands

      --debug              Indicates we should use debug / trace logging (default: false)
      --force              Used to force an operation to happen (default: false)
      --no-wait            Indicates we should not wait for resources to provision
  -o, --output string      Output format of the resource (json,yaml,table,template) (default "table")
      --profile string     Use a profile other than your default for this command
      --show-headers       Indicates we should display headers on table out (default true)
      --verbose            Enables verbose logging for debugging purposes (default: false)
  -w, --workspace string   The workspace you are operating within

SEE ALSO

• wf - wf provides a cli for Wayfinder