Skip to main content
Version: 1.6


A workspace is a way to group users and cloud infrastructure so that only members of a workspace have access to the infrastructure associated with that workspace. Within a workspace, members may have different access permissions to that infrastructure depending on the policies in place.

The Wayfinder administrator can assign cluster plans, cloud accounts, and cloud infrastructure like DNS zones and network peering rules to specific workspaces or to all of them. This lets workspace members easily self-serve infrastructure as needed.

Everything you can do in Wayfinder is related to a specific workspace and your permissions within it. There are three ways to become a member of a workspace:

  • You're added by another workspace member.
  • You're sent an invite link.
  • You create a workspace, which you own/administer.

When you first log in to the Wayfinder UI and click Get started, you're directed to the workspaces page. This displays all the workspaces you have access to, and lets you create a new workspace if needed.

Workspaces page


See the workspace Overview page for shortcuts to some of the most common activities you'll want to do.

CLI quick reference for workspaces​

This page shows how to manage workspaces, generally using the UI. Here is a quick reference to the equivalent CLI commands:

Create a new workspacewf create workspace WORKSPACE-KEY
List workspaces you have access towf get workspaces
Delete a workspacewf delete workspace WORKSPACE-KEY
Set a default (active) workspacewf use workspace WORKSPACE-KEY
List your default workspacewf profiles list
Run a command on non-default workspacewf COMMAND -w WORKSPACE-KEY
Add a member to a workspacewf create member -u USERNAME
Create a workspace user groupwf create workspace-role ROLE-NAME

Note the following:

  • Every workspace has a 3 - 5 character KEY that is its unique identifier. Use this key in the related CLI commmands above. To list workspaces and their keys, run wf get workspaces.

  • CLI commands apply to your default workspace unless you use the -w WORKSPACE-KEY flag to apply the command to a different workspace, provided you have the right permissions.


    If your default workspace is abc, and you want to create a cluster called on workspace xyz:

    wf create cluster qa -w xyz

For more information, see Using the CLI.

Create or delete a workspace​

Create a workspace​

Generally, a workspace owner/administrator creates a workspace and invites or adds other workspace members to it. But anyone can create a workspace to provision infrastructure for testing or other purposes.

To create a new workspace:

  1. In the Wayfinder UI, click the down arrow on the workspace selector at the top of the page, and then click Add new workspace.

    Add new workspace

  2. Enter the following information:

    • Workspace name - A user friendly name of your choice
    • Workspace Key - This identifier for the workspace must begin with a letter and contain 3-5 lowercase alphanumeric characters. You must use this key when specifying the workspace in CLI commands.
    • Workspace description
  3. Click Next.

    Your workspace is created. You can optionally add or invite users to the workspace at this point, or do so separately. See Invite or add workspace members.


wf create workspace WORKSPACE-KEY --summary=WORKSPACE-NAME

Delete a workspace​


This operation cannot be undone.

Before deleting a workspace, be sure that you have deleted everything created for that workspace in Wayfinder.

To delete a workspace:

  1. In the Wayfinder UI, ensure the workspace you're deleting is selected at the top.
  2. Navigate to your workspace's overview page, click Settings, and then click Delete workspace.


wf delete workspace WORKSPACE-KEY

Switch to another workspace after login​

You can select or specify a workspace in either the Wayfinder UI or CLI. By doing so, your actions in the UI or CLI apply to that workspace.

You may be part of more than one workspace in Wayfinder. The currently selected workspace is shown in the UI at the top. For example, ggq is the currently selected workspace below:

Workspaces tab

To switch to another workspace:

  1. Click the arrow in the current workspace, and then either scroll to select the workspace you want, or start typing the workspace name in the search box to select it, as shown above.

CLI: wf use workspace WORKSPACE-KEY

Invite or add workspace members​

Workspaces have two default workspace roles: member and admin. Workspace admins can create more workspace roles as needed to set access permissions for various Wayfinder resources. For information on what the default workspace roles can do, see Users and privileges.

Invite members​

You can use a workspace invite link from the Wayfinder UI for users who haven't logged into Wayfinder before. This link invites them to use Wayfinder and makes them a member of a specific workspace. You can also invite existing Wayfinder users to a workspace.

To invite members to a workspace:

  1. In the Wayfinder UI, select your workspace, and then navigate to User access > Members.

  2. Copy and share the Invite link.

    The member you're inviting can use the link to automatically select that workspace upon login to the UI, and then the member's user ID is added to the Members page.

Add members to a workspace​

You can add existing Wayfinder users to a workspace.

To add members to a workspace:

  1. In the Wayfinder UI, select your workspace, and then navigate to User access > Members.
  2. In Add Wayfinder users now start typing the member's user ID, and select the user.
  3. If you're a workspace admin, you must also Select user type for this user.
  4. Click Add to workspace.

CLI: wf create member -u USERNAME

Create a workspace user group​

A user group is a convenient way to associate a set of users to roles and access policies. You can create groups specific to your workspace and associate them to the access policies you require.

Wayfinder comes with two default user groups that appear in all workspaces:

  • admin
  • member

Each default group is associated with an access policy, so that users in each group have a set of permissions and access controls associated with that group. For example, users in the admin group in a workspace have more access than users in the member group. Your Wayfinder administrator may also add more default user groups that appear in your workspace.

Workspaces can add users to default groups as needed, but cannot change the group's default access policy. However, you can create a new access policy, and apply it to a default group in your workspace.

To create a workspace group:

  1. In the UI, navigate to User access > Groups, and then click Create group.

  2. Enter a Name and Description for the group, and then click Next.

  3. Select the users to be added to the group, and then click Next.

    On the next page the group is created and saved.

    Group finish screen

  4. Do one of the following:

    • Click Finish to exit and associate the group with an access policy later.
    • Click Go to Access Policies to go to the Access policies page and create the associated access policy.

Edit or delete a group​

To edit or delete a group:

  1. In the UI, navigate to User access > Groups, and then expand the group you want.
  2. Click the Actions tab, and then click either the Edit or Delete buttons.

Set an email address for certificate notifications​

You must specify an email address in order for your workspace clusters to be configured with TLS certificates. This email address is used by certificate issuers to send notifications to your workspace.

To specify the workspace email address:

  1. In the Wayfinder UI, select your workspace, and then click Settings.
  2. Enter the Email address, and then click Save.

Once you're in a workspace​

Here are some of the things you can do once you're in a workspace.

Workspace members​

  • Configure a profile for your workspace to access an environment with the CLI—see wf profile configure.
  • Create a cluster and namespace—see Clusters and Namespaces.
  • Wayfinder creates domains for you automatically when you create a cluster, but if desired, you can create a custom cluster DNS zone for your app—see DNS .
  • Set up ingress and network policies for workspace apps—see Exposing your Applicatins via Ingress.
  • Create robots for builds or deployments with your CI system—see Robot Roles.
  • View costs for your workspace's cloud infrastructure—see Costs.
  • Share clusters in your workspace with one or more other workspaces—see Multi-Tenancy.

Workspace administrators​

Workspace admins are owners of a workspace. They are workspace members with the additional privileges below. As a workspace admin, you can:

  • Promote workspace members to be workspace admins in the Wayfinder UI: Navigate to your workspace, and then navigate to User access > Members > USERNAME > Add workspace role.
  • Administer your workspace's role-based access (RBAC) by creating policies for how members can assume roles—see the RBAC section.
  • Create more roles as needed, in addition to member and admin. You can then use these roles when defining RBAC policies.