Domain management allows you to manage domain access control over specific sources/domains/pipeline extensions. |
It includes the following operations:
Following are the steps to create domain:
Field | Description | Details |
---|---|---|
Name | Required name for the domain. | Provide the alphanumeric name for the domain. |
Description | Required description for the domain. | Provide the alphanumeric description for the domain. |
Data Environments | Required environments associated with the domain. | Select all the required environments from the multi-select menu. These environments will be accessible to the users added to this domain. |
Users | Provide users access to the domain | You can assign users to the domain at the time of domain creation. These users will have access to the domain. |
Secrets | Required secrets associated with the domain. | Select all the required secrets from the multi-select menu. These secrets will be accessible to the users added to this domain. |
Following are the steps to edit domain:
You can also select the required artifacts to which a domain user can have access.
Following are the steps to enable access to the artifacts:
You can also remove the sources, domain artifacts and pipeline extensions accessible by the domain.
Starting v5.5 release, there are some changes in how the “Accessible Domains” functionality works. Following table captures these changes:
Here is a scenario. A User named UserA has direct access to domainA but not to domainB. The domainB has been added in the accessible domains list of domainA. Even though UserA does not have direct access to domainB, UserA was able to run a workflow or build a pipeline of domainB in previous releases.
This behavior was not ideal for transitive access control of domains. So, we have changed this implementation in the 5.5.0 release. Following is the table containing all possible use-cases.
Feature/ Use-case | Allowed in 5.4.0? | Allowed in 5.5.0? |
---|---|---|
Consume target from pipeline builds of accessible domain | Yes | Yes |
Build workflow of accessible domain | Yes | No |
Ingest source of accessible domain with restricted visibility on | Yes | No |
Ingest source of accessible domain with restricted visibility off | Yes | No |
Build Pipeline of accessible domain | Yes | No |
Build Pipeline group of accessible domain | Yes | No |