xmacs
09/14/2023, 1:18 PMdefinition app {}
definition cluster {}
definition namespace {
relation bind: cluster | cluster:*
}
definition target {
relation owner: app
relation to_namespace: namespace
permission can_deploy = owner
}
relations:
namespace:ns-1#bind@cluster:*
target:app-1-ns-1#to_namespace@namespace:ns-1
target:app-1-ns-1#owner@app:app-1
namespace:ns-2#bind@cluster:cls-2
target:app-1-ns-2#to_namespace@namespace:ns-2
target:app-1-ns-2#owner@app:app-1
assertions:
assertTrue:
- namespace:ns-1#bind@cluster:*