ankra org
Commands to list, switch, create, and manage organisations.ankra org assign
Assign a built-in or custom role to a member. —scope selects where the role applies: org (default) the whole organisation cluster:<name> one cluster group:<slug> every cluster in a cluster group Examples: ankra org assign [email protected] —role operator —scope group:prod-fleet ankra org assign [email protected] —role platform-on-call —scope cluster:staging-1 ankra org assign [email protected] —role adminankra org assignments
List a member’s role assignmentsankra org cluster-groups
Manage cluster groups (named sets of clusters for role scoping)ankra org cluster-groups add-cluster
Add a cluster to a static cluster groupankra org cluster-groups create
Create a cluster group. Without —selector the group is static: pin clusters afterwards with ‘ankra org cluster-groups add-cluster’. With —selector the group is dynamic: clusters whose labels match every key=value pair are members automatically (the environment label seeds from the cluster’s environment). Examples: ankra org cluster-groups create “Production fleet” —selector environment=production ankra org cluster-groups create staging-poolankra org cluster-groups list
List the organisation’s cluster groupsankra org cluster-groups preview
Show the clusters a group currently resolves toankra org cluster-groups set-selector
Switch a cluster group to dynamic membership: clusters whose labels match every key=value pair become members automatically, and pinned static members are cleared. Example: ankra org cluster-groups set-selector prod-fleet environment=productionankra org create
Create a new organisationankra org current
Show the currently selected organisationankra org invite
Invite a user by email to the current organisation. Valid roles: owner, admin, operator, member (default), viewer, read-only. owner/operator alias onto admin/member on the invite until the RBAC assignments API ships; run ‘ankra org roles’ for the full list. Examples: ankra org invite [email protected] ankra org invite [email protected] —role admin ankra org invite [email protected] —role viewerankra org list
List all organisations you belong toankra org members
List members of an organisationankra org remove
Remove a user from the current organisationankra org roles
List the assignable organisation rolesankra org roles create
Create an organisation custom role. —permission grants platform permissions (repeatable; ‘domain.action’ strings). —kube-access bundles Kubernetes access that is provisioned automatically on every cluster an assignment of this role covers (repeatable; ‘<role>’ for whole-cluster or ‘<role>:<namespace>’ for one namespace, with role one of view, edit, admin, cluster-admin). Examples: ankra org roles create “Platform on-call”—permission clusters.operate —permission stacks.deploy
—kube-access edit:app-services —kube-access view