---
title: "Get all the groups that configure the given service in the registry."
method: GET
path: "/v2/organizations/{organization}/services/{service}/groups"
tags: ["Lookup"]
---

# Get all the groups that configure the given service in the registry.

`GET /v2/organizations/{organization}/services/{service}/groups`

## Request

- Base URL: `https://docs.tetrate.io` (the document declares no server; this is the origin it was published from)
- URL: `https://docs.tetrate.io/v2/organizations/{organization}/services/{service}/groups`
- Auth: none declared
- TypeScript: <https://skmtc.dev/tetrate/apis/tetrate-service-bridge-api/docs/v2/organizations/:organization/services/:service/groups/get.ts> (a function with typed inputs; its response is checked against the schema)

## Path parameters

- `organization` string, required
- `service` string, required

## Response `200`

A successful response.

- V2GroupLookupResponse: List of groups that configure the requested service.
  - `trafficGroups` Tsbtrafficv2Group[]: The traffic groups that configure the given registered service.
    - `fqn` string
    - `displayName` string
    - `etag` string
    - `description` string
    - `namespaceSelector` V2NamespaceSelector, required
      - `names` string[], required: - `*/ns1` implies `ns1` namespace in any cluster. - `c1/ns1` implies `ns1` namespace from `c1` cluster. - `c1/*` implies all namespaces in `c1` cluster. - `*/*` implies all namespaces in all clusters. - `c1/ns*` implies all namespaces prefixes by `ns` in `c1` cluster.
    - `configMode` 'BRIDGED' | 'DIRECT': The configuration mode used by a traffic, security or a gateway group. - BRIDGED: Indicates that the configurations to be added to the group will use macro APIs that automatically generate Istio APIs under the hood. - DIRECT: Indicates that the configurations to be added to the group will directly use Istio APIs.
    - `deletionProtectionEnabled` boolean: When set, prevents the resource from being deleted. In order to delete the resource this property needs to be set to `false` first.
    - `configGenerationMetadata` V2ConfigGenerationMetadata: `ConfigGenerationMetadata` allows to setup extra metadata that will be added in the final Istio generated configurations. Like new labels or annotations. Defining the config generation metadata in tenancy resources (like organization, tenant, workspace or groups) works as default values for those configs that belong to it. Defining same config generation metadata in configuration resources (like ingress gateways, service routes, etc.) will replace the ones defined in the tenancy resources.
      - `labels` object: Set of key value paris that will be added into the `metadata.labels` field of the Istio generated configurations.
      - `annotations` object: Set of key value paris that will be added into the `metadata.annotations` field of the Istio generated configurations.
  - `securityGroups` Tsbsecurityv2Group[]: The security groups that configure the given registered service.
    - `fqn` string
    - `displayName` string
    - `etag` string
    - `description` string
    - `namespaceSelector` V2NamespaceSelector, required
      - `names` string[], required: - `*/ns1` implies `ns1` namespace in any cluster. - `c1/ns1` implies `ns1` namespace from `c1` cluster. - `c1/*` implies all namespaces in `c1` cluster. - `*/*` implies all namespaces in all clusters. - `c1/ns*` implies all namespaces prefixes by `ns` in `c1` cluster.
    - `configMode` 'BRIDGED' | 'DIRECT': The configuration mode used by a traffic, security or a gateway group. - BRIDGED: Indicates that the configurations to be added to the group will use macro APIs that automatically generate Istio APIs under the hood. - DIRECT: Indicates that the configurations to be added to the group will directly use Istio APIs.
    - `securityDomain` string: Security domains can be used to group different resources under the same security domain. Although security domain is not resource itself currently, it follows a fqn format `organizations/myorg/securitydomains/mysecuritydomain`, and a child cannot override any ancestor's security domain. Once a security domain is assigned to a _Security group_, all the children resources will belong to that security domain in the same way a _Security setting_ belongs to a _Security group_, a _Security setting_ will also belong to the security domain assigned to the _Security group_. Security domains can also be used to define _Security settings Authorization rules_ in which you can allow or deny request from or to a security domain.
    - `deletionProtectionEnabled` boolean: When set, prevents the resource from being deleted. In order to delete the resource this property needs to be set to `false` first.
    - `configGenerationMetadata` V2ConfigGenerationMetadata: `ConfigGenerationMetadata` allows to setup extra metadata that will be added in the final Istio generated configurations. Like new labels or annotations. Defining the config generation metadata in tenancy resources (like organization, tenant, workspace or groups) works as default values for those configs that belong to it. Defining same config generation metadata in configuration resources (like ingress gateways, service routes, etc.) will replace the ones defined in the tenancy resources.
      - `labels` object: Set of key value paris that will be added into the `metadata.labels` field of the Istio generated configurations.
      - `annotations` object: Set of key value paris that will be added into the `metadata.annotations` field of the Istio generated configurations.
  - `gatewayGroups` Tsbgatewayv2Group[]: The gateway groups that configure the given registered service.
    - `fqn` string
    - `displayName` string
    - `etag` string
    - `description` string
    - `namespaceSelector` V2NamespaceSelector, required
      - `names` string[], required: - `*/ns1` implies `ns1` namespace in any cluster. - `c1/ns1` implies `ns1` namespace from `c1` cluster. - `c1/*` implies all namespaces in `c1` cluster. - `*/*` implies all namespaces in all clusters. - `c1/ns*` implies all namespaces prefixes by `ns` in `c1` cluster.
    - `configMode` 'BRIDGED' | 'DIRECT': The configuration mode used by a traffic, security or a gateway group. - BRIDGED: Indicates that the configurations to be added to the group will use macro APIs that automatically generate Istio APIs under the hood. - DIRECT: Indicates that the configurations to be added to the group will directly use Istio APIs.
    - `deletionProtectionEnabled` boolean: When set, prevents the resource from being deleted. In order to delete the resource this property needs to be set to `false` first.
    - `configGenerationMetadata` V2ConfigGenerationMetadata: `ConfigGenerationMetadata` allows to setup extra metadata that will be added in the final Istio generated configurations. Like new labels or annotations. Defining the config generation metadata in tenancy resources (like organization, tenant, workspace or groups) works as default values for those configs that belong to it. Defining same config generation metadata in configuration resources (like ingress gateways, service routes, etc.) will replace the ones defined in the tenancy resources.
      - `labels` object: Set of key value paris that will be added into the `metadata.labels` field of the Istio generated configurations.
      - `annotations` object: Set of key value paris that will be added into the `metadata.annotations` field of the Istio generated configurations.
  - `istioInternalGroups` Tsbistiointernalv2Group[]: The istio internal groups that configure the given registered service.
    - `fqn` string
    - `displayName` string
    - `etag` string
    - `description` string
    - `namespaceSelector` V2NamespaceSelector, required
      - `names` string[], required: - `*/ns1` implies `ns1` namespace in any cluster. - `c1/ns1` implies `ns1` namespace from `c1` cluster. - `c1/*` implies all namespaces in `c1` cluster. - `*/*` implies all namespaces in all clusters. - `c1/ns*` implies all namespaces prefixes by `ns` in `c1` cluster.
    - `deletionProtectionEnabled` boolean: When set, prevents the resource from being deleted. In order to delete the resource this property needs to be set to `false` first.
    - `configGenerationMetadata` V2ConfigGenerationMetadata: `ConfigGenerationMetadata` allows to setup extra metadata that will be added in the final Istio generated configurations. Like new labels or annotations. Defining the config generation metadata in tenancy resources (like organization, tenant, workspace or groups) works as default values for those configs that belong to it. Defining same config generation metadata in configuration resources (like ingress gateways, service routes, etc.) will replace the ones defined in the tenancy resources.
      - `labels` object: Set of key value paris that will be added into the `metadata.labels` field of the Istio generated configurations.
      - `annotations` object: Set of key value paris that will be added into the `metadata.annotations` field of the Istio generated configurations.

## Other responses

- `default`: An unexpected error response.

---

[API](https://skmtc.dev/tetrate/apis/tetrate-service-bridge-api.md) - [All operations](https://skmtc.dev/tetrate/apis/tetrate-service-bridge-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tetrate/apis/tetrate-service-bridge-api/revisions/2f19c3a1ae57?raw)
