Merge pull request #24206 from huchengze/patch-37

Update rbac.md
2020-09-29 05:29:26 -07:00
parent 6cf650ee41 2d71388f96
commit 14a5ae8644
1 changed files with 2 additions and 0 deletions
@@ -1465,6 +1465,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
  resources: ["clusterroles"]
  verbs: ["bind"]
+  # omit resourceNames to allow binding any ClusterRole
  resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -1502,6 +1503,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
  resources: ["clusterroles"]
  verbs: ["bind"]
+  # 省略 resourceNames 则允许绑定任何 ClusterRole
  resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1