From 2d71388f9632d055dfda591410737254d5622a73 Mon Sep 17 00:00:00 2001
From: huccshen <1171593960@qq.com>
Date: Tue, 29 Sep 2020 15:30:02 +0800
Subject: [PATCH] Update rbac.md

---
 content/zh/docs/reference/access-authn-authz/rbac.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/content/zh/docs/reference/access-authn-authz/rbac.md b/content/zh/docs/reference/access-authn-authz/rbac.md
index 3d35e4e8bb..cc343c8a8a 100644
--- a/content/zh/docs/reference/access-authn-authz/rbac.md
+++ b/content/zh/docs/reference/access-authn-authz/rbac.md
@@ -1465,6 +1465,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
   resources: ["clusterroles"]
   verbs: ["bind"]
+  # omit resourceNames to allow binding any ClusterRole
   resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -1502,6 +1503,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
   resources: ["clusterroles"]
   verbs: ["bind"]
+  # 省略 resourceNames 则允许绑定任何 ClusterRole
   resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1