Move bind verb resourceNames hint inline of example

2020-09-19 16:34:06 -07:00
parent f6496b0de5
commit 2f9b5e122e
1 changed files with 1 additions and 2 deletions
@@ -891,6 +891,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
  resources: ["clusterroles"]
  verbs: ["bind"]
+  # omit resourceNames to allow binding any ClusterRole
  resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -908,8 +909,6 @@ subjects:
  name: user-1
 ```

-Note that - as with any RBAC verb - you may omit `resourceNames` to allow `user-1` to grant other users _any_ ClusterRole in the namespace `user-1-namespace`.
-
 When bootstrapping the first roles and role bindings, it is necessary for the initial user to grant permissions they do not yet have.
 To bootstrap initial roles and role bindings: