whentimeslows/website
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move bind verb resourceNames hint inline of example

Browse Source
This commit is contained in:
Nic Cope
2020-09-19 16:34:06 -07:00
committed by GitHub
parent f6496b0de5
commit 2f9b5e122e
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/en/docs/reference/access-authn-authz/rbac.md
+1 -2
View File
@@ -891,6 +891,7 @@ rules:
- apiGroups: ["rbac.authorization.k8s.io"] - apiGroups: ["rbac.authorization.k8s.io"]
resources: ["clusterroles"] resources: ["clusterroles"]
verbs: ["bind"] verbs: ["bind"]
# omit resourceNames to allow binding any ClusterRole
resourceNames: ["admin","edit","view"] resourceNames: ["admin","edit","view"]
--- ---
apiVersion: rbac.authorization.k8s.io/v1 apiVersion: rbac.authorization.k8s.io/v1
@@ -908,8 +909,6 @@ subjects:
name: user-1 name: user-1
``` ```
Note that - as with any RBAC verb - you may omit `resourceNames` to allow `user-1` to grant other users _any_ ClusterRole in the namespace `user-1-namespace`.
When bootstrapping the first roles and role bindings, it is necessary for the initial user to grant permissions they do not yet have. When bootstrapping the first roles and role bindings, it is necessary for the initial user to grant permissions they do not yet have.
To bootstrap initial roles and role bindings: To bootstrap initial roles and role bindings: