trivial markdown changes to cleanup page rendering
inserted json body pretty printed for further clarity.
This commit is contained in:
committed by
Andrew Chen
parent
cdd28dd7f3
commit
4bacc2419c
@@ -64,7 +64,16 @@ A request must include the username of the requester, the requested action, and
|
|||||||
For example, if Bob has the policy below, then he can read pods only in the namespace `projectCarabou`:
|
For example, if Bob has the policy below, then he can read pods only in the namespace `projectCarabou`:
|
||||||
|
|
||||||
```json
|
```json
|
||||||
{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"user": "bob", "namespace": "projectCaribou", "resource": "pods", "readonly": true}}
|
{
|
||||||
|
"apiVersion": "abac.authorization.kubernetes.io/v1beta1",
|
||||||
|
"kind": "Policy",
|
||||||
|
"spec": {
|
||||||
|
"user": "bob",
|
||||||
|
"namespace": "projectCaribou",
|
||||||
|
"resource": "pods",
|
||||||
|
"readonly": true
|
||||||
|
}
|
||||||
|
}
|
||||||
```
|
```
|
||||||
If Bob makes the following request, the request is authorized because he is allowed to read objects in the `projectCaribou` namespace:
|
If Bob makes the following request, the request is authorized because he is allowed to read objects in the `projectCaribou` namespace:
|
||||||
|
|
||||||
@@ -82,7 +91,7 @@ If Bob makes the following request, the request is authorized because he is allo
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
If Bob makes a request to write (`creat`e or `update`) to the objects in the `projectCaribou` namespace, his authorization is denied. If Bob makes a request to read (`get`) objects in a different namespace such as `projectFish`, then his authorization is denied.
|
If Bob makes a request to write (`create` or `update`) to the objects in the `projectCaribou` namespace, his authorization is denied. If Bob makes a request to read (`get`) objects in a different namespace such as `projectFish`, then his authorization is denied.
|
||||||
|
|
||||||
Kubernetes authorization requires that you use common REST attributes to interact with existing organization-wide or cloud-provider-wide access control systems. It is important to use REST formatting because these control systems might interact with other APIs besides the Kubernetes API.
|
Kubernetes authorization requires that you use common REST attributes to interact with existing organization-wide or cloud-provider-wide access control systems. It is important to use REST formatting because these control systems might interact with other APIs besides the Kubernetes API.
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user