trivial markdown changes to cleanup page rendering

inserted json body pretty printed for further clarity.
This commit is contained in:
Rick Sostheim
2017-05-21 21:12:51 -07:00
committed by Andrew Chen
parent cdd28dd7f3
commit 4bacc2419c
+11 -2
View File
@@ -64,7 +64,16 @@ A request must include the username of the requester, the requested action, and
For example, if Bob has the policy below, then he can read pods only in the namespace `projectCarabou`: For example, if Bob has the policy below, then he can read pods only in the namespace `projectCarabou`:
```json ```json
{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind": "Policy", "spec": {"user": "bob", "namespace": "projectCaribou", "resource": "pods", "readonly": true}} {
"apiVersion": "abac.authorization.kubernetes.io/v1beta1",
"kind": "Policy",
"spec": {
"user": "bob",
"namespace": "projectCaribou",
"resource": "pods",
"readonly": true
}
}
``` ```
If Bob makes the following request, the request is authorized because he is allowed to read objects in the `projectCaribou` namespace: If Bob makes the following request, the request is authorized because he is allowed to read objects in the `projectCaribou` namespace:
@@ -82,7 +91,7 @@ If Bob makes the following request, the request is authorized because he is allo
} }
} }
``` ```
If Bob makes a request to write (`creat`e or `update`) to the objects in the `projectCaribou` namespace, his authorization is denied. If Bob makes a request to read (`get`) objects in a different namespace such as `projectFish`, then his authorization is denied. If Bob makes a request to write (`create` or `update`) to the objects in the `projectCaribou` namespace, his authorization is denied. If Bob makes a request to read (`get`) objects in a different namespace such as `projectFish`, then his authorization is denied.
Kubernetes authorization requires that you use common REST attributes to interact with existing organization-wide or cloud-provider-wide access control systems. It is important to use REST formatting because these control systems might interact with other APIs besides the Kubernetes API. Kubernetes authorization requires that you use common REST attributes to interact with existing organization-wide or cloud-provider-wide access control systems. It is important to use REST formatting because these control systems might interact with other APIs besides the Kubernetes API.