Merge pull request #24004 from negz/patch-1

Clarify that bind verb does not require resourceNames
2020-09-20 08:22:30 -07:00
parent 3f4b883f17 2f9b5e122e
commit 51d910e1eb
1 changed files with 1 additions and 0 deletions
@@ -891,6 +891,7 @@ rules:
 - apiGroups: ["rbac.authorization.k8s.io"]
  resources: ["clusterroles"]
  verbs: ["bind"]
+  # omit resourceNames to allow binding any ClusterRole
  resourceNames: ["admin","edit","view"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1