Merge pull request #24004 from negz/patch-1
Clarify that bind verb does not require resourceNames
This commit is contained in:
@@ -891,6 +891,7 @@ rules:
|
|||||||
- apiGroups: ["rbac.authorization.k8s.io"]
|
- apiGroups: ["rbac.authorization.k8s.io"]
|
||||||
resources: ["clusterroles"]
|
resources: ["clusterroles"]
|
||||||
verbs: ["bind"]
|
verbs: ["bind"]
|
||||||
|
# omit resourceNames to allow binding any ClusterRole
|
||||||
resourceNames: ["admin","edit","view"]
|
resourceNames: ["admin","edit","view"]
|
||||||
---
|
---
|
||||||
apiVersion: rbac.authorization.k8s.io/v1
|
apiVersion: rbac.authorization.k8s.io/v1
|
||||||
|
|||||||
Reference in New Issue
Block a user