rbac: make it clear that subjects are case sensitive (#8007)

This commit is contained in:
Eric Chiang
2018-04-06 12:12:08 -07:00
committed by zacharysarah
parent c396c8d231
commit aadbe7dafc
+4 -4
View File
@@ -88,7 +88,7 @@ metadata:
namespace: default namespace: default
subjects: subjects:
- kind: User - kind: User
name: jane name: jane # Name is case sensitive
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
roleRef: roleRef:
kind: Role kind: Role
@@ -102,7 +102,7 @@ This allows administrators to define a set of common roles for the entire cluste
then reuse them within multiple namespaces. then reuse them within multiple namespaces.
For instance, even though the following `RoleBinding` refers to a `ClusterRole`, For instance, even though the following `RoleBinding` refers to a `ClusterRole`,
"dave" (the subject) will only be able to read secrets in the "development" "dave" (the subject, case sensitive) will only be able to read secrets in the "development"
namespace (the namespace of the `RoleBinding`). namespace (the namespace of the `RoleBinding`).
```yaml ```yaml
@@ -114,7 +114,7 @@ metadata:
namespace: development # This only grants permissions within the "development" namespace. namespace: development # This only grants permissions within the "development" namespace.
subjects: subjects:
- kind: User - kind: User
name: dave name: dave # Name is case sensitive
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
roleRef: roleRef:
kind: ClusterRole kind: ClusterRole
@@ -134,7 +134,7 @@ metadata:
name: read-secrets-global name: read-secrets-global
subjects: subjects:
- kind: Group - kind: Group
name: manager name: manager # Name is case sensitive
apiGroup: rbac.authorization.k8s.io apiGroup: rbac.authorization.k8s.io
roleRef: roleRef:
kind: ClusterRole kind: ClusterRole