rbac: make it clear that subjects are case sensitive (#8007)
This commit is contained in:
committed by
zacharysarah
parent
c396c8d231
commit
aadbe7dafc
@@ -88,7 +88,7 @@ metadata:
|
|||||||
namespace: default
|
namespace: default
|
||||||
subjects:
|
subjects:
|
||||||
- kind: User
|
- kind: User
|
||||||
name: jane
|
name: jane # Name is case sensitive
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
roleRef:
|
roleRef:
|
||||||
kind: Role
|
kind: Role
|
||||||
@@ -102,7 +102,7 @@ This allows administrators to define a set of common roles for the entire cluste
|
|||||||
then reuse them within multiple namespaces.
|
then reuse them within multiple namespaces.
|
||||||
|
|
||||||
For instance, even though the following `RoleBinding` refers to a `ClusterRole`,
|
For instance, even though the following `RoleBinding` refers to a `ClusterRole`,
|
||||||
"dave" (the subject) will only be able to read secrets in the "development"
|
"dave" (the subject, case sensitive) will only be able to read secrets in the "development"
|
||||||
namespace (the namespace of the `RoleBinding`).
|
namespace (the namespace of the `RoleBinding`).
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
@@ -114,7 +114,7 @@ metadata:
|
|||||||
namespace: development # This only grants permissions within the "development" namespace.
|
namespace: development # This only grants permissions within the "development" namespace.
|
||||||
subjects:
|
subjects:
|
||||||
- kind: User
|
- kind: User
|
||||||
name: dave
|
name: dave # Name is case sensitive
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
roleRef:
|
roleRef:
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
@@ -134,7 +134,7 @@ metadata:
|
|||||||
name: read-secrets-global
|
name: read-secrets-global
|
||||||
subjects:
|
subjects:
|
||||||
- kind: Group
|
- kind: Group
|
||||||
name: manager
|
name: manager # Name is case sensitive
|
||||||
apiGroup: rbac.authorization.k8s.io
|
apiGroup: rbac.authorization.k8s.io
|
||||||
roleRef:
|
roleRef:
|
||||||
kind: ClusterRole
|
kind: ClusterRole
|
||||||
|
|||||||
Reference in New Issue
Block a user