Switch language name 'zh' to 'zh-cn'
This is the first step to rename 'zh' to 'zh-cn'. There are several reasons why we rename the language name.
- The upstream docsy theme changed the language name, leading to many warnings during site build;
The side-effect is that the i18n strings are no longer working.
- We believe renaming the language is the right thing to do, because this move can make room for other variants of Chinese language, such as 'zh-tw', 'zh-sg' etc.
There would be several follow-ups to this PR, such as fixing the intra-site links, adding redirects etc.
We will lock up changes to zh/zh-cn pages for the moment, until this one gets in.
This PR is based on commit cdad0a7342.
This commit is contained in:
Qiming Teng
@@ -0,0 +1,7 @@
|
||||
---
|
||||
title: "鉴权资源"
|
||||
weight: 5
|
||||
auto_generated: true
|
||||
---
|
||||
|
||||
|
||||
+619
@@ -0,0 +1,619 @@
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "rbac.authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/rbac/v1"
|
||||
kind: "ClusterRoleBinding"
|
||||
content_type: "api_reference"
|
||||
description: "ClusterRoleBinding 引用 ClusterRole，但不包含它。"
|
||||
title: "ClusterRoleBinding"
|
||||
weight: 6
|
||||
auto_generated: false
|
||||
---
|
||||
<!--
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "rbac.authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/rbac/v1"
|
||||
kind: "ClusterRoleBinding"
|
||||
content_type: "api_reference"
|
||||
description: "ClusterRoleBinding references a ClusterRole, but not contain it."
|
||||
title: "ClusterRoleBinding"
|
||||
weight: 6
|
||||
auto_generated: true
|
||||
---
|
||||
-->
|
||||
<!--
|
||||
`apiVersion: rbac.authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/rbac/v1"`
|
||||
-->
|
||||
`apiVersion: rbac.authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/rbac/v1"`
|
||||
<!--
|
||||
## ClusterRoleBinding {#ClusterRoleBinding}
|
||||
ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.
|
||||
-->
|
||||
## ClusterRoleBinding {#ClusterRoleBinding}
|
||||
|
||||
ClusterRoleBinding 引用 ClusterRole，但不包含它。
|
||||
它可以引用全局命名空间中的 ClusterRole，并通过 Subject 添加主体信息。
|
||||
<!--
|
||||
<hr>
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
- **kind**: ClusterRoleBinding
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
Standard object's metadata.
|
||||
-->
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
|
||||
- **kind**: ClusterRoleBinding
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
|
||||
标准对象的元数据。
|
||||
<!--
|
||||
- **roleRef** (RoleRef), required
|
||||
RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
|
||||
<a name="RoleRef"></a>
|
||||
*RoleRef contains information that points to the role being used*
|
||||
- **roleRef.apiGroup** (string), required
|
||||
APIGroup is the group for the resource being referenced
|
||||
- **roleRef.kind** (string), required
|
||||
Kind is the type of resource being referenced
|
||||
- **roleRef.name** (string), required
|
||||
Name is the name of resource being referenced
|
||||
-->
|
||||
- **roleRef** (RoleRef)，必需
|
||||
|
||||
RoleRef 只能引用全局命名空间中的 ClusterRole。
|
||||
如果无法解析 RoleRef，则 Authorizer 必定返回一个错误。
|
||||
|
||||
<a name="RoleRef"></a>
|
||||
**RoleRef 包含指向正被使用的角色的信息。**
|
||||
|
||||
- **roleRef.apiGroup** (string)，必需
|
||||
|
||||
apiGroup 是被引用资源的组
|
||||
|
||||
- **roleRef.kind** (string)，必需
|
||||
|
||||
kind 是被引用的资源的类别
|
||||
|
||||
- **roleRef.name** (string)，必需
|
||||
|
||||
name 是被引用的资源的名称
|
||||
<!--
|
||||
- **subjects** ([]Subject)
|
||||
Subjects holds references to the objects the role applies to.
|
||||
<a name="Subject"></a>
|
||||
*Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.*
|
||||
-->
|
||||
- **subjects** ([]Subject)
|
||||
|
||||
Subjects 包含角色所适用的对象的引用。
|
||||
|
||||
<a name="Subject"></a>
|
||||
**Subject 包含对角色绑定所适用的对象或用户标识的引用。其中可以包含直接 API 对象的引用或非对象（如用户名和组名）的值。**
|
||||
<!--
|
||||
- **subjects.kind** (string), required
|
||||
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
||||
- **subjects.name** (string), required
|
||||
Name of the object being referenced.
|
||||
-->
|
||||
- **subjects.kind** (string)，必需
|
||||
|
||||
被引用的对象的类别。这个 API 组定义的值是 `User`、`Group` 和 `ServiceAccount`。
|
||||
如果 Authorizer 无法识别类别值，则 Authorizer 应报告一个错误。
|
||||
|
||||
- **subjects.name** (string)，必需
|
||||
|
||||
被引用的对象的名称。
|
||||
<!--
|
||||
- **subjects.apiGroup** (string)
|
||||
APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
||||
- **subjects.namespace** (string)
|
||||
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
|
||||
-->
|
||||
- **subjects.apiGroup** (string)
|
||||
|
||||
apiGroup 包含被引用主体的 API 组。对于 ServiceAccount 主体默认为 ""。
|
||||
对于 User 和 Group 主体，默认为 "rbac.authorization.k8s.io"。
|
||||
|
||||
- **subjects.namespace** (string)
|
||||
|
||||
被引用对象的命名空间。
|
||||
如果对象类别是 "User" 或 "Group" 等非命名空间作用域的对象且该值不为空，
|
||||
则 Authorizer 应报告一个错误。
|
||||
<!--
|
||||
## ClusterRoleBindingList {#ClusterRoleBindingList}
|
||||
ClusterRoleBindingList is a collection of ClusterRoleBindings
|
||||
<hr>
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
- **kind**: ClusterRoleBindingList
|
||||
-->
|
||||
## ClusterRoleBindingList {#ClusterRoleBindingList}
|
||||
|
||||
ClusterRoleBindingList 是 ClusterRoleBinding 的集合。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
|
||||
- **kind**: ClusterRoleBindingList
|
||||
<!--
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
|
||||
Standard object's metadata.
|
||||
- **items** ([]<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>), required
|
||||
Items is a list of ClusterRoleBindings
|
||||
-->
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
|
||||
|
||||
标准的对象元数据。
|
||||
|
||||
- **items** ([]<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>)，必需
|
||||
|
||||
items 是 ClusterRoleBindings 的列表。
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
<hr>
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
<!--
|
||||
### `get` read the specified ClusterRoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `get` 读取指定的 ClusterRoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the ClusterRoleBinding
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
ClusterRoleBinding 的名称
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `list` list or watch objects of kind ClusterRoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `list` 列出或观测类别为 ClusterRoleBinding 的对象
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/clusterrolebindings
|
||||
<!--
|
||||
#### Parameters
|
||||
- **allowWatchBookmarks** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
- **watch** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **allowWatchBookmarks** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
|
||||
- **watch** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
<!--
|
||||
#### Response
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBindingList" >}}">ClusterRoleBindingList</a>): OK
|
||||
401: Unauthorized
|
||||
### `create` create a ClusterRoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBindingList" >}}">ClusterRoleBindingList</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
|
||||
### `create` 创建 ClusterRoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/rbac.authorization.k8s.io/v1/clusterrolebindings
|
||||
<!--
|
||||
#### Parameters
|
||||
- **body**: <a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>, required
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>，必需
|
||||
<!--
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): OK
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): Created
|
||||
202 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): Accepted
|
||||
401: Unauthorized
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `update` replace the specified ClusterRoleBinding
|
||||
#### HTTP Request
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the ClusterRoleBinding
|
||||
- **body**: <a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>, required
|
||||
-->
|
||||
### `update` 替换指定的 ClusterRoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
PUT /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}
|
||||
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
ClusterRoleBinding 的名称
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>，必需
|
||||
<!--
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `patch` partially update the specified ClusterRoleBinding
|
||||
#### HTTP Request
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the ClusterRoleBinding
|
||||
- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
|
||||
-->
|
||||
### `patch` 部分更新指定的 ClusterRoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
PATCH /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}
|
||||
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
ClusterRoleBinding 的名称
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>，必需
|
||||
<!--
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **force** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **force** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): OK
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-binding-v1#ClusterRoleBinding" >}}">ClusterRoleBinding</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `delete` delete a ClusterRoleBinding
|
||||
#### HTTP Request
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the ClusterRoleBinding
|
||||
-->
|
||||
### `delete` 删除 ClusterRoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
DELETE /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/{name}
|
||||
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
ClusterRoleBinding 的名称
|
||||
<!--
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **gracePeriodSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **propagationPolicy** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
-->
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **gracePeriodSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **propagationPolicy** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
<!--
|
||||
#### Response
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
|
||||
401: Unauthorized
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
|
||||
202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `deletecollection` delete collection of ClusterRoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `deletecollection` 删除 ClusterRoleBinding 的集合
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
DELETE /apis/rbac.authorization.k8s.io/v1/clusterrolebindings
|
||||
<!--
|
||||
#### Parameters
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **gracePeriodSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **propagationPolicy** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **gracePeriodSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **propagationPolicy** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
<!--
|
||||
#### Response
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
401: Unauthorized
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
+592
@@ -0,0 +1,592 @@
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "rbac.authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/rbac/v1"
|
||||
kind: "ClusterRole"
|
||||
content_type: "api_reference"
|
||||
description: "ClusterRole 是一个集群级别的 PolicyRule 逻辑分组，可以被 RoleBinding 或 ClusterRoleBinding 作为一个单元引用。"
|
||||
title: "ClusterRole"
|
||||
weight: 5
|
||||
auto_generated: false
|
||||
---
|
||||
<!--
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "rbac.authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/rbac/v1"
|
||||
kind: "ClusterRole"
|
||||
content_type: "api_reference"
|
||||
description: "ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding."
|
||||
title: "ClusterRole"
|
||||
weight: 5
|
||||
auto_generated: true
|
||||
---
|
||||
-->
|
||||
|
||||
`apiVersion: rbac.authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/rbac/v1"`
|
||||
<!--
|
||||
## ClusterRole {#ClusterRole}
|
||||
ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.
|
||||
<hr>
|
||||
-->
|
||||
## ClusterRole {#ClusterRole}
|
||||
|
||||
ClusterRole 是一个集群级别的 PolicyRule 逻辑分组，
|
||||
可以被 RoleBinding 或 ClusterRoleBinding 作为一个单元引用。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
|
||||
- **kind**: ClusterRole
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
<!--
|
||||
Standard object's metadata.
|
||||
- **aggregationRule** (AggregationRule)
|
||||
AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.
|
||||
<a name="AggregationRule"></a>
|
||||
*AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole*
|
||||
- **aggregationRule.clusterRoleSelectors** ([]<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
|
||||
ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added
|
||||
-->
|
||||
标准的对象元数据。
|
||||
|
||||
- **aggregationRule** (AggregationRule)
|
||||
|
||||
aggregationRule 是一个可选字段，用于描述如何构建这个 ClusterRole 的 rules。
|
||||
如果设置了 aggregationRule，则 rules 将由控制器管理，对 rules 的直接变更会被该控制器阻止。
|
||||
|
||||
<a name="AggregationRule"></a>
|
||||
**aggregationRule 描述如何定位并聚合其它 ClusterRole 到此 ClusterRole**
|
||||
|
||||
- **aggregationRule.clusterRoleSelectors** ([]<a href="{{< ref "../common-definitions/label-selector#LabelSelector" >}}">LabelSelector</a>)
|
||||
|
||||
clusterRoleSelectors 包含一个选择器的列表，用于查找 ClusterRole 并创建规则。
|
||||
如果发现任何选择器匹配的 ClusterRole，将添加其对应的权限。
|
||||
<!--
|
||||
- **rules** ([]PolicyRule)
|
||||
Rules holds all the PolicyRules for this ClusterRole
|
||||
|
||||
<a name="PolicyRule"></a>
|
||||
*PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.*
|
||||
|
||||
- **rules.apiGroups** ([]string)
|
||||
APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.
|
||||
|
||||
- **rules.resources** ([]string)
|
||||
Resources is a list of resources this rule applies to. '*' represents all resources.
|
||||
-->
|
||||
- **rules** ([]PolicyRule)
|
||||
|
||||
rules 包含了这个 ClusterRole 的所有 PolicyRule。
|
||||
|
||||
<a name="PolicyRule"></a>
|
||||
**PolicyRule 包含描述一个策略规则的信息，但不包含该规则适用于哪个主体或适用于哪个命名空间的信息。**
|
||||
|
||||
- **rules.apiGroups** ([]string)
|
||||
|
||||
apiGroups 是包含资源的 apiGroup 的名称。
|
||||
如果指定了多个 API 组，则允许针对任何 API 组中的其中一个枚举资源来请求任何操作。
|
||||
|
||||
- **rules.resources** ([]string)
|
||||
|
||||
resources 是此规则所适用的资源的列表。“*” 表示所有资源。
|
||||
<!--
|
||||
- **rules.verbs** ([]string), required
|
||||
Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
|
||||
|
||||
- **rules.resourceNames** ([]string)
|
||||
ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.
|
||||
|
||||
- **rules.nonResourceURLs** ([]string)
|
||||
NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.
|
||||
-->
|
||||
- **rules.verbs** ([]string)，必需
|
||||
|
||||
verbs 是适用于此规则中所包含的所有 ResourceKinds 的动作。
|
||||
“*” 表示所有动作。
|
||||
|
||||
- **rules.resourceNames** ([]string)
|
||||
|
||||
resourceNames 是此规则所适用的资源名称白名单，可选。
|
||||
空集合意味着允许所有资源。
|
||||
|
||||
- **rules.nonResourceURLs** ([]string)
|
||||
|
||||
nonResourceURLs 是用户应有权访问的一组部分 URL。
|
||||
允许使用 “*”，但仅能作为路径中最后一段且必须用于完整的一段，
|
||||
因为非资源 URL 没有划分命名空间。
|
||||
此字段仅适用于从 ClusterRoleBinding 引用的 ClusterRole。
|
||||
rules 可以应用到 API 资源（如 “pod” 或 “secret”）或非资源 URL 路径（如 “/api”），
|
||||
但不能同时应用于两者。
|
||||
<!--
|
||||
## ClusterRoleList {#ClusterRoleList}
|
||||
|
||||
ClusterRoleList is a collection of ClusterRoles
|
||||
-->
|
||||
## ClusterRoleList {#ClusterRoleList}
|
||||
|
||||
ClusterRoleList 是 ClusterRole 的集合。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
|
||||
- **kind**: ClusterRoleList
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
|
||||
<!--
|
||||
Standard object's metadata.
|
||||
|
||||
- **items** ([]<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>), required
|
||||
|
||||
Items is a list of ClusterRoles
|
||||
-->
|
||||
标准的对象元数据。
|
||||
|
||||
- **items** ([]<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>)，必需
|
||||
|
||||
items 是 ClusterRole 的列表。
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
<!--
|
||||
### `get` read the specified ClusterRole
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `get` 读取指定的 ClusterRole
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
|
||||
- **name** (*in path*): string, required
|
||||
name of the ClusterRole
|
||||
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (路径参数): string，必需
|
||||
|
||||
ClusterRole 的名称
|
||||
|
||||
- **pretty** (查询参数): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `list` list or watch objects of kind ClusterRole
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `list` 列出或观测类别为 ClusterRole 的对象
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/clusterroles
|
||||
<!--
|
||||
#### Parameters
|
||||
- **allowWatchBookmarks** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
- **watch** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **allowWatchBookmarks** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
|
||||
- **watch** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRoleList" >}}">ClusterRoleList</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `create` create a ClusterRole
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `create` 创建一个 ClusterRole
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/rbac.authorization.k8s.io/v1/clusterroles
|
||||
<!--
|
||||
#### Parameters
|
||||
- **body**: <a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `update` replace the specified ClusterRole
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `update` 替换指定的 ClusterRole
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
PUT /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the ClusterRole
|
||||
- **body**: <a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
ClusterRole 的名称
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `patch` partially update the specified ClusterRole
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `patch` 部分更新指定的 ClusterRole
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
PATCH /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the ClusterRole
|
||||
- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **force** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
ClusterRole 的名称
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **force** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/cluster-role-v1#ClusterRole" >}}">ClusterRole</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `delete` delete a ClusterRole
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `delete` 删除一个 ClusterRole
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
DELETE /apis/rbac.authorization.k8s.io/v1/clusterroles/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the ClusterRole
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **gracePeriodSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **propagationPolicy** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
ClusterRole 的名称
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **gracePeriodSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **propagationPolicy** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
|
||||
202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `deletecollection` delete collection of ClusterRole
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `deletecollection` 删除 ClusterRole 的集合
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
DELETE /apis/rbac.authorization.k8s.io/v1/clusterroles
|
||||
<!--
|
||||
#### Parameters
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **gracePeriodSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **propagationPolicy** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **gracePeriodSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **propagationPolicy** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
+146
@@ -0,0 +1,146 @@
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "LocalSubjectAccessReview"
|
||||
content_type: "api_reference"
|
||||
description: "LocalSubjectAccessReview 检查用户或组是否可以在给定的命名空间内执行某操作。"
|
||||
title: "LocalSubjectAccessReview"
|
||||
weight: 1
|
||||
---
|
||||
<!--
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "LocalSubjectAccessReview"
|
||||
content_type: "api_reference"
|
||||
description: "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace."
|
||||
title: "LocalSubjectAccessReview"
|
||||
weight: 1
|
||||
-->
|
||||
|
||||
`apiVersion: authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/authorization/v1"`
|
||||
|
||||
## LocalSubjectAccessReview {#LocalSubjectAccessReview}
|
||||
<!--
|
||||
LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: authorization.k8s.io/v1
|
||||
|
||||
- **kind**: LocalSubjectAccessReview
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
|
||||
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
-->
|
||||
LocalSubjectAccessReview 检查用户或组是否可以在给定的命名空间内执行某操作。
|
||||
划分命名空间范围的资源简化了命名空间范围的策略设置，例如权限检查。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: authorization.k8s.io/v1
|
||||
|
||||
- **kind**: LocalSubjectAccessReview
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
|
||||
标准的列表元数据。
|
||||
更多信息：https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
|
||||
<!--
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewSpec" >}}">SubjectAccessReviewSpec</a>), required
|
||||
|
||||
Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.
|
||||
|
||||
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
|
||||
|
||||
Status is filled in by the server and indicates whether the request is allowed or not
|
||||
-->
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewSpec" >}}">SubjectAccessReviewSpec</a>)，必需
|
||||
|
||||
spec 包含有关正在评估的请求的信息。
|
||||
spec.namespace 必须是你的请求所针对的命名空间。
|
||||
如果留空，则会被设置默认值。
|
||||
|
||||
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
|
||||
|
||||
status 由服务器填写，表示请求是否被允许。
|
||||
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` create a LocalSubjectAccessReview
|
||||
|
||||
#### HTTP Request
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` 创建 LocalSubjectAccessReview
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/authorization.k8s.io/v1/namespaces/{namespace}/localsubjectaccessreviews
|
||||
<!--
|
||||
#### Parameters
|
||||
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>, required
|
||||
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
+718
@@ -0,0 +1,718 @@
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "rbac.authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/rbac/v1"
|
||||
kind: "RoleBinding"
|
||||
content_type: "api_reference"
|
||||
description: "RoleBinding 引用一个角色，但不包含它。"
|
||||
title: "RoleBinding"
|
||||
weight: 8
|
||||
auto_generated: false
|
||||
---
|
||||
<!--
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "rbac.authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/rbac/v1"
|
||||
kind: "RoleBinding"
|
||||
content_type: "api_reference"
|
||||
description: "RoleBinding references a role, but does not contain it."
|
||||
title: "RoleBinding"
|
||||
weight: 8
|
||||
auto_generated: true
|
||||
---
|
||||
-->
|
||||
`apiVersion: rbac.authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/rbac/v1"`
|
||||
|
||||
## RoleBinding {#RoleBinding}
|
||||
<!--
|
||||
RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.
|
||||
-->
|
||||
RoleBinding 引用一个角色，但不包含它。
|
||||
RoleBinding 可以引用相同命名空间中的 Role 或全局命名空间中的 ClusterRole。
|
||||
RoleBinding 通过 Subjects 和所在的命名空间信息添加主体信息。
|
||||
处于给定命名空间中的 RoleBinding 仅在该命名空间中有效。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
|
||||
- **kind**: RoleBinding
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
<!--
|
||||
Standard object's metadata.
|
||||
|
||||
- **roleRef** (RoleRef), required
|
||||
|
||||
RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
|
||||
|
||||
<a name="RoleRef"></a>
|
||||
*RoleRef contains information that points to the role being used*
|
||||
-->
|
||||
标准的对象元数据。
|
||||
|
||||
- **roleRef** (RoleRef)，必需
|
||||
|
||||
roleRef 可以引用当前命名空间中的 Role 或全局命名空间中的 ClusterRole。
|
||||
如果无法解析 roleRef，则 Authorizer 必定返回一个错误。
|
||||
|
||||
<a name="RoleRef"></a>
|
||||
**roleRef 包含指向正被使用的角色的信息。**
|
||||
<!--
|
||||
- **roleRef.apiGroup** (string), required
|
||||
APIGroup is the group for the resource being referenced
|
||||
|
||||
- **roleRef.kind** (string), required
|
||||
Kind is the type of resource being referenced
|
||||
|
||||
- **roleRef.name** (string), required
|
||||
Name is the name of resource being referenced
|
||||
-->
|
||||
- **roleRef.apiGroup** (string)，必需
|
||||
|
||||
apiGroup 是被引用资源的组
|
||||
|
||||
- **roleRef.kind** (string)，必需
|
||||
|
||||
kind 是被引用的资源的类别
|
||||
|
||||
- **roleRef.name** (string)，必需
|
||||
|
||||
name 是被引用的资源的名称
|
||||
<!--
|
||||
Subjects holds references to the objects the role applies to.
|
||||
<a name="Subject"></a>
|
||||
*Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.*
|
||||
|
||||
- **subjects.kind** (string), required
|
||||
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
||||
-->
|
||||
- **subjects** ([]Subject)
|
||||
|
||||
subjects 包含角色所适用的对象的引用。
|
||||
|
||||
<a name="Subject"></a>
|
||||
**Subject 包含对角色绑定所适用的对象或用户标识的引用。其中可以包含直接 API 对象的引用或非对象（如用户名和组名）的值。**
|
||||
|
||||
- **subjects.kind** (string)，必需
|
||||
|
||||
被引用的对象的类别。
|
||||
这个 API 组定义的值是 `User`、`Group` 和 `ServiceAccount`。
|
||||
如果 Authorizer 无法识别类别值，则 Authorizer 应报告一个错误。
|
||||
<!--
|
||||
- **subjects.name** (string), required
|
||||
Name of the object being referenced.
|
||||
|
||||
- **subjects.apiGroup** (string)
|
||||
APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
|
||||
|
||||
- **subjects.namespace** (string)
|
||||
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
|
||||
-->
|
||||
- **subjects.name** (string)，必需
|
||||
|
||||
被引用的对象的名称。
|
||||
|
||||
- **subjects.apiGroup** (string)
|
||||
|
||||
apiGroup 包含被引用主体的 API 组。
|
||||
对于 ServiceAccount 主体默认为 ""。
|
||||
对于 User 和 Group 主体，默认为 "rbac.authorization.k8s.io"。
|
||||
|
||||
- **subjects.namespace** (string)
|
||||
|
||||
被引用的对象的命名空间。
|
||||
如果对象类别是 “User” 或 “Group” 等非命名空间作用域的对象且该值不为空，
|
||||
则 Authorizer 应报告一个错误。
|
||||
|
||||
## RoleBindingList {#RoleBindingList}
|
||||
<!--
|
||||
RoleBindingList is a collection of RoleBindings
|
||||
-->
|
||||
RoleBindingList 是 RoleBinding 的集合。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
|
||||
- **kind**: RoleBindingList
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
|
||||
<!--
|
||||
Standard object's metadata.
|
||||
|
||||
- **items** ([]<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>), required
|
||||
|
||||
Items is a list of RoleBindings
|
||||
-->
|
||||
标准的对象元数据。
|
||||
|
||||
- **items** ([]<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>)，必需
|
||||
|
||||
items 是 RoleBinding 的列表。
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
<hr>
|
||||
### `get` read the specified RoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `get` 读取指定的 RoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the RoleBinding
|
||||
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
RoleBinding 的名称
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `list` list or watch objects of kind RoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `list` 列出或观测类别为 RoleBinding 的对象
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings
|
||||
<!--
|
||||
#### Parameters
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **allowWatchBookmarks** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
- **watch** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **allowWatchBookmarks** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
|
||||
- **watch** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBindingList" >}}">RoleBindingList</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `list` list or watch objects of kind RoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `list` 列出或观测类别为 RoleBinding 的对象
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/rolebindings
|
||||
<!--
|
||||
#### Parameters
|
||||
- **allowWatchBookmarks** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
- **watch** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **allowWatchBookmarks** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
|
||||
- **watch** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBindingList" >}}">RoleBindingList</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `create` create a RoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `create` 创建 RoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings
|
||||
<!--
|
||||
#### Parameters
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `update` replace the specified RoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `update` 替换指定的 RoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
PUT /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the RoleBinding
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
RoleBinding 的名称
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `patch` partially update the specified RoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `patch` 部分更新指定的 RoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
PATCH /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the RoleBinding
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **force** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
RoleBinding 的名称
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **force** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/role-binding-v1#RoleBinding" >}}">RoleBinding</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `delete` delete a RoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `delete` 删除 RoleBinding
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the RoleBinding
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **gracePeriodSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **propagationPolicy** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
RoleBinding 的名称
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **gracePeriodSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **propagationPolicy** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
|
||||
202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `deletecollection` delete collection of RoleBinding
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `deletecollection` 删除 RoleBinding 的集合
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/rolebindings
|
||||
<!--
|
||||
#### Parameters
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **gracePeriodSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **propagationPolicy** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **gracePeriodSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **propagationPolicy** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
@@ -0,0 +1,690 @@
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "rbac.authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/rbac/v1"
|
||||
kind: "Role"
|
||||
content_type: "api_reference"
|
||||
description: "Role 是一个按命名空间划分的 PolicyRule 逻辑分组，可以被 RoleBinding 作为一个单元引用。"
|
||||
title: "Role"
|
||||
weight: 7
|
||||
auto_generated: false
|
||||
---
|
||||
<!--
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "rbac.authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/rbac/v1"
|
||||
kind: "Role"
|
||||
content_type: "api_reference"
|
||||
description: "Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding."
|
||||
title: "Role"
|
||||
weight: 7
|
||||
auto_generated: true
|
||||
---
|
||||
-->
|
||||
|
||||
`apiVersion: rbac.authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/rbac/v1"`
|
||||
|
||||
## Role {#Role}
|
||||
<!--
|
||||
Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.
|
||||
-->
|
||||
Role 是一个按命名空间划分的 PolicyRule 逻辑分组，可以被 RoleBinding 作为一个单元引用。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
|
||||
- **kind**: Role
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
<!--
|
||||
Standard object's metadata.
|
||||
|
||||
- **rules** ([]PolicyRule)
|
||||
Rules holds all the PolicyRules for this Role
|
||||
|
||||
<a name="PolicyRule"></a>
|
||||
*PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.*
|
||||
|
||||
- **rules.apiGroups** ([]string)
|
||||
APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.
|
||||
|
||||
- **rules.resources** ([]string)
|
||||
Resources is a list of resources this rule applies to. '*' represents all resources.
|
||||
-->
|
||||
标准的对象元数据。
|
||||
|
||||
- **rules** ([]PolicyRule)
|
||||
|
||||
rules 包含了这个 Role 的所有 PolicyRule。
|
||||
|
||||
<a name="PolicyRule"></a>
|
||||
**PolicyRule 包含描述一个策略规则的信息，但不包含该规则适用于哪个主体或适用于哪个命名空间的信息。**
|
||||
|
||||
- **rules.apiGroups** ([]string)
|
||||
|
||||
apiGroups 是包含资源的 apiGroup 的名称。
|
||||
如果指定了多个 API 组，则允许对任何 API 组中的其中一个枚举资源来请求任何操作。
|
||||
|
||||
- **rules.resources** ([]string)
|
||||
|
||||
resources 是此规则所适用的资源的列表。
|
||||
“*” 表示所有资源。
|
||||
<!--
|
||||
- **rules.verbs** ([]string), required
|
||||
Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
|
||||
|
||||
- **rules.resourceNames** ([]string)
|
||||
ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.
|
||||
|
||||
- **rules.nonResourceURLs** ([]string)
|
||||
NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.
|
||||
-->
|
||||
- **rules.verbs** ([]string)，必需
|
||||
|
||||
verbs 是适用于此规则中所包含的所有 ResourceKinds 的动作。
|
||||
“*” 表示所有动作。
|
||||
|
||||
- **rules.resourceNames** ([]string)
|
||||
|
||||
resourceNames 是此规则所适用的资源名称白名单，可选。
|
||||
空集合意味着允许所有资源。
|
||||
|
||||
- **rules.nonResourceURLs** ([]string)
|
||||
|
||||
nonResourceURLs 是用户应有权访问的一组部分 URL。
|
||||
允许使用 “*”，但仅能作为路径中最后一段且必须用于完整的一段，
|
||||
因为非资源 URL 没有划分命名空间。
|
||||
此字段仅适用于从 ClusterRoleBinding 引用的 ClusterRole。
|
||||
rules 可以应用到 API 资源（如 “pod” 或 “secret”）或非资源 URL 路径（如 “/api”），
|
||||
但不能同时应用于两者。
|
||||
|
||||
## RoleList {#RoleList}
|
||||
<!--
|
||||
RoleList is a collection of Roles
|
||||
-->
|
||||
RoleList 是 Role 的集合。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: rbac.authorization.k8s.io/v1
|
||||
|
||||
- **kind**: RoleList
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/list-meta#ListMeta" >}}">ListMeta</a>)
|
||||
<!--
|
||||
Standard object's metadata.
|
||||
|
||||
- **items** ([]<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>), required
|
||||
|
||||
Items is a list of Roles
|
||||
-->
|
||||
标准的对象元数据。
|
||||
|
||||
- **items** ([]<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>)，必需
|
||||
|
||||
items 是 Role 的列表。
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
<hr>
|
||||
### `get` read the specified Role
|
||||
#### HTTP Request
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `get` 读取指定的 Role
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the Role
|
||||
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
Role 的名称
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `list` list or watch objects of kind Role
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `list` 列出或观测类别为 Role 的对象
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles
|
||||
<!--
|
||||
#### Parameters
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **allowWatchBookmarks** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
- **watch** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **allowWatchBookmarks** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
|
||||
- **watch** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-v1#RoleList" >}}">RoleList</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `list` list or watch objects of kind Role
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `list` 列出或观测类别为 Role 的对象
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
GET /apis/rbac.authorization.k8s.io/v1/roles
|
||||
<!--
|
||||
#### Parameters
|
||||
- **allowWatchBookmarks** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
- **watch** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **allowWatchBookmarks** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#allowWatchBookmarks" >}}">allowWatchBookmarks</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
|
||||
- **watch** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#watch" >}}">watch</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-v1#RoleList" >}}">RoleList</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `create` create a Role
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `create` 创建 Role
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles
|
||||
<!--
|
||||
#### Parameters
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `update` replace the specified Role
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `update` 替换指定的 Role
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
PUT /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the Role
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
Role 的名称
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `patch` partially update the specified Role
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `patch` 部分更新指定的 Role
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
PATCH /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the Role
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
- **force** (*in query*): boolean
|
||||
<a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
Role 的名称
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/patch#Patch" >}}">Patch</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **force** (**查询参数**): boolean
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#force" >}}">force</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/role-v1#Role" >}}">Role</a>): Created
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `delete` delete a Role
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `delete` 删除 Role
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles/{name}
|
||||
<!--
|
||||
#### Parameters
|
||||
- **name** (*in path*): string, required
|
||||
name of the Role
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **gracePeriodSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **propagationPolicy** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **name** (**路径参数**): string，必需
|
||||
|
||||
Role 的名称
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **gracePeriodSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **propagationPolicy** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
|
||||
202 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
<!--
|
||||
### `deletecollection` delete collection of Role
|
||||
#### HTTP Request
|
||||
-->
|
||||
### `deletecollection` 删除 Role 的集合
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
DELETE /apis/rbac.authorization.k8s.io/v1/namespaces/{namespace}/roles
|
||||
<!--
|
||||
#### Parameters
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
- **continue** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
- **fieldSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
- **gracePeriodSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
- **labelSelector** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
- **limit** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
- **propagationPolicy** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
- **resourceVersion** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
- **resourceVersionMatch** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
- **timeoutSeconds** (*in query*): integer
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../common-definitions/delete-options#DeleteOptions" >}}">DeleteOptions</a>
|
||||
|
||||
- **continue** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#continue" >}}">continue</a>
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldSelector" >}}">fieldSelector</a>
|
||||
|
||||
- **gracePeriodSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#gracePeriodSeconds" >}}">gracePeriodSeconds</a>
|
||||
|
||||
- **labelSelector** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#labelSelector" >}}">labelSelector</a>
|
||||
|
||||
- **limit** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#limit" >}}">limit</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
- **propagationPolicy** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#propagationPolicy" >}}">propagationPolicy</a>
|
||||
|
||||
- **resourceVersion** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersion" >}}">resourceVersion</a>
|
||||
|
||||
- **resourceVersionMatch** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#resourceVersionMatch" >}}">resourceVersionMatch</a>
|
||||
|
||||
- **timeoutSeconds** (**查询参数**): integer
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#timeoutSeconds" >}}">timeoutSeconds</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../common-definitions/status#Status" >}}">Status</a>): OK
|
||||
|
||||
401: Unauthorized
|
||||
+230
@@ -0,0 +1,230 @@
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "SelfSubjectAccessReview"
|
||||
content_type: "api_reference"
|
||||
description: "SelfSubjectAccessReview 检查当前用户是否可以执行某操作。"
|
||||
title: "SelfSubjectAccessReview"
|
||||
weight: 2
|
||||
---
|
||||
<!--
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "SelfSubjectAccessReview"
|
||||
content_type: "api_reference"
|
||||
description: "SelfSubjectAccessReview checks whether or the current user can perform an action."
|
||||
title: "SelfSubjectAccessReview"
|
||||
weight: 2
|
||||
-->
|
||||
`apiVersion: authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/authorization/v1"`
|
||||
|
||||
## SelfSubjectAccessReview {#SelfSubjectAccessReview}
|
||||
<!--
|
||||
SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action
|
||||
-->
|
||||
SelfSubjectAccessReview 检查当前用户是否可以执行某操作。
|
||||
不填写 spec.namespace 表示 “在所有命名空间中”。
|
||||
Self 是一个特殊情况，因为用户应始终能够检查自己是否可以执行某操作。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: authorization.k8s.io/v1
|
||||
|
||||
- **kind**: SelfSubjectAccessReview
|
||||
|
||||
<!--
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/self-subject-access-review-v1#SelfSubjectAccessReviewSpec" >}}">SelfSubjectAccessReviewSpec</a>), required
|
||||
Spec holds information about the request being evaluated. user and groups must be empty
|
||||
Status is filled in by the server and indicates whether the request is allowed or not
|
||||
-->
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
|
||||
标准的列表元数据。
|
||||
更多信息：https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/self-subject-access-review-v1#SelfSubjectAccessReviewSpec" >}}">SelfSubjectAccessReviewSpec</a>)，必需
|
||||
|
||||
spec 包含有关正在评估的请求的信息。
|
||||
user 和 group 必须为空。
|
||||
|
||||
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
|
||||
|
||||
status 由服务器填写，表示请求是否被允许。
|
||||
|
||||
## SelfSubjectAccessReviewSpec {#SelfSubjectAccessReviewSpec}
|
||||
<!--
|
||||
SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set
|
||||
-->
|
||||
SelfSubjectAccessReviewSpec 是访问请求的描述。
|
||||
resourceAuthorizationAttributes 和 nonResourceAuthorizationAttributes 二者必须设置其一，并且只能设置其一。
|
||||
|
||||
<hr>
|
||||
<!--
|
||||
- **nonResourceAttributes** (NonResourceAttributes)
|
||||
NonResourceAttributes describes information for a non-resource access request
|
||||
<a name="NonResourceAttributes"></a>
|
||||
*NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface*
|
||||
- **nonResourceAttributes.path** (string)
|
||||
Path is the URL path of the request
|
||||
- **nonResourceAttributes.verb** (string)
|
||||
Verb is the standard HTTP verb
|
||||
-->
|
||||
|
||||
- **nonResourceAttributes** (NonResourceAttributes)
|
||||
|
||||
nonResourceAttributes 描述非资源访问请求的信息。
|
||||
|
||||
<a name="NonResourceAttributes"></a>
|
||||
**nonResourceAttributes 包括提供给 Authorizer 接口进行非资源请求鉴权时所用的属性。**
|
||||
|
||||
- **nonResourceAttributes.path** (string)
|
||||
|
||||
path 是请求的 URL 路径。
|
||||
|
||||
- **nonResourceAttributes.verb** (string)
|
||||
|
||||
verb 是标准的 HTTP 动作。
|
||||
<!--
|
||||
- **resourceAttributes** (ResourceAttributes)
|
||||
ResourceAuthorizationAttributes describes information for a resource access request
|
||||
|
||||
<a name="ResourceAttributes"></a>
|
||||
*ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface*
|
||||
|
||||
- **resourceAttributes.group** (string)
|
||||
Group is the API Group of the Resource. "*" means all.
|
||||
|
||||
- **resourceAttributes.name** (string)
|
||||
Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
|
||||
-->
|
||||
- **resourceAttributes** (ResourceAttributes)
|
||||
|
||||
resourceAuthorizationAttributes 描述资源访问请求的信息。
|
||||
|
||||
<a name="ResourceAttributes"></a>
|
||||
**resourceAttributes 包括提供给 Authorizer 接口进行资源请求鉴权时所用的属性。**
|
||||
|
||||
- **resourceAttributes.group** (string)
|
||||
|
||||
group 是资源的 API 组。
|
||||
"*" 表示所有组。
|
||||
|
||||
- **resourceAttributes.name** (string)
|
||||
|
||||
name 是 "get" 正在请求或 "delete" 已删除的资源的名称。
|
||||
""（空字符串）表示所有资源。
|
||||
<!--
|
||||
- **resourceAttributes.namespace** (string)
|
||||
Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
|
||||
|
||||
- **resourceAttributes.resource** (string)
|
||||
Resource is one of the existing resource types. "*" means all.
|
||||
-->
|
||||
- **resourceAttributes.namespace** (string)
|
||||
|
||||
namespace 是正在请求的操作的命名空间。
|
||||
目前，无命名空间和所有命名空间之间没有区别。
|
||||
对于 LocalSubjectAccessReviews，默认为 ""（空字符串）。
|
||||
对于集群范围的资源，默认为 ""（空字符串）。
|
||||
对于来自 SubjectAccessReview 或 SelfSubjectAccessReview 的命名空间范围的资源，""（空字符串）表示 "all"（所有资源）。
|
||||
|
||||
- **resourceAttributes.resource** (string)
|
||||
|
||||
resource 是现有的资源类别之一。
|
||||
"*" 表示所有资源类别。
|
||||
<!--
|
||||
- **resourceAttributes.subresource** (string)
|
||||
Subresource is one of the existing resource types. "" means none.
|
||||
|
||||
- **resourceAttributes.verb** (string)
|
||||
Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.
|
||||
|
||||
- **resourceAttributes.version** (string)
|
||||
Version is the API Version of the Resource. "*" means all.
|
||||
-->
|
||||
- **resourceAttributes.subresource** (string)
|
||||
|
||||
subresource 是现有的资源类型之一。
|
||||
"" 表示无。
|
||||
|
||||
- **resourceAttributes.verb** (string)
|
||||
|
||||
verb 是 kubernetes 资源 API 动作，例如 get、list、watch、create、update、delete、proxy。
|
||||
"*" 表示所有动作。
|
||||
|
||||
- **resourceAttributes.version** (string)
|
||||
|
||||
version 是资源的 API 版本。
|
||||
"*" 表示所有版本。
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` create a SelfSubjectAccessReview
|
||||
|
||||
#### HTTP Request
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` 创建 SelfSubjectAccessReview
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/authorization.k8s.io/v1/selfsubjectaccessreviews
|
||||
<!--
|
||||
#### Parameters
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/self-subject-access-review-v1#SelfSubjectAccessReview" >}}">SelfSubjectAccessReview</a>, required
|
||||
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/self-subject-access-review-v1#SelfSubjectAccessReview" >}}">SelfSubjectAccessReview</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/self-subject-access-review-v1#SelfSubjectAccessReview" >}}">SelfSubjectAccessReview</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/self-subject-access-review-v1#SelfSubjectAccessReview" >}}">SelfSubjectAccessReview</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/self-subject-access-review-v1#SelfSubjectAccessReview" >}}">SelfSubjectAccessReview</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
+246
@@ -0,0 +1,246 @@
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "SelfSubjectRulesReview"
|
||||
content_type: "api_reference"
|
||||
description: "SelfSubjectRulesReview 枚举当前用户可以在某命名空间内执行的操作集合。"
|
||||
title: "SelfSubjectRulesReview"
|
||||
weight: 3
|
||||
---
|
||||
<!--
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "SelfSubjectRulesReview"
|
||||
content_type: "api_reference"
|
||||
description: "SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace."
|
||||
title: "SelfSubjectRulesReview"
|
||||
weight: 3
|
||||
-->
|
||||
`apiVersion: authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/authorization/v1"`
|
||||
|
||||
## SelfSubjectRulesReview {#SelfSubjectRulesReview}
|
||||
<!--
|
||||
SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.
|
||||
-->
|
||||
SelfSubjectRulesReview 枚举当前用户可以在某命名空间内执行的操作集合。
|
||||
返回的操作列表可能不完整，具体取决于服务器的鉴权模式以及评估过程中遇到的任何错误。
|
||||
SelfSubjectRulesReview 应由 UI 用于显示/隐藏操作，或让最终用户尽快理解自己的权限。
|
||||
SelfSubjectRulesReview 不得被外部系统使用以驱动鉴权决策，
|
||||
因为这会引起混淆代理人（confused deputy）、缓存有效期/吊销（cache lifetime/revocation）和正确性问题。
|
||||
SubjectAccessReview 和 LocalAccessReview 是遵从 API 服务器所做鉴权决策的正确方式。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: authorization.k8s.io/v1
|
||||
|
||||
- **kind**: SelfSubjectRulesReview
|
||||
|
||||
<!--
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/self-subject-rules-review-v1#SelfSubjectRulesReviewSpec" >}}">SelfSubjectRulesReviewSpec</a>), required
|
||||
|
||||
Spec holds information about the request being evaluated.
|
||||
-->
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
|
||||
标准的列表元数据。
|
||||
更多信息：https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/self-subject-rules-review-v1#SelfSubjectRulesReviewSpec" >}}">SelfSubjectRulesReviewSpec</a>)，必需
|
||||
|
||||
spec 包含有关正在评估的请求的信息。
|
||||
<!--
|
||||
- **status** (SubjectRulesReviewStatus)
|
||||
Status is filled in by the server and indicates the set of actions a user can perform.
|
||||
<a name="SubjectRulesReviewStatus"></a>
|
||||
*SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.*
|
||||
- **status.incomplete** (boolean), required
|
||||
Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
|
||||
- **status.nonResourceRules** ([]NonResourceRule), required
|
||||
NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
|
||||
<a name="NonResourceRule"></a>
|
||||
*NonResourceRule holds information that describes a rule for the non-resource*
|
||||
-->
|
||||
- **status** (SubjectRulesReviewStatus)
|
||||
|
||||
status 由服务器填写，表示用户可以执行的操作的集合。
|
||||
|
||||
<a name="SubjectRulesReviewStatus"></a>
|
||||
**SubjectRulesReviewStatus 包含规则检查的结果。
|
||||
此检查可能不完整，具体取决于服务器配置的 Authorizer 的集合以及评估期间遇到的任何错误。
|
||||
由于鉴权规则是叠加的，所以如果某个规则出现在列表中，即使该列表不完整，也可以安全地假定该主体拥有该权限。**
|
||||
|
||||
- **status.incomplete** (boolean)，必需
|
||||
|
||||
当此调用返回的规则不完整时，incomplete 结果为 true。
|
||||
这种情况常见于 Authorizer（例如外部 Authorizer）不支持规则评估时。
|
||||
|
||||
- **status.nonResourceRules** ([]NonResourceRule)，必需
|
||||
|
||||
nonResourceRules 是允许主体对非资源执行路径执行的操作列表。
|
||||
该列表顺序不重要，可以包含重复项，还可能不完整。
|
||||
|
||||
<a name="NonResourceRule"></a>
|
||||
**nonResourceRule 包含描述非资源路径的规则的信息。**
|
||||
<!--
|
||||
- **status.nonResourceRules.verbs** ([]string), required
|
||||
Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. "*" means all.
|
||||
- **status.nonResourceRules.nonResourceURLs** ([]string)
|
||||
NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. "*" means all.
|
||||
- **status.resourceRules** ([]ResourceRule), required
|
||||
ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
|
||||
<a name="ResourceRule"></a>
|
||||
*ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.*
|
||||
- **status.resourceRules.verbs** ([]string), required
|
||||
Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. "*" means all.
|
||||
-->
|
||||
- **status.nonResourceRules.verbs** ([]string)，必需
|
||||
|
||||
verb 是 kubernetes 非资源 API 动作的列表，例如 get、post、put、delete、patch、head、options。
|
||||
"*" 表示所有动作。
|
||||
|
||||
- **status.nonResourceRules.nonResourceURLs** ([]string)
|
||||
|
||||
nonResourceURLs 是用户应有权访问的一组部分 URL。
|
||||
允许使用 "*"，但仅能作为路径中最后一段且必须用于完整的一段。
|
||||
"*" 表示全部。
|
||||
|
||||
- **status.resourceRules** ([]ResourceRule)，必需
|
||||
|
||||
resourceRules 是允许主体对资源执行的操作的列表。
|
||||
该列表顺序不重要，可以包含重复项，还可能不完整。
|
||||
|
||||
<a name="ResourceRule"></a>
|
||||
**resourceRule 是允许主体对资源执行的操作的列表。该列表顺序不重要，可以包含重复项，还可能不完整。**
|
||||
|
||||
- **status.resourceRules.verbs** ([]string)，必需
|
||||
|
||||
verb 是 kubernetes 资源 API 动作的列表，例如 get、list、watch、create、update、delete、proxy。
|
||||
"*" 表示所有动作。
|
||||
<!--
|
||||
- **status.resourceRules.apiGroups** ([]string)
|
||||
APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "*" means all.
|
||||
- **status.resourceRules.resourceNames** ([]string)
|
||||
ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. "*" means all.
|
||||
- **status.resourceRules.resources** ([]string)
|
||||
Resources is a list of resources this rule applies to. "*" means all in the specified apiGroups.
|
||||
"*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
|
||||
- **status.evaluationError** (string)
|
||||
EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
|
||||
-->
|
||||
- **status.resourceRules.apiGroups** ([]string)
|
||||
|
||||
apiGroups 是包含资源的 APIGroup 的名称。
|
||||
如果指定了多个 API 组，则允许对任何 API 组中枚举的资源之一请求任何操作。
|
||||
"*" 表示所有 APIGroup。
|
||||
|
||||
- **status.resourceRules.resourceNames** ([]string)
|
||||
|
||||
resourceNames 是此规则所适用的资源名称白名单，可选。
|
||||
空集合意味着允许所有资源。
|
||||
"*" 表示所有资源。
|
||||
|
||||
- **status.resourceRules.resources** ([]string)
|
||||
|
||||
resources 是此规则所适用的资源的列表。
|
||||
"*" 表示指定 APIGroup 中的所有资源。
|
||||
"*/foo" 表示指定 APIGroup 中所有资源的子资源 "foo"。
|
||||
|
||||
- **status.evaluationError** (string)
|
||||
|
||||
evaluationError 可以与 rules 一起出现。
|
||||
它表示在规则评估期间发生错误，例如 Authorizer 不支持规则评估以及 resourceRules 和/或 nonResourceRules 可能不完整。
|
||||
|
||||
## SelfSubjectRulesReviewSpec {#SelfSubjectRulesReviewSpec}
|
||||
|
||||
<!--
|
||||
SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.
|
||||
|
||||
<hr>
|
||||
|
||||
- **namespace** (string)
|
||||
|
||||
Namespace to evaluate rules for. Required.
|
||||
-->
|
||||
SelfSubjectRulesReviewSpec 定义 SelfSubjectRulesReview 的规范。
|
||||
|
||||
<hr>
|
||||
|
||||
- **namespace** (string)
|
||||
|
||||
namespace 是要评估规则的命名空间。
|
||||
必需。
|
||||
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` create a SelfSubjectRulesReview
|
||||
|
||||
#### HTTP Request
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` 创建 SelfSubjectRulesReview
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/authorization.k8s.io/v1/selfsubjectrulesreviews
|
||||
<!--
|
||||
#### Parameters
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/self-subject-rules-review-v1#SelfSubjectRulesReview" >}}">SelfSubjectRulesReview</a>, required
|
||||
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/self-subject-rules-review-v1#SelfSubjectRulesReview" >}}">SelfSubjectRulesReview</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/self-subject-rules-review-v1#SelfSubjectRulesReview" >}}">SelfSubjectRulesReview</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/self-subject-rules-review-v1#SelfSubjectRulesReview" >}}">SelfSubjectRulesReview</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/self-subject-rules-review-v1#SelfSubjectRulesReview" >}}">SelfSubjectRulesReview</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
+301
@@ -0,0 +1,301 @@
|
||||
---
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "SubjectAccessReview"
|
||||
content_type: "api_reference"
|
||||
description: "SubjectAccessReview 检查用户或组是否可以执行某操作。"
|
||||
title: "SubjectAccessReview"
|
||||
weight: 4
|
||||
---
|
||||
<!--
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "SubjectAccessReview"
|
||||
content_type: "api_reference"
|
||||
description: "SubjectAccessReview checks whether or not a user or group can perform an action."
|
||||
title: "SubjectAccessReview"
|
||||
weight: 4
|
||||
-->
|
||||
|
||||
`apiVersion: authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/authorization/v1"`
|
||||
|
||||
## SubjectAccessReview {#SubjectAccessReview}
|
||||
<!--
|
||||
SubjectAccessReview checks whether or not a user or group can perform an action.
|
||||
-->
|
||||
SubjectAccessReview 检查用户或组是否可以执行某操作。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: authorization.k8s.io/v1
|
||||
|
||||
- **kind**: SubjectAccessReview
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
<!--
|
||||
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewSpec" >}}">SubjectAccessReviewSpec</a>), required
|
||||
Spec holds information about the request being evaluated
|
||||
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
|
||||
Status is filled in by the server and indicates whether the request is allowed or not
|
||||
-->
|
||||
标准的列表元数据。
|
||||
更多信息：https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewSpec" >}}">SubjectAccessReviewSpec</a>)，必需
|
||||
|
||||
spec 包含有关正在评估的请求的信息。
|
||||
|
||||
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
|
||||
|
||||
status 由服务器填写，表示请求是否被允许。
|
||||
|
||||
## SubjectAccessReviewSpec {#SubjectAccessReviewSpec}
|
||||
<!--
|
||||
SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set
|
||||
-->
|
||||
SubjectAccessReviewSpec 是访问请求的描述。
|
||||
resourceAuthorizationAttributes 和 nonResourceAuthorizationAttributes 二者必须设置其一，并且只能设置其一。
|
||||
|
||||
<hr>
|
||||
|
||||
<!--
|
||||
- **extra** (map[string][]string)
|
||||
Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.
|
||||
- **groups** ([]string)
|
||||
Groups is the groups you're testing for.
|
||||
-->
|
||||
- **extra** (map[string][]string)
|
||||
|
||||
extra 对应于来自鉴权器的 user.Info.GetExtra() 方法。
|
||||
由于这是针对 Authorizer 的输入，所以它需要在此处反映。
|
||||
|
||||
- **groups** ([]string)
|
||||
|
||||
groups 是你正在测试的组。
|
||||
<!--
|
||||
- **nonResourceAttributes** (NonResourceAttributes)
|
||||
NonResourceAttributes describes information for a non-resource access request
|
||||
|
||||
<a name="NonResourceAttributes"></a>
|
||||
*NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface*
|
||||
|
||||
- **nonResourceAttributes.path** (string)
|
||||
Path is the URL path of the request
|
||||
|
||||
- **nonResourceAttributes.verb** (string)
|
||||
Verb is the standard HTTP verb
|
||||
-->
|
||||
- **nonResourceAttributes** (NonResourceAttributes)
|
||||
|
||||
nonResourceAttributes 描述非资源访问请求的信息。
|
||||
|
||||
<a name="NonResourceAttributes"></a>
|
||||
**nonResourceAttributes 包括提供给 Authorizer 接口进行非资源请求鉴权时所用的属性。**
|
||||
|
||||
- **nonResourceAttributes.path** (string)
|
||||
|
||||
path 是请求的 URL 路径。
|
||||
|
||||
- **nonResourceAttributes.verb** (string)
|
||||
|
||||
verb 是标准的 HTTP 动作。
|
||||
<!--
|
||||
- **resourceAttributes** (ResourceAttributes)
|
||||
ResourceAuthorizationAttributes describes information for a resource access request
|
||||
|
||||
<a name="ResourceAttributes"></a>
|
||||
*ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface*
|
||||
|
||||
- **resourceAttributes.group** (string)
|
||||
Group is the API Group of the Resource. "*" means all.
|
||||
|
||||
- **resourceAttributes.name** (string)
|
||||
Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
|
||||
-->
|
||||
- **resourceAttributes** (ResourceAttributes)
|
||||
|
||||
resourceAuthorizationAttributes 描述资源访问请求的信息。
|
||||
|
||||
<a name="ResourceAttributes"></a>
|
||||
**resourceAttributes 包括提供给 Authorizer 接口进行资源请求鉴权时所用的属性。**
|
||||
|
||||
- **resourceAttributes.group** (string)
|
||||
|
||||
group 是资源的 API 组。
|
||||
"*" 表示所有资源。
|
||||
|
||||
- **resourceAttributes.name** (string)
|
||||
|
||||
name 是 "get" 正在请求或 "delete" 已删除的资源。
|
||||
""（空字符串）表示所有资源。
|
||||
<!--
|
||||
- **resourceAttributes.namespace** (string)
|
||||
Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
|
||||
|
||||
- **resourceAttributes.resource** (string)
|
||||
Resource is one of the existing resource types. "*" means all.
|
||||
|
||||
- **resourceAttributes.subresource** (string)
|
||||
Subresource is one of the existing resource types. "" means none.
|
||||
-->
|
||||
- **resourceAttributes.namespace** (string)
|
||||
|
||||
namespace 是正在请求的操作的命名空间。
|
||||
目前，无命名空间和所有命名空间之间没有区别。
|
||||
对于 LocalSubjectAccessReviews，默认为 ""（空字符串）。
|
||||
对于集群范围的资源，默认为 ""（空字符串）。
|
||||
对于来自 SubjectAccessReview 或 SelfSubjectAccessReview 的命名空间范围的资源，
|
||||
""（空字符串）表示 "all"（所有资源）。
|
||||
|
||||
- **resourceAttributes.resource** (string)
|
||||
|
||||
resource 是现有的资源类别之一。
|
||||
"*" 表示所有资源类别。
|
||||
|
||||
- **resourceAttributes.subresource** (string)
|
||||
|
||||
subresource 是现有的资源类别之一。
|
||||
"" 表示无子资源。
|
||||
<!--
|
||||
- **resourceAttributes.verb** (string)
|
||||
Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.
|
||||
|
||||
- **resourceAttributes.version** (string)
|
||||
Version is the API Version of the Resource. "*" means all.
|
||||
|
||||
- **uid** (string)
|
||||
UID information about the requesting user.
|
||||
|
||||
- **user** (string)
|
||||
User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups
|
||||
-->
|
||||
- **resourceAttributes.verb** (string)
|
||||
|
||||
verb 是 kubernetes 资源的 API 动作，例如 get、list、watch、create、update、delete、proxy。
|
||||
"*" 表示所有动作。
|
||||
|
||||
- **resourceAttributes.version** (string)
|
||||
|
||||
version 是资源的 API 版本。
|
||||
"*" 表示所有版本。
|
||||
|
||||
- **uid** (string)
|
||||
|
||||
有关正在请求的用户的 UID 信息。
|
||||
|
||||
- **user** (string)
|
||||
|
||||
user 是你正在测试的用户。
|
||||
如果你指定 “user” 而不是 “groups”，它将被解读为“如果 user 不是任何组的成员，将会怎样”。
|
||||
|
||||
## SubjectAccessReviewStatus {#SubjectAccessReviewStatus}
|
||||
|
||||
SubjectAccessReviewStatus
|
||||
|
||||
<hr>
|
||||
|
||||
<!--
|
||||
- **allowed** (boolean), required
|
||||
Allowed is required. True if the action would be allowed, false otherwise.
|
||||
|
||||
- **denied** (boolean)
|
||||
Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
|
||||
-->
|
||||
- **allowed** (boolean)，必需
|
||||
|
||||
allowed 是必需的。
|
||||
如果允许该操作，则为 true，否则为 false。
|
||||
|
||||
- **denied** (boolean)
|
||||
|
||||
denied 是可选的。
|
||||
如果拒绝该操作，则为 true，否则为 false。
|
||||
如果 allowed 和 denied 均为 false，则 Authorizer 对是否鉴权操作没有意见。
|
||||
如果 allowed 为 true，则 denied 不能为 true。
|
||||
<!--
|
||||
- **evaluationError** (string)
|
||||
EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
|
||||
|
||||
- **reason** (string)
|
||||
Reason is optional. It indicates why a request was allowed or denied.
|
||||
-->
|
||||
- **evaluationError** (string)
|
||||
|
||||
evaluationError 表示鉴权检查期间发生一些错误。
|
||||
出现错误的情况下完全有可能继续确定鉴权状态。
|
||||
例如，RBAC 可能缺少一个角色，但仍存在足够多的角色进行绑定，进而了解请求有关的原因。
|
||||
|
||||
- **reason** (string)
|
||||
|
||||
reason 是可选的。
|
||||
它表示为什么允许或拒绝请求。
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` create a SubjectAccessReview
|
||||
|
||||
#### HTTP Request
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` 创建 SubjectAccessReview
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/authorization.k8s.io/v1/subjectaccessreviews
|
||||
<!--
|
||||
#### Parameters
|
||||
- **body**: <a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReview" >}}">SubjectAccessReview</a>, required
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReview" >}}">SubjectAccessReview</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReview" >}}">SubjectAccessReview</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReview" >}}">SubjectAccessReview</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReview" >}}">SubjectAccessReview</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
Reference in New Issue
Block a user