updated vendor
This commit is contained in:
+13
-2
@@ -47,6 +47,7 @@ message ClusterRole {
|
||||
// Rules holds all the PolicyRules for this ClusterRole
|
||||
// +optional
|
||||
// +listType=atomic
|
||||
// +k8s:alpha(since: "1.36")=+k8s:optional
|
||||
repeated PolicyRule rules = 2;
|
||||
|
||||
// AggregationRule is an optional field that describes how to build the Rules for this ClusterRole.
|
||||
@@ -67,10 +68,12 @@ message ClusterRoleBinding {
|
||||
// Subjects holds references to the objects the role applies to.
|
||||
// +optional
|
||||
// +listType=atomic
|
||||
// +k8s:alpha(since: "1.36")=+k8s:optional
|
||||
repeated Subject subjects = 2;
|
||||
|
||||
// RoleRef can only reference a ClusterRole in the global namespace.
|
||||
// If the RoleRef cannot be resolved, the Authorizer must return an error.
|
||||
// +required
|
||||
optional RoleRef roleRef = 3;
|
||||
}
|
||||
|
||||
@@ -101,6 +104,8 @@ message ClusterRoleList {
|
||||
message PolicyRule {
|
||||
// Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
|
||||
// +listType=atomic
|
||||
// +required
|
||||
// +k8s:alpha(since: "1.36")=+k8s:required
|
||||
repeated string verbs = 1;
|
||||
|
||||
// APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of
|
||||
@@ -138,6 +143,7 @@ message Role {
|
||||
// Rules holds all the PolicyRules for this Role
|
||||
// +optional
|
||||
// +listType=atomic
|
||||
// +k8s:alpha(since: "1.36")=+k8s:optional
|
||||
repeated PolicyRule rules = 2;
|
||||
}
|
||||
|
||||
@@ -153,10 +159,12 @@ message RoleBinding {
|
||||
// Subjects holds references to the objects the role applies to.
|
||||
// +optional
|
||||
// +listType=atomic
|
||||
// +k8s:alpha(since: "1.36")=+k8s:optional
|
||||
repeated Subject subjects = 2;
|
||||
|
||||
// RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace.
|
||||
// If the RoleRef cannot be resolved, the Authorizer must return an error.
|
||||
// +required
|
||||
optional RoleRef roleRef = 3;
|
||||
}
|
||||
|
||||
@@ -185,14 +193,16 @@ message RoleList {
|
||||
// RoleRef contains information that points to the role being used
|
||||
message RoleRef {
|
||||
// APIGroup is the group for the resource being referenced
|
||||
// +optional
|
||||
optional string apiGroup = 1;
|
||||
|
||||
// Kind is the type of resource being referenced
|
||||
// +required
|
||||
optional string kind = 2;
|
||||
|
||||
// Name is the name of resource being referenced
|
||||
// +required
|
||||
// +k8s:required
|
||||
// +k8s:alpha(since: "1.36")=+k8s:required
|
||||
optional string name = 3;
|
||||
}
|
||||
|
||||
@@ -201,6 +211,7 @@ message RoleRef {
|
||||
message Subject {
|
||||
// Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
|
||||
// If the Authorizer does not recognized the kind value, the Authorizer should report an error.
|
||||
// +required
|
||||
optional string kind = 1;
|
||||
|
||||
// APIGroup holds the API group of the referenced subject.
|
||||
@@ -211,7 +222,7 @@ message Subject {
|
||||
|
||||
// Name of the object being referenced.
|
||||
// +required
|
||||
// +k8s:required
|
||||
// +k8s:alpha(since: "1.36")=+k8s:required
|
||||
optional string name = 3;
|
||||
|
||||
// Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
|
||||
|
||||
Reference in New Issue
Block a user