Subject | @pennlabs/kittyhawk

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

schema: io.k8s.api.rbac.v1.Subject

Hierarchy

Subject

Index

Properties

Optional Readonly apiGroup

apiGroup: string

APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.

default: for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
schema: io.k8s.api.rbac.v1.Subject#apiGroup

Readonly kind

kind: string

Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.

schema: io.k8s.api.rbac.v1.Subject#kind

Readonly name

name: string

Name of the object being referenced.

schema: io.k8s.api.rbac.v1.Subject#name

Optional Readonly namespace

namespace: string

Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.

schema: io.k8s.api.rbac.v1.Subject#namespace