@jkcfg/kubernetes
Version:
jk Kubernetes library
42 lines • 1.97 kB
JSON
{
"description": "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.",
"required": [
"spec"
],
"x-kubernetes-group-version-kind": [
{
"kind": "LocalSubjectAccessReview",
"version": "v1",
"group": "authorization.k8s.io"
}
],
"$schema": "http://json-schema.org/schema#",
"type": "object",
"properties": {
"status": {
"description": "Status is filled in by the server and indicates whether the request is allowed or not",
"$ref": "_definitions.json#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewStatus"
},
"kind": {
"type": [
"string",
"null"
],
"description": "Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#types-kinds"
},
"spec": {
"description": "Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.",
"$ref": "_definitions.json#/definitions/io.k8s.api.authorization.v1.SubjectAccessReviewSpec"
},
"apiVersion": {
"type": [
"string",
"null"
],
"description": "APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#resources"
},
"metadata": {
"$ref": "_definitions.json#/definitions/io.k8s.apimachinery.pkg.apis.meta.v1.ObjectMeta"
}
}
}