Kubernetes::ResourceAttributes
Inherits YAML::Serializable < JSON::Serializable < Kubernetes::Serializable < Struct < Value < Object
ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface
Constructors
Instance methods
fieldSelector describes the limitation on access based on field. It can only limit access, not broaden it.
fieldSelector describes the limitation on access based on field. It can only limit access, not broaden it.
labelSelector describes the limitation on access based on labels. It can only limit access, not broaden it.
labelSelector describes the limitation on access based on labels. It can only limit access, not broaden it.
name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
resource is one of the existing resource types. "*" means all.
subresource is one of the existing resource types. "" means none.
verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.
verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.
Macros
Helper macro for defining fields with automatic camelCase conversion