struct

Kubernetes::Subject

Inherits YAML::Serializable < JSON::Serializable < Kubernetes::Serializable < Struct < Value < Object

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

Constructors

new(ctx : YAML::ParseContext, node : YAML::Nodes::Node)
new(pull : ::JSON::PullParser)
new(*, __pull_for_json_serializable pull : ::JSON::PullParser)
new(*, __context_for_yaml_serializable ctx : YAML::ParseContext, __node_for_yaml_serializable node : YAML::Nodes::Node)

Instance methods

api_group

APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.

Source
api_group=(api_group : String | Nil)

APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.

Source
group

group matches based on user group name.

Source
group=(group : GroupSubject | Nil)

group matches based on user group name.

Source
kind

Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.

Source
kind=(kind : String | Nil)

Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.

Source
name

Name of the object being referenced.

Source
name=(name : String | Nil)

Name of the object being referenced.

Source
namespace

Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.

Source
namespace=(namespace : String | Nil)

Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.

Source
service_account

serviceAccount matches ServiceAccounts.

Source
service_account=(service_account : ServiceAccountSubject | Nil)

serviceAccount matches ServiceAccounts.

Source
user

user matches based on username.

Source
user=(user : UserSubject | Nil)

user matches based on username.

Source

Macros

field(name, type = nil, **options, &block)

Helper macro for defining fields with automatic camelCase conversion

Source