@@ -30,7 +30,7 @@ A request has 4 attributes that can be considered for authorization:
30
30
- whether the request is readonly (GETs are readonly)
31
31
- what resource is being accessed
32
32
- applies only to the API endpoints, such as
33
- ` /api/v1beta1 /pods ` . For miscelaneous endpoints, like ` /version ` , the
33
+ ` /api/v1beta3/namespaces/default /pods ` . For miscelaneous endpoints, like ` /version ` , the
34
34
resource is the empty string.
35
35
- the namespace of the object being access, or the empty string if the
36
36
endpoint does not support namespaced objects.
@@ -46,11 +46,11 @@ The file format is [one JSON object per line](http://jsonlines.org/). There sho
46
46
one map per line.
47
47
48
48
Each line is a "policy object". A policy object is a map with the following properties:
49
- - ` user ` , type string; the user-string from ` --token_auth_file `
50
- - ` readonly ` , type boolean, when true, means that the policy only applies to GET
49
+ - ` user ` , type string; the user-string from ` --token_auth_file `
50
+ - ` readonly ` , type boolean, when true, means that the policy only applies to GET
51
51
operations.
52
- - ` resource ` , type string; a resource from an URL, such as ` pods ` .
53
- - ` namespace ` , type string; a namespace string.
52
+ - ` resource ` , type string; a resource from an URL, such as ` pods ` .
53
+ - ` namespace ` , type string; a namespace string.
54
54
55
55
An unset property is the same as a property set to the zero value for its type (e.g. empty string, 0, false).
56
56
However, unset should be preferred for readability.
0 commit comments