github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/docs/api-reference
History
Kubernetes Submit Queue 1f4e2efc5b Merge pull request #41184 from liggitt/subject-apigroup 
Automatic merge from submit-queue (batch tested with PRs 41357, 41178, 41280, 41184, 41278)

Switch RBAC subject apiVersion to apiGroup in v1beta1

Referencing a subject from an RBAC role binding, the API group and kind of the subject is needed to fully-qualify the reference.

The version is not, and adds complexity around re-writing the reference when returning the binding from different versions of the API, and when reconciling subjects.

This PR:
* v1beta1: change the subject `apiVersion` field to `apiGroup` (to match roleRef)
* v1alpha1: convert apiVersion to apiGroup for backwards compatibility
* all versions: add defaulting for the three allowed subject kinds
* all versions: add validation to the field so we can count on the data in etcd being good until we decide to relax the apiGroup restriction

```release-note
RBAC `v1beta1` RoleBinding/ClusterRoleBinding subjects changed `apiVersion` to `apiGroup` to fully-qualify a subject. ServiceAccount subjects default to an apiGroup of `""`, User and Group subjects default to an apiGroup of `"rbac.authorization.k8s.io"`.
```

@deads2k @kubernetes/sig-auth-api-reviews @kubernetes/sig-auth-pr-reviews
 		2017-02-13 21:07:10 -08:00
..
apps/v1beta1 Update specs for iscsi volume source. 2017-02-06 17:21:33 +05:30
authentication.k8s.io Generated files for authentication.k8s.io/v1 2017-02-07 01:44:56 -05:00
authorization.k8s.io Generated files 2017-02-06 18:16:51 -05:00
autoscaling Generated Files for autoscaling/v2alpha1 2017-02-07 22:25:27 -05:00
batch Update specs for iscsi volume source. 2017-02-06 17:21:33 +05:30
certificates.k8s.io/v1beta1 checking-in generated code 2017-01-25 22:05:21 +01:00
extensions/v1beta1 Update specs for iscsi volume source. 2017-02-06 17:21:33 +05:30
policy/v1beta1 checking-in generated code 2017-01-25 22:05:21 +01:00
rbac.authorization.k8s.io generated files 2017-02-13 15:33:10 -05:00
storage.k8s.io/v1beta1 checking-in generated code 2017-01-25 22:05:21 +01:00
v1 Update specs for iscsi volume source. 2017-02-06 17:21:33 +05:30
README.md Remove 'this is HEAD' warning on docs 2016-10-26 00:06:59 +02:00
labels-annotations-taints.md Remove 'this is HEAD' warning on docs 2016-10-26 00:06:59 +02:00

README.md

API Reference

Use the following reference docs to understand the kubernetes REST API for various API group versions:

Analytics