github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
k3s/docs
History
Kubernetes Submit Queue 1f4e2efc5b Merge pull request #41184 from liggitt/subject-apigroup 
Automatic merge from submit-queue (batch tested with PRs 41357, 41178, 41280, 41184, 41278)

Switch RBAC subject apiVersion to apiGroup in v1beta1

Referencing a subject from an RBAC role binding, the API group and kind of the subject is needed to fully-qualify the reference.

The version is not, and adds complexity around re-writing the reference when returning the binding from different versions of the API, and when reconciling subjects.

This PR:
* v1beta1: change the subject `apiVersion` field to `apiGroup` (to match roleRef)
* v1alpha1: convert apiVersion to apiGroup for backwards compatibility
* all versions: add defaulting for the three allowed subject kinds
* all versions: add validation to the field so we can count on the data in etcd being good until we decide to relax the apiGroup restriction

```release-note
RBAC `v1beta1` RoleBinding/ClusterRoleBinding subjects changed `apiVersion` to `apiGroup` to fully-qualify a subject. ServiceAccount subjects default to an apiGroup of `""`, User and Group subjects default to an apiGroup of `"rbac.authorization.k8s.io"`.
```

@deads2k @kubernetes/sig-auth-api-reviews @kubernetes/sig-auth-pr-reviews
 		2017-02-13 21:07:10 -08:00
..
admin Remove 'this is HEAD' warning on docs 2016-10-26 00:06:59 +02:00
api-reference Merge pull request #41184 from liggitt/subject-apigroup 2017-02-13 21:07:10 -08:00
design replace contents of docs/design with stubs 2017-01-11 08:23:44 -05:00
devel replace contents of docs/devel with stubs 2016-12-21 20:26:48 -05:00
getting-started-guides Fix broken link to logging documentation 2017-01-15 00:14:12 -08:00
images
…
man/man1 Added generated docs for kubectl create role command. 2017-02-10 13:10:47 +08:00
proposals replace contents of docs/proposals with stubs 2016-12-21 21:15:09 -05:00
user-guide Added generated docs for kubectl create role command. 2017-02-10 13:10:47 +08:00
yaml/kubectl autogenerated 2016-11-08 06:33:46 -08:00
BUILD Enable auto-generating sources rules 2017-01-05 14:14:13 -08:00
OWNERS Updated top level owners file to match new format 2017-01-19 11:29:16 -08:00
README.md fix munge-docs build errors 2016-11-17 16:49:00 +01:00
api.md fix munge-docs build errors 2016-11-17 16:49:00 +01:00
reporting-security-issues.md Remove 'this is HEAD' warning on docs 2016-10-26 00:06:59 +02:00

README.md

Kubernetes Documentation: releases.k8s.io/HEAD

Analytics