2.9 KiB

Raw Blame History

SelfSubjectAccessReview v1beta1

Group	Version	Kind
Authorization	v1beta1	SelfSubjectAccessReview

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

Field	Description
apiVersion string	APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#resources
kind string	Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: http://releases.k8s.io/HEAD/docs/devel/api-conventions.md#types-kinds
metadata ObjectMeta
spec SelfSubjectAccessReviewSpec	Spec holds information about the request being evaluated. user and groups must be empty
status SubjectAccessReviewStatus	Status is filled in by the server and indicates whether the request is allowed or not

SelfSubjectAccessReviewSpec v1beta1

Field	Description
nonResourceAttributes NonResourceAttributes	NonResourceAttributes describes information for a non-resource access request
resourceAttributes ResourceAttributes	ResourceAuthorizationAttributes describes information for a resource access request

Write Operations

See supported operations below...

Create

bdocs-tab:kubectl kubectl Command


Coming Soon

bdocs-tab:curl curl Command (requires kubectl proxy to be running)


Coming Soon

bdocs-tab:kubectl Output


Coming Soon

bdocs-tab:curl Response Body


Coming Soon

create a SelfSubjectAccessReview

HTTP Request

POST /apis/authorization.k8s.io/v1beta1/selfsubjectaccessreviews

Query Parameters

Parameter	Description
pretty	If 'true', then the output is pretty printed.

Body Parameters

Parameter	Description
body SelfSubjectAccessReview

Response

Code	Description
200 SelfSubjectAccessReview	OK