Skip to content

flowcontrol.v1beta1.subject

"Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account."

Index

Fields

fn withKind

withKind(kind)

"kind indicates which one of the other fields is non-empty. Required"

obj group

"GroupSubject holds detailed information for group-kind subject."

fn group.withName

withName(name)

"name is the user group that matches, or \"*\" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required."

obj serviceAccount

"ServiceAccountSubject holds detailed information for service-account-kind subject."

fn serviceAccount.withName

withName(name)

"name is the name of matching ServiceAccount objects, or \"*\" to match regardless of name. Required."

fn serviceAccount.withNamespace

withNamespace(namespace)

"namespace is the namespace of matching ServiceAccount objects. Required."

obj user

"UserSubject holds detailed information for user-kind subject."

fn user.withName

withName(name)

"name is the username that matches, or \"*\" to match all usernames. Required."