Subject

Description

Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.

Properties

group GroupSubject

`group` matches based on user group name.

kind string required

`kind` indicates which one of the other fields is non-empty. Required

serviceAccount ServiceAccountSubject

`serviceAccount` matches ServiceAccounts.

user UserSubject

`user` matches based on username.