Subject

io.k8s.api.flowcontrol.v1.Subject source ↗

Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.

groupGroupSubject`group` matches based on user group name.

namestring requiredname is the user group that matches, or "*" to match all user groups. See https://github.com/kubernetes/apiserver/blob/master/pkg/authentication/user/user.go for some well-known group names. Required.

kindstring required`kind` indicates which one of the other fields is non-empty. Required

serviceAccountServiceAccountSubject`serviceAccount` matches ServiceAccounts.

namestring required`name` is the name of matching ServiceAccount objects, or "*" to match regardless of name. Required.

namespacestring required`namespace` is the namespace of matching ServiceAccount objects. Required.

userUserSubject`user` matches based on username.

namestring required`name` is the username that matches, or "*" to match all usernames. Required.