[zh] sync 1.24 ref-k8s-api /authorization-resources/local-subject-access-review-v1.md
Michael
parent
b0bb201082
commit
a23858f11e
|
|
@ -0,0 +1,146 @@
|
|||
---
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "LocalSubjectAccessReview"
|
||||
content_type: "api_reference"
|
||||
description: "LocalSubjectAccessReview 检查用户或组是否可以在给定的命名空间内执行某操作。"
|
||||
title: "LocalSubjectAccessReview"
|
||||
weight: 1
|
||||
---
|
||||
<!--
|
||||
api_metadata:
|
||||
apiVersion: "authorization.k8s.io/v1"
|
||||
import: "k8s.io/api/authorization/v1"
|
||||
kind: "LocalSubjectAccessReview"
|
||||
content_type: "api_reference"
|
||||
description: "LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace."
|
||||
title: "LocalSubjectAccessReview"
|
||||
weight: 1
|
||||
-->
|
||||
|
||||
`apiVersion: authorization.k8s.io/v1`
|
||||
|
||||
`import "k8s.io/api/authorization/v1"`
|
||||
|
||||
## LocalSubjectAccessReview {#LocalSubjectAccessReview}
|
||||
<!--
|
||||
LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: authorization.k8s.io/v1
|
||||
|
||||
- **kind**: LocalSubjectAccessReview
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
|
||||
Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
-->
|
||||
LocalSubjectAccessReview 检查用户或组是否可以在给定的命名空间内执行某操作。
|
||||
划分命名空间范围的资源简化了命名空间范围的策略设置，例如权限检查。
|
||||
|
||||
<hr>
|
||||
|
||||
- **apiVersion**: authorization.k8s.io/v1
|
||||
|
||||
- **kind**: LocalSubjectAccessReview
|
||||
|
||||
- **metadata** (<a href="{{< ref "../common-definitions/object-meta#ObjectMeta" >}}">ObjectMeta</a>)
|
||||
|
||||
标准的列表元数据。
|
||||
更多信息：https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
|
||||
|
||||
<!--
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewSpec" >}}">SubjectAccessReviewSpec</a>), required
|
||||
|
||||
Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.
|
||||
|
||||
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
|
||||
|
||||
Status is filled in by the server and indicates whether the request is allowed or not
|
||||
-->
|
||||
- **spec** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewSpec" >}}">SubjectAccessReviewSpec</a>)，必需
|
||||
|
||||
spec 包含有关正在评估的请求的信息。
|
||||
spec.namespace 必须是你的请求所针对的命名空间。
|
||||
如果留空，则会被设置默认值。
|
||||
|
||||
- **status** (<a href="{{< ref "../authorization-resources/subject-access-review-v1#SubjectAccessReviewStatus" >}}">SubjectAccessReviewStatus</a>)
|
||||
|
||||
status 由服务器填写，表示请求是否被允许。
|
||||
|
||||
<!--
|
||||
## Operations {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` create a LocalSubjectAccessReview
|
||||
|
||||
#### HTTP Request
|
||||
-->
|
||||
## 操作 {#Operations}
|
||||
|
||||
<hr>
|
||||
|
||||
### `create` 创建 LocalSubjectAccessReview
|
||||
|
||||
#### HTTP 请求
|
||||
|
||||
POST /apis/authorization.k8s.io/v1/namespaces/{namespace}/localsubjectaccessreviews
|
||||
<!--
|
||||
#### Parameters
|
||||
|
||||
- **namespace** (*in path*): string, required
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>, required
|
||||
|
||||
- **dryRun** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (*in query*): string
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
-->
|
||||
#### 参数
|
||||
|
||||
- **namespace** (**路径参数**): string，必需
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#namespace" >}}">namespace</a>
|
||||
|
||||
- **body**: <a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>，必需
|
||||
|
||||
- **dryRun** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#dryRun" >}}">dryRun</a>
|
||||
|
||||
- **fieldManager** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldManager" >}}">fieldManager</a>
|
||||
|
||||
- **fieldValidation** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#fieldValidation" >}}">fieldValidation</a>
|
||||
|
||||
- **pretty** (**查询参数**): string
|
||||
|
||||
<a href="{{< ref "../common-parameters/common-parameters#pretty" >}}">pretty</a>
|
||||
|
||||
<!--
|
||||
#### Response
|
||||
-->
|
||||
#### 响应
|
||||
|
||||
200 (<a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>): OK
|
||||
|
||||
201 (<a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>): Created
|
||||
|
||||
202 (<a href="{{< ref "../authorization-resources/local-subject-access-review-v1#LocalSubjectAccessReview" >}}">LocalSubjectAccessReview</a>): Accepted
|
||||
|
||||
401: Unauthorized
|
||||
Loading…
Reference in New Issue