Merge pull request #32909 from Sea-n/deprecate-ext
Remove deprecated `extensions` API group in documentpull/33065/head
commit
c62c9e9c61
|
@ -33,13 +33,13 @@ properties:
|
||||||
- `group`, type string; if you specify `group`, it must match one of the groups of the authenticated user. `system:authenticated` matches all authenticated requests. `system:unauthenticated` matches all unauthenticated requests.
|
- `group`, type string; if you specify `group`, it must match one of the groups of the authenticated user. `system:authenticated` matches all authenticated requests. `system:unauthenticated` matches all unauthenticated requests.
|
||||||
- Resource-matching properties:
|
- Resource-matching properties:
|
||||||
- `apiGroup`, type string; an API group.
|
- `apiGroup`, type string; an API group.
|
||||||
- Ex: `extensions`
|
- Ex: `apps`, `networking.k8s.io`
|
||||||
- Wildcard: `*` matches all API groups.
|
- Wildcard: `*` matches all API groups.
|
||||||
- `namespace`, type string; a namespace.
|
- `namespace`, type string; a namespace.
|
||||||
- Ex: `kube-system`
|
- Ex: `kube-system`
|
||||||
- Wildcard: `*` matches all resource requests.
|
- Wildcard: `*` matches all resource requests.
|
||||||
- `resource`, type string; a resource type
|
- `resource`, type string; a resource type
|
||||||
- Ex: `pods`
|
- Ex: `pods`, `deployments`
|
||||||
- Wildcard: `*` matches all resource requests.
|
- Wildcard: `*` matches all resource requests.
|
||||||
- Non-resource-matching properties:
|
- Non-resource-matching properties:
|
||||||
- `nonResourcePath`, type string; non-resource request paths.
|
- `nonResourcePath`, type string; non-resource request paths.
|
||||||
|
|
|
@ -384,11 +384,11 @@ rules:
|
||||||
```
|
```
|
||||||
|
|
||||||
Allow reading/writing Deployments (at the HTTP level: objects with `"deployments"`
|
Allow reading/writing Deployments (at the HTTP level: objects with `"deployments"`
|
||||||
in the resource part of their URL) in both the `"extensions"` and `"apps"` API groups:
|
in the resource part of their URL) in the `"apps"` API groups:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
rules:
|
rules:
|
||||||
- apiGroups: ["extensions", "apps"]
|
- apiGroups: ["apps"]
|
||||||
#
|
#
|
||||||
# at the HTTP level, the name of the resource for accessing Deployment
|
# at the HTTP level, the name of the resource for accessing Deployment
|
||||||
# objects is "deployments"
|
# objects is "deployments"
|
||||||
|
@ -397,7 +397,7 @@ rules:
|
||||||
```
|
```
|
||||||
|
|
||||||
Allow reading Pods in the core API group, as well as reading or writing Job
|
Allow reading Pods in the core API group, as well as reading or writing Job
|
||||||
resources in the `"batch"` or `"extensions"` API groups:
|
resources in the `"batch"` API group:
|
||||||
|
|
||||||
```yaml
|
```yaml
|
||||||
rules:
|
rules:
|
||||||
|
@ -407,7 +407,7 @@ rules:
|
||||||
# objects is "pods"
|
# objects is "pods"
|
||||||
resources: ["pods"]
|
resources: ["pods"]
|
||||||
verbs: ["get", "list", "watch"]
|
verbs: ["get", "list", "watch"]
|
||||||
- apiGroups: ["batch", "extensions"]
|
- apiGroups: ["batch"]
|
||||||
#
|
#
|
||||||
# at the HTTP level, the name of the resource for accessing Job
|
# at the HTTP level, the name of the resource for accessing Job
|
||||||
# objects is "jobs"
|
# objects is "jobs"
|
||||||
|
|
Loading…
Reference in New Issue