Merge pull request #32909 from Sea-n/deprecate-ext

Remove deprecated `extensions` API group in document
pull/33065/head
Kubernetes Prow Robot 2022-04-20 08:57:43 -07:00 committed by GitHub
commit c62c9e9c61
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 6 deletions

View File

@ -33,13 +33,13 @@ properties:
- `group`, type string; if you specify `group`, it must match one of the groups of the authenticated user. `system:authenticated` matches all authenticated requests. `system:unauthenticated` matches all unauthenticated requests. - `group`, type string; if you specify `group`, it must match one of the groups of the authenticated user. `system:authenticated` matches all authenticated requests. `system:unauthenticated` matches all unauthenticated requests.
- Resource-matching properties: - Resource-matching properties:
- `apiGroup`, type string; an API group. - `apiGroup`, type string; an API group.
- Ex: `extensions` - Ex: `apps`, `networking.k8s.io`
- Wildcard: `*` matches all API groups. - Wildcard: `*` matches all API groups.
- `namespace`, type string; a namespace. - `namespace`, type string; a namespace.
- Ex: `kube-system` - Ex: `kube-system`
- Wildcard: `*` matches all resource requests. - Wildcard: `*` matches all resource requests.
- `resource`, type string; a resource type - `resource`, type string; a resource type
- Ex: `pods` - Ex: `pods`, `deployments`
- Wildcard: `*` matches all resource requests. - Wildcard: `*` matches all resource requests.
- Non-resource-matching properties: - Non-resource-matching properties:
- `nonResourcePath`, type string; non-resource request paths. - `nonResourcePath`, type string; non-resource request paths.

View File

@ -384,11 +384,11 @@ rules:
``` ```
Allow reading/writing Deployments (at the HTTP level: objects with `"deployments"` Allow reading/writing Deployments (at the HTTP level: objects with `"deployments"`
in the resource part of their URL) in both the `"extensions"` and `"apps"` API groups: in the resource part of their URL) in the `"apps"` API groups:
```yaml ```yaml
rules: rules:
- apiGroups: ["extensions", "apps"] - apiGroups: ["apps"]
# #
# at the HTTP level, the name of the resource for accessing Deployment # at the HTTP level, the name of the resource for accessing Deployment
# objects is "deployments" # objects is "deployments"
@ -397,7 +397,7 @@ rules:
``` ```
Allow reading Pods in the core API group, as well as reading or writing Job Allow reading Pods in the core API group, as well as reading or writing Job
resources in the `"batch"` or `"extensions"` API groups: resources in the `"batch"` API group:
```yaml ```yaml
rules: rules:
@ -407,7 +407,7 @@ rules:
# objects is "pods" # objects is "pods"
resources: ["pods"] resources: ["pods"]
verbs: ["get", "list", "watch"] verbs: ["get", "list", "watch"]
- apiGroups: ["batch", "extensions"] - apiGroups: ["batch"]
# #
# at the HTTP level, the name of the resource for accessing Job # at the HTTP level, the name of the resource for accessing Job
# objects is "jobs" # objects is "jobs"