feat:group authorizetion. Add group and groupbinding crds, generated clientset
Signed-off-by: Roland.Ma <rolandma@yunify.com>
This commit is contained in:
4
config/samples/iam_v1alpha2_group.yaml
Normal file
4
config/samples/iam_v1alpha2_group.yaml
Normal file
@@ -0,0 +1,4 @@
|
||||
apiVersion: iam.kubesphere.io/v1alpha2
|
||||
kind: Group
|
||||
metadata:
|
||||
name: group2
|
||||
12
config/samples/iam_v1alpha2_groupbinding.yaml
Normal file
12
config/samples/iam_v1alpha2_groupbinding.yaml
Normal file
@@ -0,0 +1,12 @@
|
||||
apiVersion: iam.kubesphere.io/v1alpha2
|
||||
kind: GroupBinding
|
||||
metadata:
|
||||
name: groupbinding-sample1
|
||||
groupRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Group
|
||||
name: groupdemo
|
||||
users:
|
||||
- user1
|
||||
- user2
|
||||
|
||||
16
config/samples/iam_v1alpha2_rolebindings.yaml
Normal file
16
config/samples/iam_v1alpha2_rolebindings.yaml
Normal file
@@ -0,0 +1,16 @@
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: RoleBinding
|
||||
metadata:
|
||||
labels:
|
||||
iam.kubesphere.io/group-ref: admin
|
||||
name: group-group1-admin
|
||||
namespace: proj2
|
||||
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: Role
|
||||
name: admin
|
||||
subjects:
|
||||
- apiGroup: rbac.authorization.k8s.io
|
||||
kind: Group
|
||||
name: group1
|
||||
Reference in New Issue
Block a user