Namespace Operator RBAC API¶

Packages¶

Package v1alpha1 contains API Schema definitions for the rbac v1alpha1 API group

ExternalRoleBinding is the Schema for the externalrolebindings API

Field	Description	Default	Validation
`apiVersion` string	`rbac.tcs.trifork.com/v1alpha1`
`kind` string	`ExternalRoleBinding`
`kind` string	Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
`apiVersion` string	APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
`metadata` ObjectMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`spec` ExternalRoleBindingSpec
`status` ExternalRoleBindingStatus

ExternalRoleBindingList contains a list of ExternalRoleBinding

Field	Description	Default	Validation
`apiVersion` string	`rbac.tcs.trifork.com/v1alpha1`
`kind` string	`ExternalRoleBindingList`
`kind` string	Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
`apiVersion` string	APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
`metadata` ListMeta	Refer to Kubernetes API documentation for fields of `metadata`.
`items` ExternalRoleBinding array

ExternalRoleBindingRef defines a reference to a ProjectBootstrap configuration to identify the namespace where the role bindings should apply.

Field	Description	Default	Validation
`name` string	Name of project project bootstrap configuration
`namespace` string	Namespace of the project bootstrap configuration

ExternalRoleBindingRole defines the bindings for a specific role

Field	Description	Default	Validation
`users` string array	Users defines the users that should be externally bound to the role
`groups` string array	Groups defines the roles that should be externall bound to the role

ExternalRoleBindingSpec defines the desired state of ExternalRoleBinding

Field	Description	Default	Validation
`ref` ExternalRoleBindingRef	Ref is reference to project boostrap configuration
`roles` object (keys:string, values:ExternalRoleBindingRole)	Roles are the roles to bind. Unless roles are redefined for the namespace the two default roles will exist: tenant-readonly, tenant-user

ExternalRoleBindingStatus defines the observed state of ExternalRoleBinding

Field	Description	Default	Validation
`conditions` Condition array
`configNamespace` string	ConfigNamespace defines the namespace where configuration resides
`bindingNamespace` string	BindingNamespace defines the namespace where the role bindings are present
`vault` BootstrapConfigVault	Vault defines the configuration for accessing Hashicorp Vault