Skip to content

Commit

Permalink
Use networking.k8s.io instead of extensions in document
Browse files Browse the repository at this point in the history
  • Loading branch information
Sea-n committed Apr 14, 2022
1 parent 0d171a1 commit 1d30612
Show file tree
Hide file tree
Showing 2 changed files with 10 additions and 10 deletions.
4 changes: 2 additions & 2 deletions content/en/docs/reference/access-authn-authz/abac.md
Original file line number Diff line number Diff line change
Expand Up @@ -33,13 +33,13 @@ properties:
- `group`, type string; if you specify `group`, it must match one of the groups of the authenticated user. `system:authenticated` matches all authenticated requests. `system:unauthenticated` matches all unauthenticated requests.
- Resource-matching properties:
- `apiGroup`, type string; an API group.
- Ex: `extensions`
- Ex: `apps`, `networking.k8s.io`
- Wildcard: `*` matches all API groups.
- `namespace`, type string; a namespace.
- Ex: `kube-system`
- Wildcard: `*` matches all resource requests.
- `resource`, type string; a resource type
- Ex: `pods`
- Ex: `pods`, `events`
- Wildcard: `*` matches all resource requests.
- Non-resource-matching properties:
- `nonResourcePath`, type string; non-resource request paths.
Expand Down
16 changes: 8 additions & 8 deletions content/en/docs/reference/access-authn-authz/rbac.md
Original file line number Diff line number Diff line change
Expand Up @@ -383,21 +383,21 @@ rules:
verbs: ["get", "list", "watch"]
```

Allow reading/writing Deployments (at the HTTP level: objects with `"deployments"`
in the resource part of their URL) in both the `"extensions"` and `"apps"` API groups:
Allow reading/writing Events (at the HTTP level: objects with `"events"` in the
resource part of their URL) in both the core `""` and `"events.k8s.io"` API groups:

```yaml
rules:
- apiGroups: ["extensions", "apps"]
- apiGroups: ["", "events.k8s.io"]
#
# at the HTTP level, the name of the resource for accessing Deployment
# objects is "deployments"
resources: ["deployments"]
# at the HTTP level, the name of the resource for accessing Events
# objects is "events"
resources: ["events"]
verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
```

Allow reading Pods in the core API group, as well as reading or writing Job
resources in the `"batch"` or `"extensions"` API groups:
resources in the `"batch"` API group:

```yaml
rules:
Expand All @@ -407,7 +407,7 @@ rules:
# objects is "pods"
resources: ["pods"]
verbs: ["get", "list", "watch"]
- apiGroups: ["batch", "extensions"]
- apiGroups: ["batch"]
#
# at the HTTP level, the name of the resource for accessing Job
# objects is "jobs"
Expand Down

0 comments on commit 1d30612

Please sign in to comment.