SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace
Expand or mouse-over a field for more information about it.
apiVersion:kind:spec:
groups:
- [string]:scopes:
- [string]:user:status:
evaluationError:rules:
- apiGroups:
- - [string]:attributeRestrictions:
Raw:nonResourceURLs:
- [string]:resourceNames:
- [string]:resources:
- [string]:verbs:
- [string]:
Create a SubjectRulesReview
POST /apis/authorization.openshift.io/v1/subjectrulesreviews HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close
Content-Type: application/json'
{
"kind": "SubjectRulesReview",
"apiVersion": "authorization.openshift.io/v1",
...
}
$ curl -k \
-X POST \
-d @- \
-H "Authorization: Bearer $TOKEN" \
-H 'Accept: application/json' \
-H 'Content-Type: application/json' \
https://$ENDPOINT/apis/authorization.openshift.io/v1/subjectrulesreviews <<'EOF'
{
"kind": "SubjectRulesReview",
"apiVersion": "authorization.openshift.io/v1",
...
}
EOF
Create a SubjectRulesReview
POST /apis/authorization.openshift.io/v1/namespaces/$NAMESPACE/subjectrulesreviews HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close
Content-Type: application/json'
{
"kind": "SubjectRulesReview",
"apiVersion": "authorization.openshift.io/v1",
...
}
$ curl -k \
-X POST \
-d @- \
-H "Authorization: Bearer $TOKEN" \
-H 'Accept: application/json' \
-H 'Content-Type: application/json' \
https://$ENDPOINT/apis/authorization.openshift.io/v1/namespaces/$NAMESPACE/subjectrulesreviews <<'EOF'
{
"kind": "SubjectRulesReview",
"apiVersion": "authorization.openshift.io/v1",
...
}
EOF
| Parameter | Description |
|---|---|
namespace |
object name and auth scope, such as for teams and projects |