Skip to content

Commit 2f9b5e1

Browse files
authored
Move bind verb resourceNames hint inline of example
1 parent f6496b0 commit 2f9b5e1

File tree

1 file changed

+1
-2
lines changed
  • content/en/docs/reference/access-authn-authz

1 file changed

+1
-2
lines changed

content/en/docs/reference/access-authn-authz/rbac.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -891,6 +891,7 @@ rules:
891891
- apiGroups: ["rbac.authorization.k8s.io"]
892892
resources: ["clusterroles"]
893893
verbs: ["bind"]
894+
# omit resourceNames to allow binding any ClusterRole
894895
resourceNames: ["admin","edit","view"]
895896
---
896897
apiVersion: rbac.authorization.k8s.io/v1
@@ -908,8 +909,6 @@ subjects:
908909
name: user-1
909910
```
910911

911-
Note that - as with any RBAC verb - you may omit `resourceNames` to allow `user-1` to grant other users _any_ ClusterRole in the namespace `user-1-namespace`.
912-
913912
When bootstrapping the first roles and role bindings, it is necessary for the initial user to grant permissions they do not yet have.
914913
To bootstrap initial roles and role bindings:
915914

0 commit comments

Comments
 (0)