Skip to content

Commit 501ddcd

Browse files
authored
Merge pull request #21724 from tengqm/fix-20808
Cleanup non-resource paths
2 parents 40ce582 + 8a14cb1 commit 501ddcd

File tree

1 file changed

+2
-5
lines changed
  • content/en/docs/reference/access-authn-authz

1 file changed

+2
-5
lines changed

content/en/docs/reference/access-authn-authz/webhook.md

Lines changed: 2 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -164,8 +164,8 @@ Access to non-resource paths are sent as:
164164
}
165165
```
166166

167-
Non-resource paths include: `/api`, `/apis`, `/metrics`, `/resetMetrics`,
168-
`/logs`, `/debug`, `/healthz`, `/swagger-ui/`, `/swaggerapi/`, `/ui`, and
167+
Non-resource paths include: `/api`, `/apis`, `/metrics`,
168+
`/logs`, `/debug`, `/healthz`, `/livez`, `/openapi/v2`, `/readyz`, and
169169
`/version.` Clients require access to `/api`, `/api/*`, `/apis`, `/apis/*`,
170170
and `/version` to discover what resources and versions are present on the server.
171171
Access to other non-resource paths can be disallowed without restricting access
@@ -174,6 +174,3 @@ to the REST api.
174174
For further documentation refer to the authorization.v1beta1 API objects and
175175
[webhook.go](https://github.com/kubernetes/kubernetes/blob/{{< param "githubbranch" >}}/staging/src/k8s.io/apiserver/plugin/pkg/authorizer/webhook/webhook.go).
176176

177-
178-
179-

0 commit comments

Comments
 (0)