Skip to content

Commit 7a175d5

Browse files
authored
Update rbac.md
The language "For all service accounts in the "qa" namespace" in the example is confusing namespaces and groups. Language fixed to disambiguate between group and namespace. An additional example provided which uses both the group ("dev") AND the namespace ("development") to further illustrate this point
1 parent 8279881 commit 7a175d5

File tree

1 file changed

+10
-1
lines changed
  • content/en/docs/reference/access-authn-authz

1 file changed

+10
-1
lines changed

content/en/docs/reference/access-authn-authz/rbac.md

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -514,14 +514,23 @@ subjects:
514514
namespace: kube-system
515515
```
516516

517-
For all service accounts in the "qa" namespace:
517+
For all service accounts in the "qa" group in any namespace:
518518

519519
```yaml
520520
subjects:
521521
- kind: Group
522522
name: system:serviceaccounts:qa
523523
apiGroup: rbac.authorization.k8s.io
524524
```
525+
For all service accounts in the "dev" group in the "development" namespace:
526+
527+
```yaml
528+
subjects:
529+
- kind: Group
530+
name: system:serviceaccounts:dev
531+
apiGroup: rbac.authorization.k8s.io
532+
namespace: development
533+
```
525534

526535
For all service accounts in any namespace:
527536

0 commit comments

Comments
 (0)