* Update role binding specs * Wire role bindings APIs in OSS * gofmt * revert modules updates * update specs Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * update registration Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com> * fix reader * fix format * add role bindings mapper * remove namespace from subject spec * fix formatting * update api specs * Fix role binding registration * remove mapper --------- Co-authored-by: Gabriel MABILLE <gamab@users.noreply.github.com>
38 lines
698 B
CUE
38 lines
698 B
CUE
package v0alpha1
|
|
|
|
RoleBindingSpec: {
|
|
#Subject: {
|
|
// kind of the identity getting the permission
|
|
kind: "User" | "ServiceAccount" | "Team" | "BasicRole"
|
|
// uid of the identity
|
|
name: string
|
|
}
|
|
#RoleRef: {
|
|
// kind of role
|
|
kind: "Role" | "CoreRole" | "GlobalRole"
|
|
// uid of the role
|
|
name: string
|
|
}
|
|
|
|
subject: #Subject
|
|
roleRefs: [...#RoleRef]
|
|
}
|
|
|
|
GlobalRoleBindingSpec: {
|
|
#Subject: {
|
|
// kind of the identity getting the permission
|
|
kind: "User" | "ServiceAccount" | "Team" | "BasicRole"
|
|
// uid of the identity
|
|
name: string
|
|
}
|
|
#RoleRef: {
|
|
// kind of role
|
|
kind: "CoreRole" | "GlobalRole"
|
|
// uid of the role
|
|
name: string
|
|
}
|
|
|
|
subject: #Subject
|
|
roleRefs: [...#RoleRef]
|
|
}
|