github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-26 21:17:23 +00:00
Code Issues Projects Releases Wiki Activity

Update comment on ResourcePolicyRule

Browse Source 
Track the long-ago addition of the ClusterScope field.
This commit is contained in:
Mike Spreitzer 2021-10-07 14:29:51 -07:00
parent d7f74ca58c
commit 6c7c1cea6f
3 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
staging/src/k8s.io/api/flowcontrol/v1alpha1/types.go
View File

@ -241,8 +241,10 @@ type ServiceAccountSubject struct {
// ResourcePolicyRule matches a resource request if and only if: (a) // ResourcePolicyRule matches a resource request if and only if: (a)
// at least one member of verbs matches the request, (b) at least one // at least one member of verbs matches the request, (b) at least one
// member of apiGroups matches the request, (c) at least one member of // member of apiGroups matches the request, (c) at least one member of
// resources matches the request, and (d) least one member of // resources matches the request, and (d) either (d1) the request does
// namespaces matches the request. // not specify a namespace (i.e., `Namespace==""`) and clusterScope is
// true or (d2) the request specifies a namespace and least one member
// of namespaces matches the request's namespace.
type ResourcePolicyRule struct { type ResourcePolicyRule struct {
// `verbs` is a list of matching verbs and may not be empty. // `verbs` is a list of matching verbs and may not be empty.
// "*" matches all verbs and, if present, must be the only entry. // "*" matches all verbs and, if present, must be the only entry.

6
staging/src/k8s.io/api/flowcontrol/v1beta1/types.go
View File

@ -279,8 +279,10 @@ type ServiceAccountSubject struct {
// ResourcePolicyRule matches a resource request if and only if: (a) // ResourcePolicyRule matches a resource request if and only if: (a)
// at least one member of verbs matches the request, (b) at least one // at least one member of verbs matches the request, (b) at least one
// member of apiGroups matches the request, (c) at least one member of // member of apiGroups matches the request, (c) at least one member of
// resources matches the request, and (d) least one member of // resources matches the request, and (d) either (d1) the request does
// namespaces matches the request. // not specify a namespace (i.e., `Namespace==""`) and clusterScope is
// true or (d2) the request specifies a namespace and least one member
// of namespaces matches the request's namespace.
type ResourcePolicyRule struct { type ResourcePolicyRule struct {
// `verbs` is a list of matching verbs and may not be empty. // `verbs` is a list of matching verbs and may not be empty.
// "*" matches all verbs and, if present, must be the only entry. // "*" matches all verbs and, if present, must be the only entry.

6
staging/src/k8s.io/api/flowcontrol/v1beta2/types.go
View File

@ -279,8 +279,10 @@ type ServiceAccountSubject struct {
// ResourcePolicyRule matches a resource request if and only if: (a) // ResourcePolicyRule matches a resource request if and only if: (a)
// at least one member of verbs matches the request, (b) at least one // at least one member of verbs matches the request, (b) at least one
// member of apiGroups matches the request, (c) at least one member of // member of apiGroups matches the request, (c) at least one member of
// resources matches the request, and (d) least one member of // resources matches the request, and (d) either (d1) the request does
// namespaces matches the request. // not specify a namespace (i.e., `Namespace==""`) and clusterScope is
// true or (d2) the request specifies a namespace and least one member
// of namespaces matches the request's namespace.
type ResourcePolicyRule struct { type ResourcePolicyRule struct {
// `verbs` is a list of matching verbs and may not be empty. // `verbs` is a list of matching verbs and may not be empty.
// "*" matches all verbs and, if present, must be the only entry. // "*" matches all verbs and, if present, must be the only entry.