POST /apis/authorization.k8s.io/v1/localsubjectaccessreviews HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close
Content-Type: application/json'
{
"kind": "LocalSubjectAccessReview",
"apiVersion": "authorization.k8s.io/v1",
...
}
×
v1.LocalSubjectAccessReview
Description
LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
Object Schema
Expand or mouse-over a field for more information about it.
apiVersion:kind:metadata:
annotations:
[string]:clusterName:creationTimestamp:deletionGracePeriodSeconds:deletionTimestamp:finalizers:
- [string]:generateName:generation:initializers:
pending:
- name:result:
apiVersion:code:details:
causes:
- field:message:reason:group:kind:name:retryAfterSeconds:uid:kind:message:metadata:
resourceVersion:selfLink:reason:status:labels:
[string]:name:namespace:ownerReferences:
- apiVersion:blockOwnerDeletion:controller:kind:name:uid:resourceVersion:selfLink:uid:spec:
extra:
[string]:groups:
- [string]:nonResourceAttributes:
path:verb:resourceAttributes:
group:name:namespace:resource:subresource:verb:version:user:status:
allowed:evaluationError:reason:
Operations
Create a LocalSubjectAccessReview
Create a LocalSubjectAccessReview
HTTP request
Curl request
$ curl -k \
-X POST \
-d @- \
-H "Authorization: Bearer $TOKEN" \
-H 'Accept: application/json' \
-H 'Content-Type: application/json' \
https://$ENDPOINT/apis/authorization.k8s.io/v1/localsubjectaccessreviews <<'EOF'
{
"kind": "LocalSubjectAccessReview",
"apiVersion": "authorization.k8s.io/v1",
...
}
EOF
Create a LocalSubjectAccessReview in a namespace
Create a LocalSubjectAccessReview
HTTP request
POST /apis/authorization.k8s.io/v1/namespaces/$NAMESPACE/localsubjectaccessreviews HTTP/1.1
Authorization: Bearer $TOKEN
Accept: application/json
Connection: close
Content-Type: application/json'
{
"kind": "LocalSubjectAccessReview",
"apiVersion": "authorization.k8s.io/v1",
...
}
Curl request
$ curl -k \
-X POST \
-d @- \
-H "Authorization: Bearer $TOKEN" \
-H 'Accept: application/json' \
-H 'Content-Type: application/json' \
https://$ENDPOINT/apis/authorization.k8s.io/v1/namespaces/$NAMESPACE/localsubjectaccessreviews <<'EOF'
{
"kind": "LocalSubjectAccessReview",
"apiVersion": "authorization.k8s.io/v1",
...
}
EOF