kubernetes v1.34

PolicyRulesWithSubjects.subjects

subjects is the list of normal user, serviceaccount, or group that this rule cares about. There must be at least one member in this slice. A slice that includes both the system:authenticated and system:unauthenticated user groups matches every request. Required.

4 fields
PolicyRulesWithSubjects.subjects fields and descriptions
Field / TypeDescription
GroupSubject

`group` matches based on user group name.

kind
string required

`kind` indicates which one of the other fields is non-empty. Required

ServiceAccountSubject

`serviceAccount` matches ServiceAccounts.

UserSubject

`user` matches based on username.