kubernetes v1.37

SubjectAccessReviewSpec

SubjectAccessReviewSpec is a description of the access request. Exactly one of resourceAttributes and nonResourceAttributes must be set

SubjectAccessReviewSpec fields and descriptions
Field / Type	Description
extra `map[string]string[]`	extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.
groups `string[]`	groups is the groups you're testing for. `x-kubernetes-list-type: "atomic"`
nonResourceAttributes `NonResourceAttributes`	nonResourceAttributes describes information for a non-resource access request
resourceAttributes `ResourceAttributes`	resourceAttributes describes information for a resource access request
uid `string`	uid information about the requesting user.
user `string`	user is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups