Create subject access review

Evaluates all of the request attributes against all policies and allows or denies the request.

application/json

Request Body required

apiVersion string

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

kind string

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

spec required
extra object
property name* string[]
Array [
string
]
groups string[]
nonResourceAttributes
path string
verb string
resourceAttributes
group string
name string
namespace string
resource string
resourceScope string
subresource string
verb string
version string
workspace string
uid string
user string
status
allowed boolean required
denied boolean
evaluationError string
reason string

Responses

• 200

---

ok

application/json

Schema

Example (from schema)

---

Schema

apiVersion string

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

kind string

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

spec required
extra object
property name* string[]
Array [
string
]
groups string[]
nonResourceAttributes
path string
verb string
resourceAttributes
group string
name string
namespace string
resource string
resourceScope string
subresource string
verb string
version string
workspace string
uid string
user string
status
allowed boolean required
denied boolean
evaluationError string
reason string

{
  "apiVersion": "string",
  "kind": "string",
  "spec": {
    "extra": {},
    "groups": [
      "string"
    ],
    "nonResourceAttributes": {
      "path": "string",
      "verb": "string"
    },
    "resourceAttributes": {
      "group": "string",
      "name": "string",
      "namespace": "string",
      "resource": "string",
      "resourceScope": "string",
      "subresource": "string",
      "verb": "string",
      "version": "string",
      "workspace": "string"
    },
    "uid": "string",
    "user": "string"
  },
  "status": {
    "allowed": true,
    "denied": true,
    "evaluationError": "string",
    "reason": "string"
  }
}

Loading...