| apiVersion: apiextensions.k8s.io/v1beta1 |
| kind: CustomResourceDefinition |
| metadata: |
| annotations: |
| "helm.sh/resource-policy": keep |
| labels: |
| app: mixer |
| chart: istio |
| heritage: Tiller |
| istio: rbac |
| package: istio.io.mixer |
| release: istio |
| name: servicerolebindings.rbac.istio.io |
| spec: |
| additionalPrinterColumns: |
| - JSONPath: .spec.roleRef.name |
| description: The name of the ServiceRole object being referenced |
| name: Reference |
| type: string |
| - JSONPath: .metadata.creationTimestamp |
| description: 'CreationTimestamp is a timestamp representing the server time when |
| this object was created. It is not guaranteed to be set in happens-before order |
| across separate operations. Clients may not set this value. It is represented |
| in RFC3339 form and is in UTC. Populated by the system. Read-only. Null for |
| lists. More info: https://git.k8s.io/community/contributors/devel/api-conventions.md#metadata' |
| name: Age |
| type: date |
| group: rbac.istio.io |
| names: |
| categories: |
| - istio-io |
| - rbac-istio-io |
| kind: ServiceRoleBinding |
| listKind: ServiceRoleBindingList |
| plural: servicerolebindings |
| singular: servicerolebinding |
| preserveUnknownFields: false |
| scope: Namespaced |
| subresources: |
| status: {} |
| validation: |
| openAPIV3Schema: |
| properties: |
| spec: |
| description: 'See more details at:' |
| properties: |
| actions: |
| items: |
| properties: |
| constraints: |
| description: Optional. |
| items: |
| properties: |
| key: |
| description: Key of the constraint. |
| format: string |
| type: string |
| values: |
| description: List of valid values for the constraint. |
| items: |
| format: string |
| type: string |
| type: array |
| type: object |
| type: array |
| hosts: |
| items: |
| format: string |
| type: string |
| type: array |
| methods: |
| description: Optional. |
| items: |
| format: string |
| type: string |
| type: array |
| notHosts: |
| items: |
| format: string |
| type: string |
| type: array |
| notMethods: |
| items: |
| format: string |
| type: string |
| type: array |
| notPaths: |
| items: |
| format: string |
| type: string |
| type: array |
| notPorts: |
| items: |
| format: int32 |
| type: integer |
| type: array |
| paths: |
| description: Optional. |
| items: |
| format: string |
| type: string |
| type: array |
| ports: |
| items: |
| format: int32 |
| type: integer |
| type: array |
| services: |
| description: A list of service names. |
| items: |
| format: string |
| type: string |
| type: array |
| type: object |
| type: array |
| mode: |
| enum: |
| - ENFORCED |
| - PERMISSIVE |
| type: string |
| role: |
| format: string |
| type: string |
| roleRef: |
| description: Reference to the ServiceRole object. |
| properties: |
| kind: |
| description: The type of the role being referenced. |
| format: string |
| type: string |
| name: |
| description: The name of the ServiceRole object being referenced. |
| format: string |
| type: string |
| type: object |
| subjects: |
| description: List of subjects that are assigned the ServiceRole object. |
| items: |
| properties: |
| group: |
| format: string |
| type: string |
| groups: |
| items: |
| format: string |
| type: string |
| type: array |
| ips: |
| items: |
| format: string |
| type: string |
| type: array |
| names: |
| items: |
| format: string |
| type: string |
| type: array |
| namespaces: |
| items: |
| format: string |
| type: string |
| type: array |
| notGroups: |
| items: |
| format: string |
| type: string |
| type: array |
| notIps: |
| items: |
| format: string |
| type: string |
| type: array |
| notNames: |
| items: |
| format: string |
| type: string |
| type: array |
| notNamespaces: |
| items: |
| format: string |
| type: string |
| type: array |
| properties: |
| additionalProperties: |
| format: string |
| type: string |
| description: Optional. |
| type: object |
| user: |
| description: Optional. |
| format: string |
| type: string |
| type: object |
| type: array |
| type: object |
| status: |
| type: object |
| x-kubernetes-preserve-unknown-fields: true |
| type: object |
| versions: |
| - name: v1alpha1 |
| served: true |
| storage: true |