subjectaccessreviewspec-authorization-v1beta1.json

{
  "description": "SubjectAccessReviewSpec is a description of the access request.  Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set",
  "properties": {
    "extra": {
      "description": "Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.",
      "type": "object",
      "additionalProperties": {
        "type": [
          "array",
          "null"
        ],
        "items": {
          "type": [
            "string",
            "null"
          ]
        }
      }
    },
    "group": {
      "description": "Groups is the groups you're testing for.",
      "type": [
        "array",
        "null"
      ],
      "items": {
        "type": [
          "string",
          "null"
        ]
      }
    },
    "nonResourceAttributes": {
      "description": "NonResourceAttributes describes information for a non-resource access request",
      "$ref": "_definitions.json#/definitions/io.k8s.api.authorization.v1beta1.NonResourceAttributes"
    },
    "resourceAttributes": {
      "description": "ResourceAuthorizationAttributes describes information for a resource access request",
      "$ref": "_definitions.json#/definitions/io.k8s.api.authorization.v1beta1.ResourceAttributes"
    },
    "uid": {
      "description": "UID information about the requesting user.",
      "type": [
        "string",
        "null"
      ]
    },
    "user": {
      "description": "User is the user you're testing for. If you specify \"User\" but not \"Group\", then is it interpreted as \"What if User were not a member of any groups",
      "type": [
        "string",
        "null"
      ]
    }
  },
  "$schema": "http://json-schema.org/schema#",
  "type": "object"
}