REST Resource: projects.locations.memberships.rbacrolebindings

Resource: RBACRoleBinding

RBACRoleBinding represents a rbacrolebinding across the Fleet

JSON representation
{
  "name": string,
  "uid": string,
  "createTime": string,
  "updateTime": string,
  "deleteTime": string,
  "state": {
    object (RBACRoleBindingLifecycleState)
  },
  "role": {
    object (RBACRoleBinding.Role)
  },
  "labels": {
    string: string,
    ...
  },

  // Union field principal can be only one of the following:
  "user": string,
  "group": string
  // End of list of possible types for union field principal.
}
Fields
name

string

The resource name for the rbacrolebinding projects/{project}/locations/{location}/scopes/{scope}/rbacrolebindings/{rbacrolebinding} or projects/{project}/locations/{location}/memberships/{membership}/rbacrolebindings/{rbacrolebinding}

uid

string

Output only. Google-generated UUID for this resource. This is unique across all rbacrolebinding resources. If a rbacrolebinding resource is deleted and another resource with the same name is created, it gets a different uid.

createTime

string (Timestamp format)

Output only. When the rbacrolebinding was created.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

updateTime

string (Timestamp format)

Output only. When the rbacrolebinding was last updated.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

deleteTime

string (Timestamp format)

Output only. When the rbacrolebinding was deleted.

A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

state

object (RBACRoleBindingLifecycleState)

Output only. State of the rbacrolebinding resource.

role

object (RBACRoleBinding.Role)

Required. Role to bind to the principal

labels

map (key: string, value: string)

Optional. Labels for this RBACRolebinding.

An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.

Union field principal. Principal that is be authorized in the cluster (at least of one the oneof is required). Updating one will unset the other automatically. principal can be only one of the following:
user

string

user is the name of the user as seen by the kubernetes cluster, example "alice" or "alice@domain.tld"

group

string

group is the group, as seen by the kubernetes cluster.

RBACRoleBindingLifecycleState

RBACRoleBindingLifecycleState describes the state of a RbacRoleBinding resource.

JSON representation
{
  "code": enum (RBACRoleBindingLifecycleState.Code)
}
Fields
code

enum (RBACRoleBindingLifecycleState.Code)

Output only. The current state of the rbacrolebinding resource.

RBACRoleBindingLifecycleState.Code

Code describes the state of a rbacrolebinding resource.

Enums
CODE_UNSPECIFIED The code is not set.
CREATING The rbacrolebinding is being created.
READY The rbacrolebinding active.
DELETING The rbacrolebinding is being deleted.
UPDATING The rbacrolebinding is being updated.

RBACRoleBinding.Role

Role is the type for Kubernetes roles

JSON representation
{
  "predefinedRole": enum (RBACRoleBinding.Role.PredefinedRoles)
}
Fields
predefinedRole

enum (RBACRoleBinding.Role.PredefinedRoles)

predefinedRole is the Kubernetes default role to use

RBACRoleBinding.Role.PredefinedRoles

PredefinedRoles is an ENUM representation of the default Kubernetes Roles

Enums
UNKNOWN UNKNOWN
ADMIN ADMIN has EDIT and RBAC permissions
EDIT EDIT can edit all resources except RBAC
VIEW VIEW can only read resources
ANTHOS_SUPPORT ANTHOS_SUPPORT gives Google Support read-only access to a number of cluster resources.

Methods

create

Creates a Membership RBACRoleBinding.

delete

Deletes a Membership RBACRoleBinding.

generateMembershipRBACRoleBindingYAML

Generates a YAML of the RBAC policies for the specified RoleBinding and its associated impersonation resources.

get

Returns the details of a Membership RBACRoleBinding.

list

Lists all Membership RBACRoleBindings.

patch

Updates a Membership RBACRoleBinding.