Add a comment to roleRef to document that it is immutable

This commit is contained in:
Lukas Grossar
2023-02-02 22:12:43 +01:00
parent 6662b2921a
commit d76f5dae67
7 changed files with 14 additions and 8 deletions

View File

@@ -12947,7 +12947,7 @@
},
"roleRef": {
"$ref": "#/definitions/io.k8s.api.rbac.v1.RoleRef",
"description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error."
"description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable."
},
"subjects": {
"description": "Subjects holds references to the objects the role applies to.",
@@ -13132,7 +13132,7 @@
},
"roleRef": {
"$ref": "#/definitions/io.k8s.api.rbac.v1.RoleRef",
"description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error."
"description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable."
},
"subjects": {
"description": "Subjects holds references to the objects the role applies to.",

View File

@@ -96,7 +96,7 @@
}
],
"default": {},
"description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error."
"description": "RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable."
},
"subjects": {
"description": "Subjects holds references to the objects the role applies to.",
@@ -331,7 +331,7 @@
}
],
"default": {},
"description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error."
"description": "RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable."
},
"subjects": {
"description": "Subjects holds references to the objects the role applies to.",