mirror of
https://github.com/gravitational/teleport.git
synced 2026-11-03 07:40:28 +08:00
* Generalize Kubernetes Resource RBAC This PR generalizes the work introduced by #19613 to other resources existent in the Kubernetes API. It allows restricting access to different Kubernetes resources using a single `kubernetes_group`. `kubernetes_resource.kind` supports `*` and the following resources: * Deployments * Statefulset * Secrets * Configmap * DaemonSet * Job * CronJob * Namespace * Services * Nodes * ReplicaSets * Roles * RoleBindings * ClusterRoles * ClusterRoleBindings * PersistentVolumes * PersistentVolumeClaims * Ingress * Certificates * ServiceAccounts Part of #20811 * address zac's feedback