查看api-Version
# apiVersion = apiGroup/version
[root@master]# kubectl api-versions
admissionregistration.k8s.io/v1
apiextensions.k8s.io/v1
apiregistration.k8s.io/v1
appcatalog.appscode.com/v1alpha1
apps/v1
authentication.k8s.io/v1
authorization.k8s.io/v1
autoscaling/v1
autoscaling/v2
batch/v1
catalog.kubedb.com/v1alpha1
ceph.rook.io/v1
certificates.k8s.io/v1
coordination.k8s.io/v1
discovery.k8s.io/v1
events.k8s.io/v1
extensions.istio.io/v1alpha1
flowcontrol.apiserver.k8s.io/v1beta2
flowcontrol.apiserver.k8s.io/v1beta3
install.istio.io/v1alpha1
kubedb.com/v1alpha2
mutators.autoscaling.kubedb.com/v1alpha1
mutators.dashboard.kubedb.com/v1alpha1
mutators.kubedb.com/v1alpha1
mutators.ops.kubedb.com/v1alpha1
mutators.schema.kubedb.com/v1alpha1
networking.istio.io/v1alpha3
networking.istio.io/v1beta1
networking.k8s.io/v1
node.k8s.io/v1
objectbucket.io/v1alpha1
policy/v1
rbac.authorization.k8s.io/v1
scheduling.k8s.io/v1
security.istio.io/v1
security.istio.io/v1beta1
storage.k8s.io/v1
telemetry.istio.io/v1alpha1
v1
validators.dashboard.kubedb.com/v1alpha1
validators.kubedb.com/v1alpha1
validators.ops.kubedb.com/v1alpha1
validators.postgres.kubedb.com/v1alpha1
validators.schema.kubedb.com/v1alpha1
一个api-resource属于一个apiGroup
示例
在apps 的apiGroup的namespaces,deployment允许create,delete,get, list,patch,update, watch操作
kind: ClusterRole
apiVersion: rbac.authorization.k8s.io/v1
metadata:
name: jenkins
rules:
- apiGroups: ["apps"]
resources: ["namespaces","deployemnt"]
verbs: ["create","delete","get","list","patch","update","watch"]
