@@ -1355,7 +1355,8 @@ <h3 id="kcp-rbac">kcp RBAC</h3>
13551355< li > access the workspace of its < code > APIExport</ code > ,</ li >
13561356< li > get the < code > LogicalCluster</ code > ,</ li >
13571357< li > manage its < code > APIExport</ code > ,</ li >
1358- < li > manage < code > APIResourceSchemas</ code > and</ li >
1358+ < li > manage < code > APIResourceSchemas</ code > ,</ li >
1359+ < li > create < code > events</ code > for < code > APIExports</ code > and</ li >
13591360< li > access the virtual workspace for its < code > APIExport</ code > .</ li >
13601361</ ul >
13611362< p > This can be achieved by applying RBAC like this < em > in the workspace where the < code > APIExport</ code > resides</ em > :</ p >
@@ -1386,51 +1387,61 @@ <h3 id="kcp-rbac">kcp RBAC</h3>
13861387< a id ="__codelineno-8-25 " name ="__codelineno-8-25 " href ="#__codelineno-8-25 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> watch</ span >
13871388< a id ="__codelineno-8-26 " name ="__codelineno-8-26 " href ="#__codelineno-8-26 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> patch</ span >
13881389< a id ="__codelineno-8-27 " name ="__codelineno-8-27 " href ="#__codelineno-8-27 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> update</ span >
1389- < a id ="__codelineno-8-28 " name ="__codelineno-8-28 " href ="#__codelineno-8-28 "> </ a > < span class ="w "> </ span > < span class ="c1 "> # manage APIResourceSchemas </ span >
1390+ < a id ="__codelineno-8-28 " name ="__codelineno-8-28 " href ="#__codelineno-8-28 "> </ a > < span class ="w "> </ span > < span class ="c1 "> # issue events for APIExports </ span >
13901391< a id ="__codelineno-8-29 " name ="__codelineno-8-29 " href ="#__codelineno-8-29 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="nt "> apiGroups</ span > < span class ="p "> :</ span >
1391- < a id ="__codelineno-8-30 " name ="__codelineno-8-30 " href ="#__codelineno-8-30 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain " > apis.kcp.io </ span >
1392+ < a id ="__codelineno-8-30 " name ="__codelineno-8-30 " href ="#__codelineno-8-30 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="s " > "" </ span >
13921393< a id ="__codelineno-8-31 " name ="__codelineno-8-31 " href ="#__codelineno-8-31 "> </ a > < span class ="w "> </ span > < span class ="nt "> resources</ span > < span class ="p "> :</ span >
1393- < a id ="__codelineno-8-32 " name ="__codelineno-8-32 " href ="#__codelineno-8-32 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> apiresourceschemas </ span >
1394+ < a id ="__codelineno-8-32 " name ="__codelineno-8-32 " href ="#__codelineno-8-32 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> events </ span >
13941395< a id ="__codelineno-8-33 " name ="__codelineno-8-33 " href ="#__codelineno-8-33 "> </ a > < span class ="w "> </ span > < span class ="nt "> verbs</ span > < span class ="p "> :</ span >
13951396< a id ="__codelineno-8-34 " name ="__codelineno-8-34 " href ="#__codelineno-8-34 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> get</ span >
1396- < a id ="__codelineno-8-35 " name ="__codelineno-8-35 " href ="#__codelineno-8-35 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> list </ span >
1397- < a id ="__codelineno-8-36 " name ="__codelineno-8-36 " href ="#__codelineno-8-36 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> watch </ span >
1398- < a id ="__codelineno-8-37 " name ="__codelineno-8-37 " href ="#__codelineno-8-37 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> create </ span >
1399- < a id ="__codelineno-8-38 " name ="__codelineno-8-38 " href ="#__codelineno-8-38 "> </ a > < span class ="w "> </ span > < span class ="c1 "> # access the virtual workspace </ span >
1397+ < a id ="__codelineno-8-35 " name ="__codelineno-8-35 " href ="#__codelineno-8-35 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> create </ span >
1398+ < a id ="__codelineno-8-36 " name ="__codelineno-8-36 " href ="#__codelineno-8-36 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> patch </ span >
1399+ < a id ="__codelineno-8-37 " name ="__codelineno-8-37 " href ="#__codelineno-8-37 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> update </ span >
1400+ < a id ="__codelineno-8-38 " name ="__codelineno-8-38 " href ="#__codelineno-8-38 "> </ a > < span class ="w "> </ span > < span class ="c1 "> # manage APIResourceSchemas </ span >
14001401< a id ="__codelineno-8-39 " name ="__codelineno-8-39 " href ="#__codelineno-8-39 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="nt "> apiGroups</ span > < span class ="p "> :</ span >
14011402< a id ="__codelineno-8-40 " name ="__codelineno-8-40 " href ="#__codelineno-8-40 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> apis.kcp.io</ span >
14021403< a id ="__codelineno-8-41 " name ="__codelineno-8-41 " href ="#__codelineno-8-41 "> </ a > < span class ="w "> </ span > < span class ="nt "> resources</ span > < span class ="p "> :</ span >
1403- < a id ="__codelineno-8-42 " name ="__codelineno-8-42 " href ="#__codelineno-8-42 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> apiexports/content</ span >
1404- < a id ="__codelineno-8-43 " name ="__codelineno-8-43 " href ="#__codelineno-8-43 "> </ a > < span class ="w "> </ span > < span class ="nt "> resourceNames</ span > < span class ="p "> :</ span >
1405- < a id ="__codelineno-8-44 " name ="__codelineno-8-44 " href ="#__codelineno-8-44 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> test.example.com</ span >
1406- < a id ="__codelineno-8-45 " name ="__codelineno-8-45 " href ="#__codelineno-8-45 "> </ a > < span class ="w "> </ span > < span class ="nt "> verbs</ span > < span class ="p "> :</ span >
1407- < a id ="__codelineno-8-46 " name ="__codelineno-8-46 " href ="#__codelineno-8-46 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="s "> '*'</ span >
1408- < a id ="__codelineno-8-47 " name ="__codelineno-8-47 " href ="#__codelineno-8-47 "> </ a >
1409- < a id ="__codelineno-8-48 " name ="__codelineno-8-48 " href ="#__codelineno-8-48 "> </ a > < span class ="nn "> ---</ span >
1410- < a id ="__codelineno-8-49 " name ="__codelineno-8-49 " href ="#__codelineno-8-49 "> </ a > < span class ="nt "> apiVersion</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> rbac.authorization.k8s.io/v1</ span >
1411- < a id ="__codelineno-8-50 " name ="__codelineno-8-50 " href ="#__codelineno-8-50 "> </ a > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> ClusterRoleBinding</ span >
1412- < a id ="__codelineno-8-51 " name ="__codelineno-8-51 " href ="#__codelineno-8-51 "> </ a > < span class ="nt "> metadata</ span > < span class ="p "> :</ span >
1413- < a id ="__codelineno-8-52 " name ="__codelineno-8-52 " href ="#__codelineno-8-52 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango:system</ span >
1414- < a id ="__codelineno-8-53 " name ="__codelineno-8-53 " href ="#__codelineno-8-53 "> </ a > < span class ="nt "> roleRef</ span > < span class ="p "> :</ span >
1415- < a id ="__codelineno-8-54 " name ="__codelineno-8-54 " href ="#__codelineno-8-54 "> </ a > < span class ="w "> </ span > < span class ="nt "> apiGroup</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> rbac.authorization.k8s.io</ span >
1416- < a id ="__codelineno-8-55 " name ="__codelineno-8-55 " href ="#__codelineno-8-55 "> </ a > < span class ="w "> </ span > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> ClusterRole</ span >
1417- < a id ="__codelineno-8-56 " name ="__codelineno-8-56 " href ="#__codelineno-8-56 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango</ span >
1418- < a id ="__codelineno-8-57 " name ="__codelineno-8-57 " href ="#__codelineno-8-57 "> </ a > < span class ="nt "> subjects</ span > < span class ="p "> :</ span >
1419- < a id ="__codelineno-8-58 " name ="__codelineno-8-58 " href ="#__codelineno-8-58 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> User</ span >
1420- < a id ="__codelineno-8-59 " name ="__codelineno-8-59 " href ="#__codelineno-8-59 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango</ span >
1421- < a id ="__codelineno-8-60 " name ="__codelineno-8-60 " href ="#__codelineno-8-60 "> </ a >
1422- < a id ="__codelineno-8-61 " name ="__codelineno-8-61 " href ="#__codelineno-8-61 "> </ a > < span class ="nn "> ---</ span >
1423- < a id ="__codelineno-8-62 " name ="__codelineno-8-62 " href ="#__codelineno-8-62 "> </ a > < span class ="nt "> apiVersion</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> rbac.authorization.k8s.io/v1</ span >
1424- < a id ="__codelineno-8-63 " name ="__codelineno-8-63 " href ="#__codelineno-8-63 "> </ a > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> ClusterRoleBinding</ span >
1425- < a id ="__codelineno-8-64 " name ="__codelineno-8-64 " href ="#__codelineno-8-64 "> </ a > < span class ="nt "> metadata</ span > < span class ="p "> :</ span >
1426- < a id ="__codelineno-8-65 " name ="__codelineno-8-65 " href ="#__codelineno-8-65 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango:access</ span >
1427- < a id ="__codelineno-8-66 " name ="__codelineno-8-66 " href ="#__codelineno-8-66 "> </ a > < span class ="nt "> roleRef</ span > < span class ="p "> :</ span >
1428- < a id ="__codelineno-8-67 " name ="__codelineno-8-67 " href ="#__codelineno-8-67 "> </ a > < span class ="w "> </ span > < span class ="nt "> apiGroup</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> rbac.authorization.k8s.io</ span >
1429- < a id ="__codelineno-8-68 " name ="__codelineno-8-68 " href ="#__codelineno-8-68 "> </ a > < span class ="w "> </ span > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> ClusterRole</ span >
1430- < a id ="__codelineno-8-69 " name ="__codelineno-8-69 " href ="#__codelineno-8-69 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> system:kcp:workspace:access</ span >
1431- < a id ="__codelineno-8-70 " name ="__codelineno-8-70 " href ="#__codelineno-8-70 "> </ a > < span class ="nt "> subjects</ span > < span class ="p "> :</ span >
1432- < a id ="__codelineno-8-71 " name ="__codelineno-8-71 " href ="#__codelineno-8-71 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> User</ span >
1433- < a id ="__codelineno-8-72 " name ="__codelineno-8-72 " href ="#__codelineno-8-72 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango</ span >
1404+ < a id ="__codelineno-8-42 " name ="__codelineno-8-42 " href ="#__codelineno-8-42 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> apiresourceschemas</ span >
1405+ < a id ="__codelineno-8-43 " name ="__codelineno-8-43 " href ="#__codelineno-8-43 "> </ a > < span class ="w "> </ span > < span class ="nt "> verbs</ span > < span class ="p "> :</ span >
1406+ < a id ="__codelineno-8-44 " name ="__codelineno-8-44 " href ="#__codelineno-8-44 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> get</ span >
1407+ < a id ="__codelineno-8-45 " name ="__codelineno-8-45 " href ="#__codelineno-8-45 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> list</ span >
1408+ < a id ="__codelineno-8-46 " name ="__codelineno-8-46 " href ="#__codelineno-8-46 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> watch</ span >
1409+ < a id ="__codelineno-8-47 " name ="__codelineno-8-47 " href ="#__codelineno-8-47 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> create</ span >
1410+ < a id ="__codelineno-8-48 " name ="__codelineno-8-48 " href ="#__codelineno-8-48 "> </ a > < span class ="w "> </ span > < span class ="c1 "> # access the virtual workspace</ span >
1411+ < a id ="__codelineno-8-49 " name ="__codelineno-8-49 " href ="#__codelineno-8-49 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="nt "> apiGroups</ span > < span class ="p "> :</ span >
1412+ < a id ="__codelineno-8-50 " name ="__codelineno-8-50 " href ="#__codelineno-8-50 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> apis.kcp.io</ span >
1413+ < a id ="__codelineno-8-51 " name ="__codelineno-8-51 " href ="#__codelineno-8-51 "> </ a > < span class ="w "> </ span > < span class ="nt "> resources</ span > < span class ="p "> :</ span >
1414+ < a id ="__codelineno-8-52 " name ="__codelineno-8-52 " href ="#__codelineno-8-52 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> apiexports/content</ span >
1415+ < a id ="__codelineno-8-53 " name ="__codelineno-8-53 " href ="#__codelineno-8-53 "> </ a > < span class ="w "> </ span > < span class ="nt "> resourceNames</ span > < span class ="p "> :</ span >
1416+ < a id ="__codelineno-8-54 " name ="__codelineno-8-54 " href ="#__codelineno-8-54 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> test.example.com</ span >
1417+ < a id ="__codelineno-8-55 " name ="__codelineno-8-55 " href ="#__codelineno-8-55 "> </ a > < span class ="w "> </ span > < span class ="nt "> verbs</ span > < span class ="p "> :</ span >
1418+ < a id ="__codelineno-8-56 " name ="__codelineno-8-56 " href ="#__codelineno-8-56 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="s "> '*'</ span >
1419+ < a id ="__codelineno-8-57 " name ="__codelineno-8-57 " href ="#__codelineno-8-57 "> </ a >
1420+ < a id ="__codelineno-8-58 " name ="__codelineno-8-58 " href ="#__codelineno-8-58 "> </ a > < span class ="nn "> ---</ span >
1421+ < a id ="__codelineno-8-59 " name ="__codelineno-8-59 " href ="#__codelineno-8-59 "> </ a > < span class ="nt "> apiVersion</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> rbac.authorization.k8s.io/v1</ span >
1422+ < a id ="__codelineno-8-60 " name ="__codelineno-8-60 " href ="#__codelineno-8-60 "> </ a > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> ClusterRoleBinding</ span >
1423+ < a id ="__codelineno-8-61 " name ="__codelineno-8-61 " href ="#__codelineno-8-61 "> </ a > < span class ="nt "> metadata</ span > < span class ="p "> :</ span >
1424+ < a id ="__codelineno-8-62 " name ="__codelineno-8-62 " href ="#__codelineno-8-62 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango:system</ span >
1425+ < a id ="__codelineno-8-63 " name ="__codelineno-8-63 " href ="#__codelineno-8-63 "> </ a > < span class ="nt "> roleRef</ span > < span class ="p "> :</ span >
1426+ < a id ="__codelineno-8-64 " name ="__codelineno-8-64 " href ="#__codelineno-8-64 "> </ a > < span class ="w "> </ span > < span class ="nt "> apiGroup</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> rbac.authorization.k8s.io</ span >
1427+ < a id ="__codelineno-8-65 " name ="__codelineno-8-65 " href ="#__codelineno-8-65 "> </ a > < span class ="w "> </ span > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> ClusterRole</ span >
1428+ < a id ="__codelineno-8-66 " name ="__codelineno-8-66 " href ="#__codelineno-8-66 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango</ span >
1429+ < a id ="__codelineno-8-67 " name ="__codelineno-8-67 " href ="#__codelineno-8-67 "> </ a > < span class ="nt "> subjects</ span > < span class ="p "> :</ span >
1430+ < a id ="__codelineno-8-68 " name ="__codelineno-8-68 " href ="#__codelineno-8-68 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> User</ span >
1431+ < a id ="__codelineno-8-69 " name ="__codelineno-8-69 " href ="#__codelineno-8-69 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango</ span >
1432+ < a id ="__codelineno-8-70 " name ="__codelineno-8-70 " href ="#__codelineno-8-70 "> </ a >
1433+ < a id ="__codelineno-8-71 " name ="__codelineno-8-71 " href ="#__codelineno-8-71 "> </ a > < span class ="nn "> ---</ span >
1434+ < a id ="__codelineno-8-72 " name ="__codelineno-8-72 " href ="#__codelineno-8-72 "> </ a > < span class ="nt "> apiVersion</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> rbac.authorization.k8s.io/v1</ span >
1435+ < a id ="__codelineno-8-73 " name ="__codelineno-8-73 " href ="#__codelineno-8-73 "> </ a > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> ClusterRoleBinding</ span >
1436+ < a id ="__codelineno-8-74 " name ="__codelineno-8-74 " href ="#__codelineno-8-74 "> </ a > < span class ="nt "> metadata</ span > < span class ="p "> :</ span >
1437+ < a id ="__codelineno-8-75 " name ="__codelineno-8-75 " href ="#__codelineno-8-75 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango:access</ span >
1438+ < a id ="__codelineno-8-76 " name ="__codelineno-8-76 " href ="#__codelineno-8-76 "> </ a > < span class ="nt "> roleRef</ span > < span class ="p "> :</ span >
1439+ < a id ="__codelineno-8-77 " name ="__codelineno-8-77 " href ="#__codelineno-8-77 "> </ a > < span class ="w "> </ span > < span class ="nt "> apiGroup</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> rbac.authorization.k8s.io</ span >
1440+ < a id ="__codelineno-8-78 " name ="__codelineno-8-78 " href ="#__codelineno-8-78 "> </ a > < span class ="w "> </ span > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> ClusterRole</ span >
1441+ < a id ="__codelineno-8-79 " name ="__codelineno-8-79 " href ="#__codelineno-8-79 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> system:kcp:workspace:access</ span >
1442+ < a id ="__codelineno-8-80 " name ="__codelineno-8-80 " href ="#__codelineno-8-80 "> </ a > < span class ="nt "> subjects</ span > < span class ="p "> :</ span >
1443+ < a id ="__codelineno-8-81 " name ="__codelineno-8-81 " href ="#__codelineno-8-81 "> </ a > < span class ="w "> </ span > < span class ="p p-Indicator "> -</ span > < span class ="w "> </ span > < span class ="nt "> kind</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> User</ span >
1444+ < a id ="__codelineno-8-82 " name ="__codelineno-8-82 " href ="#__codelineno-8-82 "> </ a > < span class ="w "> </ span > < span class ="nt "> name</ span > < span class ="p "> :</ span > < span class ="w "> </ span > < span class ="l l-Scalar l-Scalar-Plain "> api-syncagent-mango</ span >
14341445</ code > </ pre > </ div >
14351446< h2 id ="publish-resources "> Publish Resources</ h2 >
14361447< p > Once the Sync Agent Pods are up and running, you should be able to follow the
0 commit comments