ManagedClusterIdentityBindingAllowedSubject Class

Definition

Namespace:

Azure.ResourceManager.ContainerService.Models

Assembly:

Azure.ResourceManager.ContainerService.dll

Package:

Azure.ResourceManager.ContainerService v1.8.0-beta.1

Source:

ManagedClusterIdentityBindingAllowedSubject.cs

A subject authorized to use the identity binding for token exchange. The namespace selector is required and must be non-empty. The service account selector is optional; when omitted, all service accounts in matching namespaces are authorized. Selectors within a single AllowedSubject are AND'd; multiple AllowedSubjects on an IdentityBinding are OR'd.

public class ManagedClusterIdentityBindingAllowedSubject : System.ClientModel.Primitives.IJsonModel<Azure.ResourceManager.ContainerService.Models.ManagedClusterIdentityBindingAllowedSubject>, System.ClientModel.Primitives.IPersistableModel<Azure.ResourceManager.ContainerService.Models.ManagedClusterIdentityBindingAllowedSubject>

type ManagedClusterIdentityBindingAllowedSubject = class
    interface IJsonModel<ManagedClusterIdentityBindingAllowedSubject>
    interface IPersistableModel<ManagedClusterIdentityBindingAllowedSubject>

Public Class ManagedClusterIdentityBindingAllowedSubject
Implements IJsonModel(Of ManagedClusterIdentityBindingAllowedSubject), IPersistableModel(Of ManagedClusterIdentityBindingAllowedSubject)

Inheritance

Object

ManagedClusterIdentityBindingAllowedSubject

Implements

IJsonModel<ManagedClusterIdentityBindingAllowedSubject> IPersistableModel<ManagedClusterIdentityBindingAllowedSubject> IPersistableModel<T>

Constructors

Name	Description
ManagedClusterIdentityBindingAllowedSubject(ManagedClusterLoadBalancerLabelSelector)	Initializes a new instance of ManagedClusterIdentityBindingAllowedSubject.

Properties

Name	Description
NamespaceSelector	Label selector matching the namespaces in which this identity may be used. Must be non-empty: an empty selector would match every namespace and is rejected to prevent overly permissive bindings. Use the built-in kubernetes.io/metadata.name label to target specific namespaces by name.
ServiceAccountSelector	Optional label selector matching the service accounts (within the namespaces matched by namespaceSelector) that may use this identity. When omitted, all service accounts in matching namespaces are authorized. When provided, it must be non-empty.

Methods

Name	Description
JsonModelCreateCore(Utf8JsonReader, ModelReaderWriterOptions)
JsonModelWriteCore(Utf8JsonWriter, ModelReaderWriterOptions)
PersistableModelCreateCore(BinaryData, ModelReaderWriterOptions)
PersistableModelWriteCore(ModelReaderWriterOptions)

Explicit Interface Implementations

Name	Description
IJsonModel<ManagedClusterIdentityBindingAllowedSubject>.Create(Utf8JsonReader, ModelReaderWriterOptions)
IJsonModel<ManagedClusterIdentityBindingAllowedSubject>.Write(Utf8JsonWriter, ModelReaderWriterOptions)
IPersistableModel<ManagedClusterIdentityBindingAllowedSubject>.Create(BinaryData, ModelReaderWriterOptions)
IPersistableModel<ManagedClusterIdentityBindingAllowedSubject>.GetFormatFromOptions(ModelReaderWriterOptions)
IPersistableModel<ManagedClusterIdentityBindingAllowedSubject>.Write(ModelReaderWriterOptions)