OBJECT

KubernetesKindClusterRoleBindingRoleRef

RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.

GraphQL Schema definition

type KubernetesKindClusterRoleBindingRoleRef {
#   APIGroup is the group for the resource being referenced
apiGroup: String 
#   Kind is the type of resource being referenced
kind: String 
#   Name is the name of resource being referenced
name: String 
}

Require by

KubernetesKindClusterRoleBindingClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.