alpha authorize improvements
#2790
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
✅ Proposed changes verification passedThis pull request comes with up-to-date documentation and no illegal standard output usages. Find more detailed information in the |
musztardem
force-pushed
the
2654/authorize-cmd-improvements
branch
from
b16cb97 to
ee1caac
Compare
musztardem
changed the title
alpha authorize improvements
pPrecel
previously approved these changes
Dec 17, 2025
grego952
reviewed
Dec 22, 2025
|
|
||
| # Generate JSON for a cluster-wide binding | ||
| kyma alpha authorize user --name ci-bot --clusterrole kyma-admin --cluster-wide -o json | ||
| group - Authorize a Group with Kyma RBAC resources |
Contributor
There was a problem hiding this comment.
Suggested change
| group - Authorize a Group with Kyma RBAC resources | |
| group - Authorizes a group with Kyma RBAC resources |
| # Generate JSON for a cluster-wide binding | ||
| kyma alpha authorize user --name ci-bot --clusterrole kyma-admin --cluster-wide -o json | ||
| group - Authorize a Group with Kyma RBAC resources | ||
| repository - Configure trust between a Kyma cluster and a GitHub repository |
Contributor
There was a problem hiding this comment.
Suggested change
| repository - Configure trust between a Kyma cluster and a GitHub repository | |
| repository - Configures a trust between a Kyma cluster and a GitHub repository |
| kyma alpha authorize user --name ci-bot --clusterrole kyma-admin --cluster-wide -o json | ||
| group - Authorize a Group with Kyma RBAC resources | ||
| repository - Configure trust between a Kyma cluster and a GitHub repository | ||
| serviceaccount - Authorize a ServiceAccount with Kyma RBAC resources |
Contributor
There was a problem hiding this comment.
Suggested change
| serviceaccount - Authorize a ServiceAccount with Kyma RBAC resources | |
| serviceaccount - Authorizes a ServiceAccount with Kyma RBAC resources |
| group - Authorize a Group with Kyma RBAC resources | ||
| repository - Configure trust between a Kyma cluster and a GitHub repository | ||
| serviceaccount - Authorize a ServiceAccount with Kyma RBAC resources | ||
| user - Authorize a User with Kyma RBAC resources |
Contributor
There was a problem hiding this comment.
Suggested change
| user - Authorize a User with Kyma RBAC resources | |
| user - Authorizes a user with Kyma RBAC resources |
| * [kyma alpha](kyma_alpha.md) - Groups command prototypes for which the API may still change | ||
| * [kyma alpha authorize repository](kyma_alpha_authorize_repository.md) - Configure trust between a Kyma cluster and a GitHub repository | ||
| * [kyma alpha](kyma_alpha.md) - Groups command prototypes for which the API may still change | ||
| * [kyma alpha authorize group](kyma_alpha_authorize_group.md) - Authorize a Group with Kyma RBAC resources |
Contributor
There was a problem hiding this comment.
Suggested change
| * [kyma alpha authorize group](kyma_alpha_authorize_group.md) - Authorize a Group with Kyma RBAC resources | |
| * [kyma alpha authorize group](kyma_alpha_authorize_group.md) - Authorizes a group with Kyma RBAC resources |
| @@ -0,0 +1,50 @@ | |||
| # kyma alpha authorize user | |||
|
|
|||
| Authorize a User with Kyma RBAC resources. | |||
Contributor
There was a problem hiding this comment.
Suggested change
| Authorize a User with Kyma RBAC resources. | |
| Authorizes a user with Kyma RBAC resources. |
|
|
||
| ```text | ||
| --binding-name string Custom name for the RoleBinding or ClusterRoleBinding. If not specified, a name is auto-generated based on the role and subject | ||
| --cluster-wide Create a ClusterRoleBinding for cluster-wide access (requires --clusterrole) |
Contributor
There was a problem hiding this comment.
Suggested change
| --cluster-wide Create a ClusterRoleBinding for cluster-wide access (requires --clusterrole) | |
| --cluster-wide Creates a ClusterRoleBinding for cluster-wide access (requires --clusterrole) |
| --binding-name string Custom name for the RoleBinding or ClusterRoleBinding. If not specified, a name is auto-generated based on the role and subject | ||
| --cluster-wide Create a ClusterRoleBinding for cluster-wide access (requires --clusterrole) | ||
| --clusterrole string ClusterRole name to bind (for ClusterRoleBinding with --cluster-wide, or RoleBinding in namespace) | ||
| --dry-run Preview the YAML/JSON output without applying resources to the cluster |
Contributor
There was a problem hiding this comment.
Suggested change
| --dry-run Preview the YAML/JSON output without applying resources to the cluster | |
| --dry-run Previews the YAML/JSON output without applying resources to the cluster |
| -h, --help Help for the command | ||
| --kubeconfig string Path to the Kyma kubeconfig file | ||
| --show-extensions-error Prints a possible error when fetching extensions fails | ||
| --skip-extensions Skip fetching extensions from the target Kyma environment |
Contributor
There was a problem hiding this comment.
Suggested change
| --skip-extensions Skip fetching extensions from the target Kyma environment | |
| --skip-extensions Skips fetching extensions from the target Kyma environment |
|
|
||
| ## See also | ||
|
|
||
| * [kyma alpha authorize](kyma_alpha_authorize.md) - Authorize a subject (user, group, or service account) with Kyma RBAC resources |
Contributor
There was a problem hiding this comment.
Suggested change
| * [kyma alpha authorize](kyma_alpha_authorize.md) - Authorize a subject (user, group, or service account) with Kyma RBAC resources | |
| * [kyma alpha authorize](kyma_alpha_authorize.md) - Authorizes a subject (user, group, or service account) with Kyma RBAC resources |
musztardem
force-pushed
the
2654/authorize-cmd-improvements
branch
from
2bd8420 to
bef0270
Compare
musztardem
force-pushed
the
2654/authorize-cmd-improvements
branch
from
bef0270 to
4a27a78
Compare
pPrecel
approved these changes
Dec 28, 2025
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
Changes proposed in this pull request:
user,groupandserviceaccountauthorization targets to their specialized commands. They are no longer arguments for theauthorizecmd.authorizecommand now is only a command group instead of a separate command.binding-nameparameter that allows for a custom binding resource nameRelated issue(s)
#2654