I noticed when creating a K8S role or clusterole there is NO naming validation for the apigroups
, verbs
nor resources
. I mean I created a clusterrole and for the apiGroups field instead of rbac.authorization.k8s.io
I typed rbac.authorization.k8s.io/v1
(which is the apiversion from kubectl api-resources ) and I did not get any error when creating the clusterrole. Also instead of resources: - secretproviderclasses
I typed resources: - SecretProviderClasses
(with some upper letters) and also I could not access this resource because of the incorrect naming.
I would like to ask whether there is a place or a method to validate the syntax of the K8S RBAC roles/clusterroles?
Thank you.