From f5415e7027ca6db65f8c2f67abceb18b8fdd9377 Mon Sep 17 00:00:00 2001 From: Steven Martin Date: Wed, 14 Aug 2024 11:30:33 -0400 Subject: [PATCH] [v14] docs: update session_tracker reference (#45468) * docs: include k8s in session_tracker reference * docs: update session.participants verbiage * docs: update verbiage for session_tracker.participants --------- Co-authored-by: Steven Martin --- docs/pages/access-controls/reference.mdx | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/pages/access-controls/reference.mdx b/docs/pages/access-controls/reference.mdx index 7e2578dfb5051..a1236d317a73a 100644 --- a/docs/pages/access-controls/reference.mdx +++ b/docs/pages/access-controls/reference.mdx @@ -410,8 +410,8 @@ spec: deny: rules: # ... and then limit that access via a deny rule. - # Deny rules take precedence over allow rules, so the resulting role allows - # users to create SSH sessions but to only view their own sessions. + # Deny rules take precedence over allow rules, so the resulting role + # only allows user to see their own active sessions. - resources: [session_tracker] verbs: [list, read, update, delete] where: '!contains(session_tracker.participants, user.metadata.name)' @@ -634,7 +634,7 @@ within this guide: | -------------------------- | ------------------------------------------------- | | `user.spec.roles` | The list of roles assigned to a user | | `session.participants` | The list of participants from a session recording | -| `session_tracker.participants` | The list of participants from an SSH session | +| `session_tracker.participants` | The list of participants from the session | | `user.metadata.name` | The user's name | Read the [predicate