Subject matches the originator of a request, as identified by the request authentication system. There are three ways of matching an originator; by user, group, or service account.
| Name | Type | Description | Notes |
|---|---|---|---|
| group | V1beta2GroupSubject | [optional] | |
| kind | str | `kind` indicates which one of the other fields is non-empty. Required | |
| service_account | V1beta2ServiceAccountSubject | [optional] | |
| user | V1beta2UserSubject | [optional] |