static mock demo — no cluster connection, no oc, no credentials
Static mock demo. This page uses a small bundled sample dataset. It does not connect to a cluster, run oc, or read local credentials.
Groupsystem:authenticatedvirtual
Virtual / system group. Synthesized by the apiserver — no Group object exists; membership is computed per-request from the authenticated identity. The bindings below are the authoritative description of what this name currently grants.
There is no Group object on the cluster — oc get group system:authenticated will return nothing. Bindings to this name still take effect at request time.
Reach
Where this subject's permissions land. Cluster-wide grants reach every namespace; namespace-scoped grants are listed individually.
This subject has no bindings (direct or via group membership).