static mock demo — no cluster connection, no oc, no credentials
Static mock demo. This page uses a small bundled sample dataset. It does not connect to a cluster, run oc, or read local credentials.
Groupsystem:serviceaccounts:mine-platformvirtual
Virtual / system group. Synthesized by the apiserver — no Group object exists; membership is computed per-request from the authenticated identity. The bindings below are the authoritative description of what this name currently grants. By the system:serviceaccounts:<ns> convention this name resolves to every ServiceAccount in mine-platform (namespace present; 2 ServiceAccounts currently in mine-platform).
There is no Group object on the cluster — oc get group system:serviceaccounts:mine-platform will return nothing. Bindings to this name still take effect at request time.
Reach
Where this subject's permissions land. Cluster-wide grants reach every namespace; namespace-scoped grants are listed individually.
This subject has no bindings (direct or via group membership).