Update godeps

vendor/k8s.io/kubernetes/pkg/apis/rbac/v1alpha1/generated.proto

@@ -33,6 +33,7 @@ option go_package = "v1alpha1";
 // ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.
 message ClusterRole {
   // Standard object's metadata.
+  // +optional
   optional k8s.io.kubernetes.pkg.api.v1.ObjectMeta metadata = 1;
 
   // Rules holds all the PolicyRules for this ClusterRole
@@ -43,6 +44,7 @@ message ClusterRole {
 // and adds who information via Subject.
 message ClusterRoleBinding {
   // Standard object's metadata.
+  // +optional
   optional k8s.io.kubernetes.pkg.api.v1.ObjectMeta metadata = 1;
 
   // Subjects holds references to the objects the role applies to.
@@ -50,12 +52,13 @@ message ClusterRoleBinding {
 
   // RoleRef can only reference a ClusterRole in the global namespace.
   // If the RoleRef cannot be resolved, the Authorizer must return an error.
-  optional k8s.io.kubernetes.pkg.api.v1.ObjectReference roleRef = 3;
+  optional RoleRef roleRef = 3;
 }
 
 // ClusterRoleBindingList is a collection of ClusterRoleBindings
 message ClusterRoleBindingList {
   // Standard object's metadata.
+  // +optional
   optional k8s.io.kubernetes.pkg.api.unversioned.ListMeta metadata = 1;
 
   // Items is a list of ClusterRoleBindings
@@ -65,6 +68,7 @@ message ClusterRoleBindingList {
 // ClusterRoleList is a collection of ClusterRoles
 message ClusterRoleList {
   // Standard object's metadata.
+  // +optional
   optional k8s.io.kubernetes.pkg.api.unversioned.ListMeta metadata = 1;
 
   // Items is a list of ClusterRoles
@@ -79,28 +83,34 @@ message PolicyRule {
 
   // AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports.
   // If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.
+  // +optional
   optional k8s.io.kubernetes.pkg.runtime.RawExtension attributeRestrictions = 2;
 
   // APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of
   // the enumerated resources in any API group will be allowed.
+  // +optional
   repeated string apiGroups = 3;
 
   // Resources is a list of resources this rule applies to.  ResourceAll represents all resources.
+  // +optional
   repeated string resources = 4;
 
   // ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
+  // +optional
   repeated string resourceNames = 5;
 
   // NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path
   // This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.
   // Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding.
   // Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
+  // +optional
   repeated string nonResourceURLs = 6;
 }
 
 // Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.
 message Role {
   // Standard object's metadata.
+  // +optional
   optional k8s.io.kubernetes.pkg.api.v1.ObjectMeta metadata = 1;
 
   // Rules holds all the PolicyRules for this Role
@@ -112,6 +122,7 @@ message Role {
 // namespace only have effect in that namespace.
 message RoleBinding {
   // Standard object's metadata.
+  // +optional
   optional k8s.io.kubernetes.pkg.api.v1.ObjectMeta metadata = 1;
 
   // Subjects holds references to the objects the role applies to.
@@ -119,12 +130,13 @@ message RoleBinding {
 
   // RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace.
   // If the RoleRef cannot be resolved, the Authorizer must return an error.
-  optional k8s.io.kubernetes.pkg.api.v1.ObjectReference roleRef = 3;
+  optional RoleRef roleRef = 3;
 }
 
 // RoleBindingList is a collection of RoleBindings
 message RoleBindingList {
   // Standard object's metadata.
+  // +optional
   optional k8s.io.kubernetes.pkg.api.unversioned.ListMeta metadata = 1;
 
   // Items is a list of RoleBindings
@@ -134,12 +146,25 @@ message RoleBindingList {
 // RoleList is a collection of Roles
 message RoleList {
   // Standard object's metadata.
+  // +optional
   optional k8s.io.kubernetes.pkg.api.unversioned.ListMeta metadata = 1;
 
   // Items is a list of Roles
   repeated Role items = 2;
 }
 
+// RoleRef contains information that points to the role being used
+message RoleRef {
+  // APIGroup is the group for the resource being referenced
+  optional string apiGroup = 1;
+
+  // Kind is the type of resource being referenced
+  optional string kind = 2;
+
+  // Name is the name of resource being referenced
+  optional string name = 3;
+}
+
 // Subject contains a reference to the object or user identities a role binding applies to.  This can either hold a direct API object reference,
 // or a value for non-objects such as user and group names.
 message Subject {
@@ -148,6 +173,7 @@ message Subject {
   optional string kind = 1;
 
   // APIVersion holds the API group and version of the referenced object.
+  // +optional
   optional string apiVersion = 2;
 
   // Name of the object being referenced.
@@ -155,6 +181,7 @@ message Subject {
 
   // Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
   // the Authorizer should report an error.
+  // +optional
   optional string namespace = 4;
 }