This message has oneof_ fields (mutually exclusive fields).
For each oneof, at most one member field can be set at the same time.
Setting any member of the oneof automatically clears all other
members.
str
Matches a single Kubernetes service account, e.g.
'my-namespace:my-service-account'.
kubernetes_service_account scope is always more specific
than kubernetes_namespace scope for the same namespace.
This field is a member of oneof_ scope.
kubernetes_namespace
str
Matches all Kubernetes service accounts in the provided
namespace, unless a more specific
kubernetes_service_account scope already matched.
This field is a member of oneof_ scope.