Policy is a namespaced or cluster scoped, logical grouping of PolicyRules that can be referenced as a unit by a PolicyBinding.

PolicyBinding references a Policy, but does not contain it.

PolicyRef contains information that points to the policy being used.

Role is a namespaced or cluster scoped, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.

RoleBinding references a role, but does not contain it.

RoleRef contains information that points to the role being used.

Rule holds information that describes a policy rule, but does not contain information about whom the rule applies to.

Subject contains a reference to the object or user identities a role binding applies to.