abac

Documentation

Overview

Package abac authorizes Kubernetes API actions using an Attribute-based access control scheme.

Index

• type PolicyList
  • func NewFromFile(path string) (PolicyList, error)
  • func (pl PolicyList) Authorize(a authorizer.Attributes) (authorizer.Decision, string, error)
  • func (pl PolicyList) RulesFor(user user.Info, namespace string) ([]authorizer.ResourceRuleInfo, []authorizer.NonResourceRuleInfo, bool, error)

Types

type PolicyList

type PolicyList []*abac.Policy

PolicyList is simply a slice of Policy structs.

func NewFromFile

func NewFromFile(path string) (PolicyList, error)

NewFromFile attempts to create a policy list from the given file.

TODO: Have policies be created via an API call and stored in REST storage.

func (PolicyList) Authorize

func (pl PolicyList) Authorize(a authorizer.Attributes) (authorizer.Decision, string, error)

Authorize implements authorizer.Authorize

func (PolicyList) RulesFor

func (pl PolicyList) RulesFor(user user.Info, namespace string) ([]authorizer.ResourceRuleInfo, []authorizer.NonResourceRuleInfo, bool, error)

RulesFor returns rules for the given user and namespace.