localsubjectaccessreview

Documentation

Index

• type REST
  • func NewREST(clusterSARRegistry subjectaccessreview.Registry) *REST
  • func (r *REST) Create(ctx apirequest.Context, obj runtime.Object, _ bool) (runtime.Object, error)
  • func (r *REST) New() runtime.Object
• type Registry
  • func NewRegistry(s Storage) Registry
• type Storage

Types

type REST

type REST struct {
	// contains filtered or unexported fields
}

REST implements the RESTStorage interface in terms of an Registry.

func NewREST

func NewREST(clusterSARRegistry subjectaccessreview.Registry) *REST

func (*REST) Create

func (r *REST) Create(ctx apirequest.Context, obj runtime.Object, _ bool) (runtime.Object, error)

Create transforms a LocalSAR into an ClusterSAR that is requesting a namespace. That collapses the code paths. LocalSubjectAccessReview exists to allow clean expression of policy.

func (*REST) New

func (r *REST) New() runtime.Object

type Registry

type Registry interface {
	CreateLocalSubjectAccessReview(ctx apirequest.Context, subjectAccessReview *api.LocalSubjectAccessReview) (*api.SubjectAccessReviewResponse, error)
}

func NewRegistry

func NewRegistry(s Storage) Registry

type Storage

type Storage interface {
	Create(ctx apirequest.Context, obj runtime.Object) (runtime.Object, error)
}