awspermissions

Documentation

Index

• Constants
• Variables
• func AWSAnnotations(ctx context.Context, c kclient.Client, app *v1.AppInstance, ...) (map[string]string, error)
• func GetAWSRoles() []rbacv1.ClusterRole

Constants

const (
	AWSAPIGroup          = "aws.acorn.io"
	AWSRoleAPIGroup      = "role.aws.acorn.io"
	AWSRoleHash          = "role.aws.acorn.io/hash"
	AssumeVerb           = "assume"
	AssumeRoleAnnotation = "eks.amazonaws.com/role-arn"

	AWSAdminRole = "acorn:aws:admin"
)

Variables

var (
	AWSRoles = map[string][]rbacv1.PolicyRule{
		AWSAdminRole: {
			{
				APIGroups: []string{AWSAPIGroup, AWSRoleAPIGroup},
				Verbs:     []string{"*"},
				Resources: []string{"*"},
			},
		},
	}
)

Functions

func AWSAnnotations

func AWSAnnotations(ctx context.Context, c kclient.Client, app *v1.AppInstance, permissions v1.Permissions, serviceName string) (map[string]string, error)

func GetAWSRoles

func GetAWSRoles() []rbacv1.ClusterRole