lib

Documentation

Index

• Variables
• func AuthErr(statusCode int, message string) authErr
• type SubjectAuthorizer
  • func NewSubjectAuthorizer(client kubernetes.Interface) *SubjectAuthorizer
  • func (s *SubjectAuthorizer) AuthorizeSubject(ctx context.Context, user authnv1.UserInfo, ...) (bool, error)
• type TokenAuthenticator
  • func NewTokenAuthenticator(client kubernetes.Interface) *TokenAuthenticator
  • func (t *TokenAuthenticator) AuthenticateFromHeader(ctx context.Context, authHeader string) (bool, authnv1.UserInfo, error)

Variables

var (
	ErrBadRequest      = AuthErr(http.StatusBadRequest, "bad request: invalid token format")
	ErrUnauthenticated = AuthErr(http.StatusUnauthorized, "bad request: unauthenticated")
	ErrInternalAuthN   = AuthErr(http.StatusInternalServerError, "internal error: failed to authenticate user")
	ErrInternalAuthZ   = AuthErr(http.StatusInternalServerError, "internal error: failed to authorize user")
)

Functions

func AuthErr

func AuthErr(statusCode int, message string) authErr

Types

type SubjectAuthorizer

type SubjectAuthorizer struct {
	// contains filtered or unexported fields
}

func NewSubjectAuthorizer

func NewSubjectAuthorizer(client kubernetes.Interface) *SubjectAuthorizer

NewSubjectAuthorizer creates a new authorizer with the provided Kubernetes client.

func (*SubjectAuthorizer) AuthorizeSubject

func (s *SubjectAuthorizer) AuthorizeSubject(ctx context.Context, user authnv1.UserInfo, namespace, group, resource, verb string) (bool, error)

AuthorizeSubject checks if the user is allowed to perform the provided action

type TokenAuthenticator

type TokenAuthenticator struct {
	// contains filtered or unexported fields
}

func NewTokenAuthenticator

func NewTokenAuthenticator(client kubernetes.Interface) *TokenAuthenticator

func (*TokenAuthenticator) AuthenticateFromHeader

func (t *TokenAuthenticator) AuthenticateFromHeader(ctx context.Context, authHeader string) (bool, authnv1.UserInfo, error)