auth

Documentation

Index

• func CanI(ctx context.Context, verb, resource, namespace, name string) (bool, error)
• func DefaultClientForAuthorization(authorization string) (*rest.Config, versioned.Interface, kubernetes.Interface, error)
• func GetClaims(ctx context.Context) *types.Claims
• func GetKubeClient(ctx context.Context) kubernetes.Interface
• func GetWfClient(ctx context.Context) versioned.Interface
• type ClientForAuthorization
• type ContextKey
• type Gatekeeper
  • func NewGatekeeper(modes Modes, wfClient versioned.Interface, kubeClient kubernetes.Interface, ...) (Gatekeeper, error)
• type Mode
• type Modes
  • func (m Modes) Add(value string) error
  • func (m Modes) GetMode(authorisation string) (Mode, bool)

Functions

func CanI

func CanI(ctx context.Context, verb, resource, namespace, name string) (bool, error)

func DefaultClientForAuthorization

func DefaultClientForAuthorization(authorization string) (*rest.Config, versioned.Interface, kubernetes.Interface, error)

func GetClaims

func GetClaims(ctx context.Context) *types.Claims

func GetKubeClient

func GetKubeClient(ctx context.Context) kubernetes.Interface

func GetWfClient

func GetWfClient(ctx context.Context) versioned.Interface

Types

type ClientForAuthorization

type ClientForAuthorization func(authorization string) (*rest.Config, versioned.Interface, kubernetes.Interface, error)

type ContextKey

type ContextKey string

const (
	WfKey     ContextKey = "versioned.Interface"
	KubeKey   ContextKey = "kubernetes.Interface"
	ClaimsKey ContextKey = "types.Claims"
)

type Gatekeeper

type Gatekeeper interface {
	Context(ctx context.Context) (context.Context, error)
	UnaryServerInterceptor() grpc.UnaryServerInterceptor
	StreamServerInterceptor() grpc.StreamServerInterceptor
}

func NewGatekeeper

func NewGatekeeper(modes Modes, wfClient versioned.Interface, kubeClient kubernetes.Interface, restConfig *rest.Config, ssoIf sso.Interface, clientForAuthorization ClientForAuthorization, namespace string) (Gatekeeper, error)

type Mode

type Mode string

const (
	Client Mode = "client"
	Server Mode = "server"
	SSO    Mode = "sso"
)

type Modes

type Modes map[Mode]bool

func (Modes) Add

func (m Modes) Add(value string) error

func (Modes) GetMode

func (m Modes) GetMode(authorisation string) (Mode, bool)