role

Documentation

Index

• Variables
• func GetAttrs(obj runtime.Object) (labels.Set, fields.Set, error)
• func Matcher(label labels.Selector, field fields.Selector) kstorage.SelectionPredicate
• type Registry
  • func NewRegistry(s Storage) Registry
• type Storage

Variables

var ClusterStrategy = strategy{false, kapi.Scheme}

Strategy is the default logic that applies when creating and updating Role objects.

var LocalStrategy = strategy{true, kapi.Scheme}

Functions

func GetAttrs

func GetAttrs(obj runtime.Object) (labels.Set, fields.Set, error)

func Matcher

func Matcher(label labels.Selector, field fields.Selector) kstorage.SelectionPredicate

Matcher returns a generic matcher for a given label and field selector.

Types

type Registry

type Registry interface {
	// ListRoles obtains list of policyRoles that match a selector.
	ListRoles(ctx apirequest.Context, options *metainternal.ListOptions) (*authorizationapi.RoleList, error)
	// GetRole retrieves a specific policyRole.
	GetRole(ctx apirequest.Context, id string, options *metav1.GetOptions) (*authorizationapi.Role, error)
	// CreateRole creates a new policyRole.
	CreateRole(ctx apirequest.Context, policyRole *authorizationapi.Role) (*authorizationapi.Role, error)
	// UpdateRole updates a policyRole.
	UpdateRole(ctx apirequest.Context, policyRole *authorizationapi.Role) (*authorizationapi.Role, bool, error)
	// DeleteRole deletes a policyRole.
	DeleteRole(ctx apirequest.Context, id string) error
}

Registry is an interface for things that know how to store Roles.

func NewRegistry

func NewRegistry(s Storage) Registry

NewRegistry returns a new Registry interface for the given Storage. Any mismatched types will panic.

type Storage

type Storage interface {
	rest.Getter
	rest.Lister
	rest.CreaterUpdater
	rest.GracefulDeleter

	// CreateRoleWithEscalation creates a new policyRole.  Skipping the escalation check should only be done during bootstrapping procedures where no users are currently bound.
	CreateRoleWithEscalation(ctx apirequest.Context, policyRole *authorizationapi.Role) (*authorizationapi.Role, error)
	// UpdateRoleWithEscalation updates a policyRole.  Skipping the escalation check should only be done during bootstrapping procedures where no users are currently bound.
	UpdateRoleWithEscalation(ctx apirequest.Context, policyRole *authorizationapi.Role) (*authorizationapi.Role, bool, error)
}

Storage is an interface for a standard REST Storage backend