util

Documentation

Index

• func AddUserToSAR(user user.Info, sar *authorization.SubjectAccessReview) *authorization.SubjectAccessReview
• func Authorize(sarClient internalversion.SubjectAccessReviewInterface, user user.Info, ...) error
• func BuildRBACSubjects(users, groups []string) []rbacv1.Subject
• func RBACSubjectsToUsersAndGroups(subjects []rbacv1.Subject, defaultNamespace string) (users []string, groups []string)

Functions

func AddUserToSAR

func AddUserToSAR(user user.Info, sar *authorization.SubjectAccessReview) *authorization.SubjectAccessReview

AddUserToSAR adds the requisite user information to a SubjectAccessReview. It returns the modified SubjectAccessReview.

func Authorize

func Authorize(sarClient internalversion.SubjectAccessReviewInterface, user user.Info, resourceAttributes *authorization.ResourceAttributes) error

Authorize verifies that a given user is permitted to carry out a given action. If this cannot be determined, or if the user is not permitted, an error is returned.

func BuildRBACSubjects

func BuildRBACSubjects(users, groups []string) []rbacv1.Subject

func RBACSubjectsToUsersAndGroups

func RBACSubjectsToUsersAndGroups(subjects []rbacv1.Subject, defaultNamespace string) (users []string, groups []string)