authorizationsync

Documentation

Index

• func NormalizePolicyRules(rules []rbac.PolicyRule)
• type OriginClusterRoleBindingToRBACClusterRoleBindingController
  • func NewOriginToRBACClusterRoleBindingController(rbacClusterRoleBindingInformer rbacinformers.ClusterRoleBindingInformer, ...) *OriginClusterRoleBindingToRBACClusterRoleBindingController
  • func (c *OriginClusterRoleBindingToRBACClusterRoleBindingController) Run(workers int, stopCh <-chan struct{})
• type OriginClusterRoleToRBACClusterRoleController
  • func NewOriginToRBACClusterRoleController(rbacClusterRoleInformer rbacinformers.ClusterRoleInformer, ...) *OriginClusterRoleToRBACClusterRoleController
  • func (c *OriginClusterRoleToRBACClusterRoleController) Run(workers int, stopCh <-chan struct{})
• type OriginRoleBindingToRBACRoleBindingController
  • func NewOriginToRBACRoleBindingController(rbacRoleBindingInformer rbacinformers.RoleBindingInformer, ...) *OriginRoleBindingToRBACRoleBindingController
  • func (c *OriginRoleBindingToRBACRoleBindingController) Run(workers int, stopCh <-chan struct{})
• type OriginRoleToRBACRoleController
  • func NewOriginToRBACRoleController(rbacRoleInformer rbacinformers.RoleInformer, ...) *OriginRoleToRBACRoleController
  • func (c *OriginRoleToRBACRoleController) Run(workers int, stopCh <-chan struct{})

Functions

func NormalizePolicyRules

func NormalizePolicyRules(rules []rbac.PolicyRule)

NormalizePolicyRules mutates the given rules and lowercases verbs, resources and API groups. Origin's authorizer is case-insensitive to these fields but Kubernetes RBAC is not. Thus normalizing the Origin rules before persisting them as RBAC will allow authorization to continue to work.

Types

type OriginClusterRoleBindingToRBACClusterRoleBindingController

type OriginClusterRoleBindingToRBACClusterRoleBindingController struct {
	// contains filtered or unexported fields
}

func NewOriginToRBACClusterRoleBindingController

func NewOriginToRBACClusterRoleBindingController(rbacClusterRoleBindingInformer rbacinformers.ClusterRoleBindingInformer, originClusterPolicyBindingInformer origininformers.ClusterPolicyBindingInformer, rbacClient rbacclient.ClusterRoleBindingsGetter) *OriginClusterRoleBindingToRBACClusterRoleBindingController

func (*OriginClusterRoleBindingToRBACClusterRoleBindingController) Run

func (c *OriginClusterRoleBindingToRBACClusterRoleBindingController) Run(workers int, stopCh <-chan struct{})

type OriginClusterRoleToRBACClusterRoleController

type OriginClusterRoleToRBACClusterRoleController struct {
	// contains filtered or unexported fields
}

func NewOriginToRBACClusterRoleController

func NewOriginToRBACClusterRoleController(rbacClusterRoleInformer rbacinformers.ClusterRoleInformer, originClusterPolicyInformer origininformers.ClusterPolicyInformer, rbacClient rbacclient.ClusterRolesGetter) *OriginClusterRoleToRBACClusterRoleController

func (*OriginClusterRoleToRBACClusterRoleController) Run

func (c *OriginClusterRoleToRBACClusterRoleController) Run(workers int, stopCh <-chan struct{})

type OriginRoleBindingToRBACRoleBindingController

type OriginRoleBindingToRBACRoleBindingController struct {
	// contains filtered or unexported fields
}

func NewOriginToRBACRoleBindingController

func NewOriginToRBACRoleBindingController(rbacRoleBindingInformer rbacinformers.RoleBindingInformer, originPolicyBindingInformer origininformers.PolicyBindingInformer, rbacClient rbacclient.RoleBindingsGetter) *OriginRoleBindingToRBACRoleBindingController

func (*OriginRoleBindingToRBACRoleBindingController) Run

func (c *OriginRoleBindingToRBACRoleBindingController) Run(workers int, stopCh <-chan struct{})

type OriginRoleToRBACRoleController

type OriginRoleToRBACRoleController struct {
	// contains filtered or unexported fields
}

func NewOriginToRBACRoleController

func NewOriginToRBACRoleController(rbacRoleInformer rbacinformers.RoleInformer, originPolicyInformer origininformers.PolicyInformer, rbacClient rbacclient.RolesGetter) *OriginRoleToRBACRoleController

func (*OriginRoleToRBACRoleController) Run

func (c *OriginRoleToRBACRoleController) Run(workers int, stopCh <-chan struct{})