authorizer

Documentation

Index

• Constants
• func IsPersonalAccessReviewFromSAR(sar *authorizationapi.SubjectAccessReview) bool
• func NewAuthorizer(delegate kauthorizer.Authorizer, forbiddenMessageMaker ForbiddenMessageMaker) authorizer.Authorizer
• func NewBrowserSafeRequestInfoResolver(contextMapper apirequest.RequestContextMapper, authenticatedGroups sets.String, ...) apirequest.RequestInfoResolver
• func NewPersonalSARRequestInfoResolver(infoFactory apirequest.RequestInfoResolver) apirequest.RequestInfoResolver
• func NewProjectRequestInfoResolver(infoFactory apirequest.RequestInfoResolver) apirequest.RequestInfoResolver
• type ForbiddenMessageMaker
• type ForbiddenMessageResolver
  • func NewForbiddenMessageResolver(projectRequestForbiddenTemplate string) *ForbiddenMessageResolver
  • func (m *ForbiddenMessageResolver) MakeMessage(attrs authorizer.Attributes) (string, error)
• type SubjectLocator
  • func NewSubjectLocator(delegate authorizerrbac.SubjectLocator) SubjectLocator

Constants

const DefaultProjectRequestForbidden = "You may not request a new project via this API."

Functions

func IsPersonalAccessReviewFromSAR

func IsPersonalAccessReviewFromSAR(sar *authorizationapi.SubjectAccessReview) bool

IsPersonalAccessReviewFromSAR this variant handles the case where we have an SAR

func NewAuthorizer

func NewAuthorizer(delegate kauthorizer.Authorizer, forbiddenMessageMaker ForbiddenMessageMaker) authorizer.Authorizer

func NewBrowserSafeRequestInfoResolver

func NewBrowserSafeRequestInfoResolver(contextMapper apirequest.RequestContextMapper, authenticatedGroups sets.String, infoFactory apirequest.RequestInfoResolver) apirequest.RequestInfoResolver

func NewPersonalSARRequestInfoResolver

func NewPersonalSARRequestInfoResolver(infoFactory apirequest.RequestInfoResolver) apirequest.RequestInfoResolver

func NewProjectRequestInfoResolver

func NewProjectRequestInfoResolver(infoFactory apirequest.RequestInfoResolver) apirequest.RequestInfoResolver

Types

type ForbiddenMessageMaker

type ForbiddenMessageMaker interface {
	MakeMessage(attrs authorizer.Attributes) (string, error)
}

ForbiddenMessageMaker creates a forbidden message from Attributes

type ForbiddenMessageResolver

type ForbiddenMessageResolver struct {
	// contains filtered or unexported fields
}

func NewForbiddenMessageResolver

func NewForbiddenMessageResolver(projectRequestForbiddenTemplate string) *ForbiddenMessageResolver

func (*ForbiddenMessageResolver) MakeMessage

func (m *ForbiddenMessageResolver) MakeMessage(attrs authorizer.Attributes) (string, error)

type SubjectLocator

type SubjectLocator interface {
	GetAllowedSubjects(attributes authorizer.Attributes) (sets.String, sets.String, error)
}

func NewSubjectLocator

func NewSubjectLocator(delegate authorizerrbac.SubjectLocator) SubjectLocator