policybased

Documentation

Index

• func NewEmptyPolicy(namespace string) *authorizationapi.Policy
• func NewVirtualStorage(policyRegistry policyregistry.Registry, ...) roleregistry.Storage
• type VirtualStorage
  • func (m *VirtualStorage) Create(ctx apirequest.Context, obj runtime.Object, _ bool) (runtime.Object, error)
  • func (m *VirtualStorage) CreateRoleWithEscalation(ctx apirequest.Context, obj *authorizationapi.Role) (*authorizationapi.Role, error)
  • func (m *VirtualStorage) Delete(ctx apirequest.Context, name string, options *metav1.DeleteOptions) (runtime.Object, bool, error)
  • func (m *VirtualStorage) EnsurePolicy(ctx apirequest.Context) (*authorizationapi.Policy, error)
  • func (m *VirtualStorage) Get(ctx apirequest.Context, name string, options *metav1.GetOptions) (runtime.Object, error)
  • func (m *VirtualStorage) List(ctx apirequest.Context, options *metainternal.ListOptions) (runtime.Object, error)
  • func (m *VirtualStorage) New() runtime.Object
  • func (m *VirtualStorage) NewList() runtime.Object
  • func (m *VirtualStorage) Update(ctx apirequest.Context, name string, objInfo rest.UpdatedObjectInfo) (runtime.Object, bool, error)
  • func (m *VirtualStorage) UpdateRoleWithEscalation(ctx apirequest.Context, obj *authorizationapi.Role) (*authorizationapi.Role, bool, error)

Functions

func NewEmptyPolicy

func NewEmptyPolicy(namespace string) *authorizationapi.Policy

func NewVirtualStorage

func NewVirtualStorage(policyRegistry policyregistry.Registry, liveRuleResolver, cachedRuleResolver rulevalidation.AuthorizationRuleResolver) roleregistry.Storage

NewVirtualStorage creates a new REST for policies.

Types

type VirtualStorage

type VirtualStorage struct {
	PolicyStorage policyregistry.Registry

	RuleResolver       rulevalidation.AuthorizationRuleResolver
	CachedRuleResolver rulevalidation.AuthorizationRuleResolver

	CreateStrategy rest.RESTCreateStrategy
	UpdateStrategy rest.RESTUpdateStrategy
	Resource       schema.GroupResource
}

func (*VirtualStorage) Create

func (m *VirtualStorage) Create(ctx apirequest.Context, obj runtime.Object, _ bool) (runtime.Object, error)

func (*VirtualStorage) CreateRoleWithEscalation

func (m *VirtualStorage) CreateRoleWithEscalation(ctx apirequest.Context, obj *authorizationapi.Role) (*authorizationapi.Role, error)

func (*VirtualStorage) Delete

func (m *VirtualStorage) Delete(ctx apirequest.Context, name string, options *metav1.DeleteOptions) (runtime.Object, bool, error)

func (*VirtualStorage) EnsurePolicy

func (m *VirtualStorage) EnsurePolicy(ctx apirequest.Context) (*authorizationapi.Policy, error)

EnsurePolicy returns the policy object for the specified namespace. If one does not exist, it is created for you. Permission to create, update, or delete roles in a namespace implies the ability to create a Policy object itself.

func (*VirtualStorage) Get

func (m *VirtualStorage) Get(ctx apirequest.Context, name string, options *metav1.GetOptions) (runtime.Object, error)

func (*VirtualStorage) List

func (m *VirtualStorage) List(ctx apirequest.Context, options *metainternal.ListOptions) (runtime.Object, error)

func (*VirtualStorage) New

func (m *VirtualStorage) New() runtime.Object

func (*VirtualStorage) NewList

func (m *VirtualStorage) NewList() runtime.Object

func (*VirtualStorage) Update

func (m *VirtualStorage) Update(ctx apirequest.Context, name string, objInfo rest.UpdatedObjectInfo) (runtime.Object, bool, error)

func (*VirtualStorage) UpdateRoleWithEscalation

func (m *VirtualStorage) UpdateRoleWithEscalation(ctx apirequest.Context, obj *authorizationapi.Role) (*authorizationapi.Role, bool, error)