rbac

Documentation

Index

• Constants
• type ImmutableClusterRoleBindingError
  • func (i ImmutableClusterRoleBindingError) Error() string
• type Manager
  • func (r *Manager) EnsureClusterRole(roleName string) (err error)
  • func (r *Manager) EnsureClusterRoleBinding() (err error)
  • func (r *Manager) InjectClient(c client.Client) error
  • func (r *Manager) Reconcile(ctx context.Context, request reconcile.Request) (res reconcile.Result, err error)
  • func (r *Manager) SetupWithManager(mgr ctrl.Manager) (err error)
  • func (r *Manager) Start(ctx context.Context) (err error)

Constants

const (
	ProvisionerRoleName = "capsule-namespace-provisioner"
	DeleterRoleName     = "capsule-namespace-deleter"
)

Types

type ImmutableClusterRoleBindingError

type ImmutableClusterRoleBindingError struct {
}

func (ImmutableClusterRoleBindingError) Error

func (i ImmutableClusterRoleBindingError) Error() string

type Manager

type Manager struct {
	CapsuleGroup string
	Log          logr.Logger
	Client       client.Client
}

func (*Manager) EnsureClusterRole

func (r *Manager) EnsureClusterRole(roleName string) (err error)

func (*Manager) EnsureClusterRoleBinding

func (r *Manager) EnsureClusterRoleBinding() (err error)

func (*Manager) InjectClient

func (r *Manager) InjectClient(c client.Client) error

Using the Client interface, required by the Runnable interface

func (*Manager) Reconcile

func (r *Manager) Reconcile(ctx context.Context, request reconcile.Request) (res reconcile.Result, err error)

This reconcile function is serving both ClusterRole and ClusterRoleBinding: that's ok, we're watching for multiple Resource kinds and we're just interested to the ones with the said name since they're bounded together.

func (*Manager) SetupWithManager

func (r *Manager) SetupWithManager(mgr ctrl.Manager) (err error)

func (*Manager) Start

func (r *Manager) Start(ctx context.Context) (err error)

This is the Runnable function that is triggered upon Manager start-up to perform the first RBAC reconciliation since we're not creating empty CR and CRB upon Capsule installation: it's a run-once task, since the reconciliation is handled by the Reconciler implemented interface.