authorizer

Documentation

Index

• Constants
• type AuthorizationConfig
  • func (config AuthorizationConfig) New() (authorizer.Authorizer, error)

Constants

const (
	ModeAlwaysAllow string = "AlwaysAllow"
	ModeAlwaysDeny  string = "AlwaysDeny"
	ModeABAC        string = "ABAC"
	ModeWebhook     string = "Webhook"
	ModeRBAC        string = "RBAC"
)

Types

type AuthorizationConfig

type AuthorizationConfig struct {
	AuthorizationModes []string

	// Path to an ABAC policy file.
	PolicyFile string

	// Kubeconfig file for Webhook authorization plugin.
	WebhookConfigFile string
	// TTL for caching of authorized responses from the webhook server.
	WebhookCacheAuthorizedTTL time.Duration
	// TTL for caching of unauthorized responses from the webhook server.
	WebhookCacheUnauthorizedTTL time.Duration

	// User which can bootstrap role policies
	RBACSuperUser string

	InformerFactory informers.SharedInformerFactory
}

func (AuthorizationConfig) New

func (config AuthorizationConfig) New() (authorizer.Authorizer, error)

New returns the right sort of union of multiple authorizer.Authorizer objects based on the authorizationMode or an error.