listwatch

Documentation

Index

• func IdenticalNamespaces(a, b map[string]struct{}) bool
• func IsAllNamespaces(namespaces map[string]struct{}) bool
• func MultiNamespaceListerWatcher(l log.Logger, allowedNamespaces, deniedNamespaces map[string]struct{}, ...) cache.ListerWatcher
• func NewFilteredUnprivilegedNamespaceListWatchFromClient(l log.Logger, c cache.Getter, ...) cache.ListerWatcher
• func NewUnprivilegedNamespaceListWatchFromClient(l log.Logger, c cache.Getter, ...) cache.ListerWatcher

Functions

func IdenticalNamespaces

func IdenticalNamespaces(a, b map[string]struct{}) bool

IdenticalNamespaces returns true if a and b are identical.

func IsAllNamespaces

func IsAllNamespaces(namespaces map[string]struct{}) bool

IsAllNamespaces checks if the given map of namespaces contains only v1.NamespaceAll.

func MultiNamespaceListerWatcher

func MultiNamespaceListerWatcher(l log.Logger, allowedNamespaces, deniedNamespaces map[string]struct{}, f func(string) cache.ListerWatcher) cache.ListerWatcher

MultiNamespaceListerWatcher takes allowed and denied namespaces and a cache.ListerWatcher generator func and returns a single cache.ListerWatcher capable of operating on multiple namespaces.

Allowed namespaces and denied namespaces are mutually exclusive. If allowed namespaces contain multiple items, the given denied namespaces have no effect. If the allowed namespaces includes exactly one entry with the value v1.NamespaceAll (empty string), the given denied namespaces are applied.

func NewFilteredUnprivilegedNamespaceListWatchFromClient

func NewFilteredUnprivilegedNamespaceListWatchFromClient(l log.Logger, c cache.Getter, allowedNamespaces, deniedNamespaces map[string]struct{}, optionsModifier func(options *metav1.ListOptions)) cache.ListerWatcher

NewFilteredUnprivilegedNamespaceListWatchFromClient mimics cache.NewUnprivilegedNamespaceListWatchFromClient. It allows for the creation of a cache.ListWatch for allowed or denied namespaces from a client that does not have `List` privileges.

If the given allowed namespaces contain only v1.NamespaceAll, then this function assumes that the client has List and Watch privileges and returns a regular cache.ListWatch, since there is no other way to get all namespaces.

The given allowed and denied namespaces are mutually exclusive. If allowed namespaces contain multiple items, the given denied namespaces have no effect. If the allowed namespaces includes exactly one entry with the value v1.NamespaceAll (empty string), the given denied namespaces are applied.

func NewUnprivilegedNamespaceListWatchFromClient

func NewUnprivilegedNamespaceListWatchFromClient(l log.Logger, c cache.Getter, allowedNamespaces, deniedNamespaces map[string]struct{}, fieldSelector fields.Selector) cache.ListerWatcher

NewUnprivilegedNamespaceListWatchFromClient mimics cache.NewListWatchFromClient. It allows for the creation of a cache.ListWatch for namespaces from a client that does not have `List` privileges. If the slice of namespaces contains only v1.NamespaceAll, then this func assumes that the client has List and Watch privileges and returns a regular cache.ListWatch, since there is no other way to get all namespaces.

The allowed namespaces and denied namespaces are mutually exclusive. See NewFilteredUnprivilegedNamespaceListWatchFromClient for a description on how they are applied.