rbac

Documentation

Index

• type Error
  • func NewRBACError(message string) Error
• type Matcher
  • func NewMatcher() Matcher
• type Validator
  • func NewValidator(client client.Client, log *logrus.Entry, matcher Matcher) Validator

Types

type Error

type Error interface {
	error
	OrigError() error
}

Error is a custom rbac error type

func NewRBACError

func NewRBACError(message string) Error

NewRBACError is a constructor for rbac error

type Matcher

type Matcher interface {
	MatchPolicyRules(actual, requested []rbacv1.PolicyRule) (matches bool)
	MatchPolicyRule(actual, requested *rbacv1.PolicyRule) (matches bool)
	MatchRoleBindingsSubjects(roleBindings []rbacv1.RoleBinding, subjectName, namespace string) (matchesRoleBindings []rbacv1.RoleBinding)
	MatchRoleBindingSubjects(roleBinding *rbacv1.RoleBinding, subjectName, namespace string) (matches bool)
	MatchRoles(roles []rbacv1.Role, names []string) (matchesRoles []rbacv1.Role)
}

Matcher is a helper for matching actual resources with requested ones

func NewMatcher

func NewMatcher() Matcher

NewMatcher is a constructor for matcher

type Validator

type Validator interface {
	ValidateServiceAccountIsBound(ctx context.Context, rules *models.ServiceAccountIsRoleBoundData) error
}

Validator is rbac validator for checking predefined rule (e.g. service account is bound to role with certain policy rules)

func NewValidator

func NewValidator(client client.Client, log *logrus.Entry, matcher Matcher) Validator

NewValidator is a constructor for rbac validator