accesscontroller

Documentation

Index

• func FilterAdapter(controller AccessController) cache.ObjectFilter
• type AccessControlledResource
• type AccessController
  • func NewAllowAllAccessController() AccessController
  • func NewKubernetesRBACAccessController(clientSet kubernetes.Interface, existingState interface{}) AccessController

Functions

func FilterAdapter

func FilterAdapter(controller AccessController) cache.ObjectFilter

Types

type AccessControlledResource

type AccessControlledResource interface {
	GetControllingResourceAttributes() *authv1.ResourceAttributes
}

type AccessController

type AccessController interface {
	CanRead(obj interface{}) (bool, error)
	ViewFilter() cache.ObjectFilter
	GetState() (bool, interface{})
}

Access controllers make decisions concerning access to objects. An instance must not be shared between threads.

func NewAllowAllAccessController

func NewAllowAllAccessController() AccessController

func NewKubernetesRBACAccessController

func NewKubernetesRBACAccessController(clientSet kubernetes.Interface, existingState interface{}) AccessController

Creates a RBAC-based access controller with the given authentication state. The authentication state may be nil or that returned by the GetState method of a previous instance.