v1alpha1

package
v1.1.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 27, 2018 License: Apache-2.0 Imports: 9 Imported by: 29

Documentation

Overview

Package v1alpha1 is a generated protocol buffer package.

It is generated from these files:

k8s.io/api/rbac/v1alpha1/generated.proto

It has these top-level messages:

AggregationRule
ClusterRole
ClusterRoleBinding
ClusterRoleBindingList
ClusterRoleList
PolicyRule
Role
RoleBinding
RoleBindingList
RoleList
RoleRef
Subject

Index

Constants

This section is empty.

Variables

View Source
var (
	ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated   = fmt.Errorf("proto: integer overflow")
)

Functions

This section is empty.

Types

type AggregationRule added in v1.0.0

type AggregationRule struct {
	// ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules.
	// If any of the selectors match, then the ClusterRole's permissions will be added
	// +optional
	ClusterRoleSelectors []*k8s_io_apimachinery_pkg_apis_meta_v1.LabelSelector `protobuf:"bytes,1,rep,name=clusterRoleSelectors" json:"clusterRoleSelectors,omitempty"`
	XXX_unrecognized     []byte                                                `json:"-"`
}

AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

func (*AggregationRule) Descriptor added in v1.0.0

func (*AggregationRule) Descriptor() ([]byte, []int)

func (*AggregationRule) GetClusterRoleSelectors added in v1.0.0

func (m *AggregationRule) GetClusterRoleSelectors() []*k8s_io_apimachinery_pkg_apis_meta_v1.LabelSelector

func (*AggregationRule) Marshal added in v1.0.0

func (m *AggregationRule) Marshal() (dAtA []byte, err error)

func (*AggregationRule) MarshalTo added in v1.0.0

func (m *AggregationRule) MarshalTo(dAtA []byte) (int, error)

func (*AggregationRule) ProtoMessage added in v1.0.0

func (*AggregationRule) ProtoMessage()

func (*AggregationRule) Reset added in v1.0.0

func (m *AggregationRule) Reset()

func (*AggregationRule) Size added in v1.0.0

func (m *AggregationRule) Size() (n int)

func (*AggregationRule) String added in v1.0.0

func (m *AggregationRule) String() string

func (*AggregationRule) Unmarshal added in v1.0.0

func (m *AggregationRule) Unmarshal(dAtA []byte) error

type ClusterRole

type ClusterRole struct {
	// Standard object's metadata.
	// +optional
	Metadata *k8s_io_apimachinery_pkg_apis_meta_v1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"`
	// Rules holds all the PolicyRules for this ClusterRole
	Rules []*PolicyRule `protobuf:"bytes,2,rep,name=rules" json:"rules,omitempty"`
	// AggregationRule is an optional field that describes how to build the Rules for this ClusterRole.
	// If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be
	// stomped by the controller.
	// +optional
	AggregationRule  *AggregationRule `protobuf:"bytes,3,opt,name=aggregationRule" json:"aggregationRule,omitempty"`
	XXX_unrecognized []byte           `json:"-"`
}

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.

func (*ClusterRole) Descriptor

func (*ClusterRole) Descriptor() ([]byte, []int)

func (*ClusterRole) GetAggregationRule added in v1.0.0

func (m *ClusterRole) GetAggregationRule() *AggregationRule

func (*ClusterRole) GetMetadata

func (*ClusterRole) GetRules

func (m *ClusterRole) GetRules() []*PolicyRule

func (*ClusterRole) Marshal

func (m *ClusterRole) Marshal() (dAtA []byte, err error)

func (*ClusterRole) MarshalTo

func (m *ClusterRole) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRole) ProtoMessage

func (*ClusterRole) ProtoMessage()

func (*ClusterRole) Reset

func (m *ClusterRole) Reset()

func (*ClusterRole) Size

func (m *ClusterRole) Size() (n int)

func (*ClusterRole) String

func (m *ClusterRole) String() string

func (*ClusterRole) Unmarshal

func (m *ClusterRole) Unmarshal(dAtA []byte) error

type ClusterRoleBinding

type ClusterRoleBinding struct {
	// Standard object's metadata.
	// +optional
	Metadata *k8s_io_apimachinery_pkg_apis_meta_v1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"`
	// Subjects holds references to the objects the role applies to.
	Subjects []*Subject `protobuf:"bytes,2,rep,name=subjects" json:"subjects,omitempty"`
	// RoleRef can only reference a ClusterRole in the global namespace.
	// If the RoleRef cannot be resolved, the Authorizer must return an error.
	RoleRef          *RoleRef `protobuf:"bytes,3,opt,name=roleRef" json:"roleRef,omitempty"`
	XXX_unrecognized []byte   `json:"-"`
}

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.

func (*ClusterRoleBinding) Descriptor

func (*ClusterRoleBinding) Descriptor() ([]byte, []int)

func (*ClusterRoleBinding) GetMetadata

func (*ClusterRoleBinding) GetRoleRef

func (m *ClusterRoleBinding) GetRoleRef() *RoleRef

func (*ClusterRoleBinding) GetSubjects

func (m *ClusterRoleBinding) GetSubjects() []*Subject

func (*ClusterRoleBinding) Marshal

func (m *ClusterRoleBinding) Marshal() (dAtA []byte, err error)

func (*ClusterRoleBinding) MarshalTo

func (m *ClusterRoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleBinding) ProtoMessage

func (*ClusterRoleBinding) ProtoMessage()

func (*ClusterRoleBinding) Reset

func (m *ClusterRoleBinding) Reset()

func (*ClusterRoleBinding) Size

func (m *ClusterRoleBinding) Size() (n int)

func (*ClusterRoleBinding) String

func (m *ClusterRoleBinding) String() string

func (*ClusterRoleBinding) Unmarshal

func (m *ClusterRoleBinding) Unmarshal(dAtA []byte) error

type ClusterRoleBindingList

type ClusterRoleBindingList struct {
	// Standard object's metadata.
	// +optional
	Metadata *k8s_io_apimachinery_pkg_apis_meta_v1.ListMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"`
	// Items is a list of ClusterRoleBindings
	Items            []*ClusterRoleBinding `protobuf:"bytes,2,rep,name=items" json:"items,omitempty"`
	XXX_unrecognized []byte                `json:"-"`
}

ClusterRoleBindingList is a collection of ClusterRoleBindings

func (*ClusterRoleBindingList) Descriptor

func (*ClusterRoleBindingList) Descriptor() ([]byte, []int)

func (*ClusterRoleBindingList) GetItems

func (m *ClusterRoleBindingList) GetItems() []*ClusterRoleBinding

func (*ClusterRoleBindingList) GetMetadata

func (*ClusterRoleBindingList) Marshal

func (m *ClusterRoleBindingList) Marshal() (dAtA []byte, err error)

func (*ClusterRoleBindingList) MarshalTo

func (m *ClusterRoleBindingList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleBindingList) ProtoMessage

func (*ClusterRoleBindingList) ProtoMessage()

func (*ClusterRoleBindingList) Reset

func (m *ClusterRoleBindingList) Reset()

func (*ClusterRoleBindingList) Size

func (m *ClusterRoleBindingList) Size() (n int)

func (*ClusterRoleBindingList) String

func (m *ClusterRoleBindingList) String() string

func (*ClusterRoleBindingList) Unmarshal

func (m *ClusterRoleBindingList) Unmarshal(dAtA []byte) error

type ClusterRoleList

type ClusterRoleList struct {
	// Standard object's metadata.
	// +optional
	Metadata *k8s_io_apimachinery_pkg_apis_meta_v1.ListMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"`
	// Items is a list of ClusterRoles
	Items            []*ClusterRole `protobuf:"bytes,2,rep,name=items" json:"items,omitempty"`
	XXX_unrecognized []byte         `json:"-"`
}

ClusterRoleList is a collection of ClusterRoles

func (*ClusterRoleList) Descriptor

func (*ClusterRoleList) Descriptor() ([]byte, []int)

func (*ClusterRoleList) GetItems

func (m *ClusterRoleList) GetItems() []*ClusterRole

func (*ClusterRoleList) GetMetadata

func (*ClusterRoleList) Marshal

func (m *ClusterRoleList) Marshal() (dAtA []byte, err error)

func (*ClusterRoleList) MarshalTo

func (m *ClusterRoleList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleList) ProtoMessage

func (*ClusterRoleList) ProtoMessage()

func (*ClusterRoleList) Reset

func (m *ClusterRoleList) Reset()

func (*ClusterRoleList) Size

func (m *ClusterRoleList) Size() (n int)

func (*ClusterRoleList) String

func (m *ClusterRoleList) String() string

func (*ClusterRoleList) Unmarshal

func (m *ClusterRoleList) Unmarshal(dAtA []byte) error

type PolicyRule

type PolicyRule struct {
	// Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule.  VerbAll represents all kinds.
	Verbs []string `protobuf:"bytes,1,rep,name=verbs" json:"verbs,omitempty"`
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of
	// the enumerated resources in any API group will be allowed.
	// +optional
	ApiGroups []string `protobuf:"bytes,3,rep,name=apiGroups" json:"apiGroups,omitempty"`
	// Resources is a list of resources this rule applies to.  ResourceAll represents all resources.
	// +optional
	Resources []string `protobuf:"bytes,4,rep,name=resources" json:"resources,omitempty"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
	// +optional
	ResourceNames []string `protobuf:"bytes,5,rep,name=resourceNames" json:"resourceNames,omitempty"`
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path
	// This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.
	// Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding.
	// Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
	// +optional
	NonResourceURLs  []string `protobuf:"bytes,6,rep,name=nonResourceURLs" json:"nonResourceURLs,omitempty"`
	XXX_unrecognized []byte   `json:"-"`
}

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

func (*PolicyRule) Descriptor

func (*PolicyRule) Descriptor() ([]byte, []int)

func (*PolicyRule) GetApiGroups

func (m *PolicyRule) GetApiGroups() []string

func (*PolicyRule) GetNonResourceURLs

func (m *PolicyRule) GetNonResourceURLs() []string

func (*PolicyRule) GetResourceNames

func (m *PolicyRule) GetResourceNames() []string

func (*PolicyRule) GetResources

func (m *PolicyRule) GetResources() []string

func (*PolicyRule) GetVerbs

func (m *PolicyRule) GetVerbs() []string

func (*PolicyRule) Marshal

func (m *PolicyRule) Marshal() (dAtA []byte, err error)

func (*PolicyRule) MarshalTo

func (m *PolicyRule) MarshalTo(dAtA []byte) (int, error)

func (*PolicyRule) ProtoMessage

func (*PolicyRule) ProtoMessage()

func (*PolicyRule) Reset

func (m *PolicyRule) Reset()

func (*PolicyRule) Size

func (m *PolicyRule) Size() (n int)

func (*PolicyRule) String

func (m *PolicyRule) String() string

func (*PolicyRule) Unmarshal

func (m *PolicyRule) Unmarshal(dAtA []byte) error

type Role

type Role struct {
	// Standard object's metadata.
	// +optional
	Metadata *k8s_io_apimachinery_pkg_apis_meta_v1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"`
	// Rules holds all the PolicyRules for this Role
	Rules            []*PolicyRule `protobuf:"bytes,2,rep,name=rules" json:"rules,omitempty"`
	XXX_unrecognized []byte        `json:"-"`
}

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.

func (*Role) Descriptor

func (*Role) Descriptor() ([]byte, []int)

func (*Role) GetMetadata

func (*Role) GetRules

func (m *Role) GetRules() []*PolicyRule

func (*Role) Marshal

func (m *Role) Marshal() (dAtA []byte, err error)

func (*Role) MarshalTo

func (m *Role) MarshalTo(dAtA []byte) (int, error)

func (*Role) ProtoMessage

func (*Role) ProtoMessage()

func (*Role) Reset

func (m *Role) Reset()

func (*Role) Size

func (m *Role) Size() (n int)

func (*Role) String

func (m *Role) String() string

func (*Role) Unmarshal

func (m *Role) Unmarshal(dAtA []byte) error

type RoleBinding

type RoleBinding struct {
	// Standard object's metadata.
	// +optional
	Metadata *k8s_io_apimachinery_pkg_apis_meta_v1.ObjectMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"`
	// Subjects holds references to the objects the role applies to.
	Subjects []*Subject `protobuf:"bytes,2,rep,name=subjects" json:"subjects,omitempty"`
	// RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace.
	// If the RoleRef cannot be resolved, the Authorizer must return an error.
	RoleRef          *RoleRef `protobuf:"bytes,3,opt,name=roleRef" json:"roleRef,omitempty"`
	XXX_unrecognized []byte   `json:"-"`
}

RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.

func (*RoleBinding) Descriptor

func (*RoleBinding) Descriptor() ([]byte, []int)

func (*RoleBinding) GetMetadata

func (*RoleBinding) GetRoleRef

func (m *RoleBinding) GetRoleRef() *RoleRef

func (*RoleBinding) GetSubjects

func (m *RoleBinding) GetSubjects() []*Subject

func (*RoleBinding) Marshal

func (m *RoleBinding) Marshal() (dAtA []byte, err error)

func (*RoleBinding) MarshalTo

func (m *RoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*RoleBinding) ProtoMessage

func (*RoleBinding) ProtoMessage()

func (*RoleBinding) Reset

func (m *RoleBinding) Reset()

func (*RoleBinding) Size

func (m *RoleBinding) Size() (n int)

func (*RoleBinding) String

func (m *RoleBinding) String() string

func (*RoleBinding) Unmarshal

func (m *RoleBinding) Unmarshal(dAtA []byte) error

type RoleBindingList

type RoleBindingList struct {
	// Standard object's metadata.
	// +optional
	Metadata *k8s_io_apimachinery_pkg_apis_meta_v1.ListMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"`
	// Items is a list of RoleBindings
	Items            []*RoleBinding `protobuf:"bytes,2,rep,name=items" json:"items,omitempty"`
	XXX_unrecognized []byte         `json:"-"`
}

RoleBindingList is a collection of RoleBindings

func (*RoleBindingList) Descriptor

func (*RoleBindingList) Descriptor() ([]byte, []int)

func (*RoleBindingList) GetItems

func (m *RoleBindingList) GetItems() []*RoleBinding

func (*RoleBindingList) GetMetadata

func (*RoleBindingList) Marshal

func (m *RoleBindingList) Marshal() (dAtA []byte, err error)

func (*RoleBindingList) MarshalTo

func (m *RoleBindingList) MarshalTo(dAtA []byte) (int, error)

func (*RoleBindingList) ProtoMessage

func (*RoleBindingList) ProtoMessage()

func (*RoleBindingList) Reset

func (m *RoleBindingList) Reset()

func (*RoleBindingList) Size

func (m *RoleBindingList) Size() (n int)

func (*RoleBindingList) String

func (m *RoleBindingList) String() string

func (*RoleBindingList) Unmarshal

func (m *RoleBindingList) Unmarshal(dAtA []byte) error

type RoleList

type RoleList struct {
	// Standard object's metadata.
	// +optional
	Metadata *k8s_io_apimachinery_pkg_apis_meta_v1.ListMeta `protobuf:"bytes,1,opt,name=metadata" json:"metadata,omitempty"`
	// Items is a list of Roles
	Items            []*Role `protobuf:"bytes,2,rep,name=items" json:"items,omitempty"`
	XXX_unrecognized []byte  `json:"-"`
}

RoleList is a collection of Roles

func (*RoleList) Descriptor

func (*RoleList) Descriptor() ([]byte, []int)

func (*RoleList) GetItems

func (m *RoleList) GetItems() []*Role

func (*RoleList) GetMetadata

func (*RoleList) Marshal

func (m *RoleList) Marshal() (dAtA []byte, err error)

func (*RoleList) MarshalTo

func (m *RoleList) MarshalTo(dAtA []byte) (int, error)

func (*RoleList) ProtoMessage

func (*RoleList) ProtoMessage()

func (*RoleList) Reset

func (m *RoleList) Reset()

func (*RoleList) Size

func (m *RoleList) Size() (n int)

func (*RoleList) String

func (m *RoleList) String() string

func (*RoleList) Unmarshal

func (m *RoleList) Unmarshal(dAtA []byte) error

type RoleRef

type RoleRef struct {
	// APIGroup is the group for the resource being referenced
	ApiGroup *string `protobuf:"bytes,1,opt,name=apiGroup" json:"apiGroup,omitempty"`
	// Kind is the type of resource being referenced
	Kind *string `protobuf:"bytes,2,opt,name=kind" json:"kind,omitempty"`
	// Name is the name of resource being referenced
	Name             *string `protobuf:"bytes,3,opt,name=name" json:"name,omitempty"`
	XXX_unrecognized []byte  `json:"-"`
}

RoleRef contains information that points to the role being used

func (*RoleRef) Descriptor

func (*RoleRef) Descriptor() ([]byte, []int)

func (*RoleRef) GetApiGroup

func (m *RoleRef) GetApiGroup() string

func (*RoleRef) GetKind

func (m *RoleRef) GetKind() string

func (*RoleRef) GetName

func (m *RoleRef) GetName() string

func (*RoleRef) Marshal

func (m *RoleRef) Marshal() (dAtA []byte, err error)

func (*RoleRef) MarshalTo

func (m *RoleRef) MarshalTo(dAtA []byte) (int, error)

func (*RoleRef) ProtoMessage

func (*RoleRef) ProtoMessage()

func (*RoleRef) Reset

func (m *RoleRef) Reset()

func (*RoleRef) Size

func (m *RoleRef) Size() (n int)

func (*RoleRef) String

func (m *RoleRef) String() string

func (*RoleRef) Unmarshal

func (m *RoleRef) Unmarshal(dAtA []byte) error

type Subject

type Subject struct {
	// Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
	// If the Authorizer does not recognized the kind value, the Authorizer should report an error.
	Kind *string `protobuf:"bytes,1,opt,name=kind" json:"kind,omitempty"`
	// APIVersion holds the API group and version of the referenced subject.
	// Defaults to "v1" for ServiceAccount subjects.
	// Defaults to "rbac.authorization.k8s.io/v1alpha1" for User and Group subjects.
	// +k8s:conversion-gen=false
	// +optional
	ApiVersion *string `protobuf:"bytes,2,opt,name=apiVersion" json:"apiVersion,omitempty"`
	// Name of the object being referenced.
	Name *string `protobuf:"bytes,3,opt,name=name" json:"name,omitempty"`
	// Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
	// the Authorizer should report an error.
	// +optional
	Namespace        *string `protobuf:"bytes,4,opt,name=namespace" json:"namespace,omitempty"`
	XXX_unrecognized []byte  `json:"-"`
}

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

func (*Subject) Descriptor

func (*Subject) Descriptor() ([]byte, []int)

func (*Subject) GetApiVersion

func (m *Subject) GetApiVersion() string

func (*Subject) GetKind

func (m *Subject) GetKind() string

func (*Subject) GetName

func (m *Subject) GetName() string

func (*Subject) GetNamespace

func (m *Subject) GetNamespace() string

func (*Subject) Marshal

func (m *Subject) Marshal() (dAtA []byte, err error)

func (*Subject) MarshalTo

func (m *Subject) MarshalTo(dAtA []byte) (int, error)

func (*Subject) ProtoMessage

func (*Subject) ProtoMessage()

func (*Subject) Reset

func (m *Subject) Reset()

func (*Subject) Size

func (m *Subject) Size() (n int)

func (*Subject) String

func (m *Subject) String() string

func (*Subject) Unmarshal

func (m *Subject) Unmarshal(dAtA []byte) error

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL