acl

Documentation

Overview

Package acl provides utilities for asserting cross-namespace access to GitOps Toolkit objects.

Index

• type Authorization
  • func NewAuthorization(kubeClient client.Client) *Authorization
  • func (a *Authorization) HasAccessToRef(ctx context.Context, object client.Object, reference types.NamespacedName, ...) (bool, error)

Types

type Authorization

type Authorization struct {
	// contains filtered or unexported fields
}

Authorization is an ACL helper for asserting access to cross-namespace references.

func NewAuthorization

func NewAuthorization(kubeClient client.Client) *Authorization

NewAuthorization takes a controller runtime client and returns an Authorization object that allows asserting access to cross-namespace references.

func (*Authorization) HasAccessToRef

func (a *Authorization) HasAccessToRef(ctx context.Context, object client.Object, reference types.NamespacedName, acl *aclapi.AccessFrom) (bool, error)

HasAccessToRef asserts if a namespaced object has access to a cross-namespace reference based on the ACL defined on the referenced object.