clusternamespaceresources

Documentation

Overview

clusternamespaceresources package is responsible for managing RBAC resources that grant those with access to an organization namespace access to namespaces belonging to the organizations clusters

Index

• Constants
• func IsInvalidConfig(err error) bool
• func IsUnknownOrganizationNamespace(err error) bool
• type Config
• type Resource
  • func New(config Config) (*Resource, error)
  • func (r *Resource) EnsureCreated(ctx context.Context, obj interface{}) error
  • func (r *Resource) EnsureDeleted(ctx context.Context, obj interface{}) error
  • func (r *Resource) Name() string

Constants

const (
	Name = "clusternamespaceresources"
)

Functions

func IsInvalidConfig

func IsInvalidConfig(err error) bool

IsInvalidConfig asserts invalidConfigError.

func IsUnknownOrganizationNamespace

func IsUnknownOrganizationNamespace(err error) bool

IsUnknownOrganizationNamespace asserts unknownOrganizationNamespaceError.

Types

type Config

type Config struct {
	K8sClient k8sclient.Interface
	Logger    micrologger.Logger
}

type Resource

type Resource struct {
	// contains filtered or unexported fields
}

func New

func New(config Config) (*Resource, error)

func (*Resource) EnsureCreated

func (r *Resource) EnsureCreated(ctx context.Context, obj interface{}) error

Ensures that

• Roles for read/write access to org cluster resources are ensured in each cluster namespace
• For each RoleBinding in an org-namespace that references the read/write org cluster resource clusterRole, RoleBindings are created in the organizations cluster namespaces which reference above Role

func (*Resource) EnsureDeleted

func (r *Resource) EnsureDeleted(ctx context.Context, obj interface{}) error

Ensures that when a cluster is deleted, roles and roleBindings for cluster resource access are deleted as well

func (*Resource) Name

func (r *Resource) Name() string