rbaccleaner

Documentation

Overview

rbaccleaner exists to clean up ClusterRoleBindings and ClusterRoles deployed by legacy app-operators to cluster namespaces. Those RBAC resources gave excessive permissions to app-operator ServiceAccount in cluster namespace. rbaccleaner can be removed once all active releases use app-operator versions >5.9.0.

Index

• Constants
• func IsInvalidConfig(err error) bool
• type Config
• type Resource
  • func New(config Config) (*Resource, error)
  • func (r *Resource) EnsureCreated(ctx context.Context, obj interface{}) error
  • func (r *Resource) EnsureDeleted(ctx context.Context, obj interface{}) error
  • func (r Resource) K8sClient() kubernetes.Interface
  • func (r Resource) Logger() micrologger.Logger
  • func (r *Resource) Name() string

Constants

const (
	Name = "rbaccleaner"
)

Functions

func IsInvalidConfig

func IsInvalidConfig(err error) bool

IsInvalidConfig asserts invalidConfigError.

Types

type Config

type Config struct {
	K8sClient k8sclient.Interface
	Logger    micrologger.Logger
}

type Resource

type Resource struct {
	// contains filtered or unexported fields
}

func New

func New(config Config) (*Resource, error)

func (*Resource) EnsureCreated

func (r *Resource) EnsureCreated(ctx context.Context, obj interface{}) error

EnsureCreated Ensures that ClusterRoleBinding and ClusterRole deployed by legacy app-operators to Cluster namespaces are *deleted* when a cluster namespace is created. We will be using other roles and cluster roles created by another resource.

func (*Resource) EnsureDeleted

func (r *Resource) EnsureDeleted(ctx context.Context, obj interface{}) error

func (Resource) K8sClient

func (r Resource) K8sClient() kubernetes.Interface

func (Resource) Logger

func (r Resource) Logger() micrologger.Logger

func (*Resource) Name

func (r *Resource) Name() string