rolebinding

Documentation

Index

• func NewREST(registry Registry) apiserver.RESTStorage
• type REST
  • func (r *REST) Create(ctx kapi.Context, obj runtime.Object) (runtime.Object, error)
  • func (r *REST) Delete(ctx kapi.Context, name string) (runtime.Object, error)
  • func (r *REST) Get(ctx kapi.Context, name string) (runtime.Object, error)
  • func (r *REST) List(ctx kapi.Context, label labels.Selector, field fields.Selector) (runtime.Object, error)
  • func (r *REST) New() runtime.Object
  • func (*REST) NewList() runtime.Object
  • func (r *REST) Update(ctx kapi.Context, obj runtime.Object) (runtime.Object, bool, error)
• type Registry
  • func NewVirtualRegistry(bindingRegistry policybindingregistry.Registry, ...) Registry
• type VirtualRegistry
  • func (m *VirtualRegistry) CreateRoleBinding(ctx kapi.Context, roleBinding *authorizationapi.RoleBinding, ...) error
  • func (m *VirtualRegistry) DeleteRoleBinding(ctx kapi.Context, name string) error
  • func (m *VirtualRegistry) GetRoleBinding(ctx kapi.Context, name string) (*authorizationapi.RoleBinding, error)
  • func (m *VirtualRegistry) ListRoleBindings(ctx kapi.Context, label labels.Selector, field fields.Selector) (*authorizationapi.RoleBindingList, error)
  • func (m *VirtualRegistry) UpdateRoleBinding(ctx kapi.Context, roleBinding *authorizationapi.RoleBinding, ...) error

Functions

func NewREST

func NewREST(registry Registry) apiserver.RESTStorage

NewREST creates a new REST for policies.

Types

type REST

type REST struct {
	// contains filtered or unexported fields
}

REST implements the RESTStorage interface in terms of an Registry.

func (*REST) Create

func (r *REST) Create(ctx kapi.Context, obj runtime.Object) (runtime.Object, error)

Create registers a given new RoleBinding inside the PolicyBinding instance to r.bindingRegistry.

func (*REST) Delete

func (r *REST) Delete(ctx kapi.Context, name string) (runtime.Object, error)

Delete asynchronously deletes the PolicyBinding specified by its name.

func (*REST) Get

func (r *REST) Get(ctx kapi.Context, name string) (runtime.Object, error)

Get obtains the rolebinding specified by its id.

func (*REST) List

func (r *REST) List(ctx kapi.Context, label labels.Selector, field fields.Selector) (runtime.Object, error)

List obtains a list of rolebindings that match label.

func (*REST) New

func (r *REST) New() runtime.Object

New creates a new RoleBinding object

func (*REST) NewList

func (*REST) NewList() runtime.Object

func (*REST) Update

func (r *REST) Update(ctx kapi.Context, obj runtime.Object) (runtime.Object, bool, error)

Update replaces a given RoleBinding inside the PolicyBinding instance with an existing instance in r.bindingRegistry.

type Registry

type Registry interface {
	// ListRoleBindings obtains list of policyRoleBindings that match a selector.
	ListRoleBindings(ctx kapi.Context, label labels.Selector, field fields.Selector) (*authorizationapi.RoleBindingList, error)
	// GetRoleBinding retrieves a specific policyRoleBinding.
	GetRoleBinding(ctx kapi.Context, id string) (*authorizationapi.RoleBinding, error)
	// CreateRoleBinding creates a new policyRoleBinding.  Skipping the escalation check should only be done during bootstrapping procedures where no users are currently bound.
	CreateRoleBinding(ctx kapi.Context, policyRoleBinding *authorizationapi.RoleBinding, allowEscalation bool) error
	// UpdateRoleBinding updates a policyRoleBinding.  Skipping the escalation check should only be done during bootstrapping procedures where no users are currently bound.
	UpdateRoleBinding(ctx kapi.Context, policyRoleBinding *authorizationapi.RoleBinding, allowEscalation bool) error
	// DeleteRoleBinding deletes a policyRoleBinding.
	DeleteRoleBinding(ctx kapi.Context, id string) error
}

Registry is an interface for things that know how to store RoleBindings.

func NewVirtualRegistry

func NewVirtualRegistry(bindingRegistry policybindingregistry.Registry, policyRegistry policyregistry.Registry, masterAuthorizationNamespace string) Registry

NewVirtualRegistry creates a new REST for policies.

type VirtualRegistry

type VirtualRegistry struct {
	// contains filtered or unexported fields
}

func (*VirtualRegistry) CreateRoleBinding

func (m *VirtualRegistry) CreateRoleBinding(ctx kapi.Context, roleBinding *authorizationapi.RoleBinding, allowEscalation bool) error

func (*VirtualRegistry) DeleteRoleBinding

func (m *VirtualRegistry) DeleteRoleBinding(ctx kapi.Context, name string) error

func (*VirtualRegistry) GetRoleBinding

func (m *VirtualRegistry) GetRoleBinding(ctx kapi.Context, name string) (*authorizationapi.RoleBinding, error)

func (*VirtualRegistry) ListRoleBindings

func (m *VirtualRegistry) ListRoleBindings(ctx kapi.Context, label labels.Selector, field fields.Selector) (*authorizationapi.RoleBindingList, error)

TODO either add selector for fields ot eliminate the option

func (*VirtualRegistry) UpdateRoleBinding

func (m *VirtualRegistry) UpdateRoleBinding(ctx kapi.Context, roleBinding *authorizationapi.RoleBinding, allowEscalation bool) error