types

Documentation

Index

• Constants
• func APIGroupMatches(rule *PolicyRule, requestedAPIGroup string) bool
• func NonResourceURLMatches(rule *PolicyRule, requestedURL string) bool
• func ResourceMatches(rule *PolicyRule, combinedRequestedResource, requestedSubresource string) bool
• func RuleAllow(attribute auth.Attributes, rule *PolicyRule) bool
• func ScopeMatches(rule *PolicyRule, requestScope string) bool
• func VerbMatches(rule *PolicyRule, requestedVerb string) bool
• type PolicyRule
• type Role

Constants

const (
	APIGroupAll    = "*"
	ResourceAll    = "*"
	VerbAll        = "*"
	ScopeAll       = "*"
	NonResourceAll = "*"
)

attention: rbac is refers to the kubernetes rbac copy core struct and logics from the kubernetes code and do same modify

Functions

func APIGroupMatches

func APIGroupMatches(rule *PolicyRule, requestedAPIGroup string) bool

func NonResourceURLMatches

func NonResourceURLMatches(rule *PolicyRule, requestedURL string) bool

func ResourceMatches

func ResourceMatches(rule *PolicyRule, combinedRequestedResource, requestedSubresource string) bool

func RuleAllow

func RuleAllow(attribute auth.Attributes, rule *PolicyRule) bool

func ScopeMatches

func ScopeMatches(rule *PolicyRule, requestScope string) bool

func VerbMatches

func VerbMatches(rule *PolicyRule, requestedVerb string) bool

Types

type PolicyRule

type PolicyRule struct {
	Verbs           []string `yaml:"verbs" json:"verbs"`
	APIGroups       []string `yaml:"apiGroups" json:"apiGroups"`
	Resources       []string `yaml:"resources" json:"resources"`
	Scopes          []string `yaml:"scopes" json:"scopes"`
	NonResourceURLs []string `yaml:"nonResourceURLs" json:"nonResourceURLs"`
}

type Role

type Role struct {
	Name        string       `yaml:"name" json:"name"`
	Desc        string       `yaml:"desc" json:"desc"`
	PolicyRules []PolicyRule `yaml:"rules" json:"rules"`
}