Versions in this module Expand all Collapse all v0 v0.0.310 Jun 15, 2022 Changes in this version + const VerbCreate + const VerbDelete + const VerbGet + const VerbList + const VerbWatch + type Attributes interface + GetAPIGroup func() string + GetAPIVersion func() string + GetCluster func() string + GetDevOps func() string + GetName func() string + GetNamespace func() string + GetPath func() string + GetResource func() string + GetResourceScope func() string + GetSubresource func() string + GetUser func() user.Info + GetVerb func() string + GetWorkspace func() string + IsKubernetesRequest func() bool + IsReadOnly func() bool + IsResourceRequest func() bool + type AttributesRecord struct + APIGroup string + APIVersion string + Cluster string + DevOps string + KubernetesRequest bool + Name string + Namespace string + Path string + Resource string + ResourceRequest bool + ResourceScope string + Subresource string + User user.Info + Verb string + Workspace string + func (a AttributesRecord) GetAPIGroup() string + func (a AttributesRecord) GetAPIVersion() string + func (a AttributesRecord) GetCluster() string + func (a AttributesRecord) GetDevOps() string + func (a AttributesRecord) GetName() string + func (a AttributesRecord) GetNamespace() string + func (a AttributesRecord) GetPath() string + func (a AttributesRecord) GetResource() string + func (a AttributesRecord) GetResourceScope() string + func (a AttributesRecord) GetSubresource() string + func (a AttributesRecord) GetUser() user.Info + func (a AttributesRecord) GetVerb() string + func (a AttributesRecord) GetWorkspace() string + func (a AttributesRecord) IsKubernetesRequest() bool + func (a AttributesRecord) IsReadOnly() bool + func (a AttributesRecord) IsResourceRequest() bool + type Authorizer interface + Authorize func(a Attributes) (authorized Decision, reason string, err error) + type AuthorizerFunc func(a Attributes) (Decision, string, error) + func (f AuthorizerFunc) Authorize(a Attributes) (Decision, string, error) + type Decision int + const DecisionAllow + const DecisionDeny + const DecisionNoOpinion + type DefaultNonResourceRuleInfo struct + NonResourceURLs []string + Verbs []string + func (i *DefaultNonResourceRuleInfo) GetNonResourceURLs() []string + func (i *DefaultNonResourceRuleInfo) GetVerbs() []string + type DefaultResourceRuleInfo struct + APIGroups []string + ResourceNames []string + Resources []string + Verbs []string + func (i *DefaultResourceRuleInfo) GetAPIGroups() []string + func (i *DefaultResourceRuleInfo) GetResourceNames() []string + func (i *DefaultResourceRuleInfo) GetResources() []string + func (i *DefaultResourceRuleInfo) GetVerbs() []string + type NonResourceRuleInfo interface + GetNonResourceURLs func() []string + GetVerbs func() []string + type RequestAttributesGetter interface + GetRequestAttributes func(user.Info, *http.Request) Attributes + type ResourceRuleInfo interface + GetAPIGroups func() []string + GetResourceNames func() []string + GetResources func() []string + GetVerbs func() []string + type RuleResolver interface + RulesFor func(user user.Info, namespace string) ([]ResourceRuleInfo, []NonResourceRuleInfo, bool, error)