authorization

Documentation

Index

• func AddUserAdminToProject(oc *exutil.CLI, namespace, user string) string
• func AddUserEditToProject(oc *exutil.CLI, namespace, user string) string
• func AddUserToRoleInProject(oc *exutil.CLI, clusterrolebinding, namespace, user string) string
• func AddUserViewToProject(oc *exutil.CLI, namespace, user string) string
• func RunLegacyClusterRoleBindingEndpoint(t g.GinkgoTInterface, ...)
• func RunLegacyClusterRoleEndpoint(t g.GinkgoTInterface, ...)
• func RunLegacyEndpointConfirmNoEscalation(t g.GinkgoTInterface, ...)
• func RunLegacyLocalRoleBindingEndpoint(t g.GinkgoTInterface, ...)
• func RunLegacyLocalRoleEndpoint(t g.GinkgoTInterface, ...)

Functions

func AddUserAdminToProject

func AddUserAdminToProject(oc *exutil.CLI, namespace, user string) string

func AddUserEditToProject

func AddUserEditToProject(oc *exutil.CLI, namespace, user string) string

func AddUserToRoleInProject

func AddUserToRoleInProject(oc *exutil.CLI, clusterrolebinding, namespace, user string) string

func AddUserViewToProject

func AddUserViewToProject(oc *exutil.CLI, namespace, user string) string

func RunLegacyClusterRoleBindingEndpoint

func RunLegacyClusterRoleBindingEndpoint(t g.GinkgoTInterface, authorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, namespace string)

RunLegacyClusterRoleBindingEndpoint exercises the legacy clusterrolebinding endpoint that is proxied to rbac

func RunLegacyClusterRoleEndpoint

func RunLegacyClusterRoleEndpoint(t g.GinkgoTInterface, authorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, namespace string)

RunLegacyClusterRoleEndpoint exercises the legacy clusterrole endpoint that is proxied to rbac

func RunLegacyEndpointConfirmNoEscalation

func RunLegacyEndpointConfirmNoEscalation(t g.GinkgoTInterface, clusterAdminAuthorizationClient, userAuthorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, userName, namespace string)

RunLegacyEndpointConfirmNoEscalation tests that the authorization proxy endpoints cannot be used to bypass the RBAC escalation checks. It also makes sure that the GR in the returned error matches authorization v1.

func RunLegacyLocalRoleBindingEndpoint

func RunLegacyLocalRoleBindingEndpoint(t g.GinkgoTInterface, authorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, namespace string)

RunLegacyLocalRoleBindingEndpoint exercises the legacy rolebinding endpoint that is proxied to rbac

func RunLegacyLocalRoleEndpoint

func RunLegacyLocalRoleEndpoint(t g.GinkgoTInterface, authorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, namespace string)

RunLegacyLocalRoleEndpoint exercises the legacy role endpoint that is proxied to rbac