auth

Documentation

Index

• func CanI(ctx context.Context, verb, resource, namespace, name string) (bool, error)
• func DefaultClientForAuthorization(authorization string) (*rest.Config, *servertypes.Clients, error)
• func GetClaims(ctx context.Context) *types.Claims
• func GetDynamicClient(ctx context.Context) dynamic.Interface
• func GetEventSourceClient(ctx context.Context) eventsource.Interface
• func GetKubeClient(ctx context.Context) kubernetes.Interface
• func GetSensorClient(ctx context.Context) sensor.Interface
• func GetWfClient(ctx context.Context) workflow.Interface
• func NewAuthorizingServerStream(ss grpc.ServerStream, gk Gatekeeper) *authorizingServerStream
• type ClientForAuthorization
• type ContextKey
• type Gatekeeper
  • func NewGatekeeper(modes Modes, clients *servertypes.Clients, restConfig *rest.Config, ...) (Gatekeeper, error)
• type Mode
• type Modes
  • func (m Modes) Add(value string) error
  • func (m Modes) GetMode(authorisation string) (Mode, bool)

Functions

func CanI

func CanI(ctx context.Context, verb, resource, namespace, name string) (bool, error)

func DefaultClientForAuthorization

func DefaultClientForAuthorization(authorization string) (*rest.Config, *servertypes.Clients, error)

func GetClaims

func GetClaims(ctx context.Context) *types.Claims

func GetDynamicClient

func GetDynamicClient(ctx context.Context) dynamic.Interface

func GetEventSourceClient

func GetEventSourceClient(ctx context.Context) eventsource.Interface

func GetKubeClient

func GetKubeClient(ctx context.Context) kubernetes.Interface

func GetSensorClient

func GetSensorClient(ctx context.Context) sensor.Interface

func GetWfClient

func GetWfClient(ctx context.Context) workflow.Interface

func NewAuthorizingServerStream

func NewAuthorizingServerStream(ss grpc.ServerStream, gk Gatekeeper) *authorizingServerStream

Types

type ClientForAuthorization

type ClientForAuthorization func(authorization string) (*rest.Config, *servertypes.Clients, error)

type ContextKey

type ContextKey string

const (
	DynamicKey     ContextKey = "dynamic.Interface"
	WfKey          ContextKey = "workflow.Interface"
	SensorKey      ContextKey = "sensor.Interface"
	EventSourceKey ContextKey = "eventsource.Interface"
	KubeKey        ContextKey = "kubernetes.Interface"
	ClaimsKey      ContextKey = "types.Claims"
)

type Gatekeeper

type Gatekeeper interface {
	ContextWithRequest(ctx context.Context, req interface{}) (context.Context, error)
	Context(ctx context.Context) (context.Context, error)
	UnaryServerInterceptor() grpc.UnaryServerInterceptor
	StreamServerInterceptor() grpc.StreamServerInterceptor
}

func NewGatekeeper

func NewGatekeeper(modes Modes, clients *servertypes.Clients, restConfig *rest.Config, ssoIf sso.Interface, clientForAuthorization ClientForAuthorization, namespace string, ssoNamespace string, namespaced bool, cache *cache.ResourceCache) (Gatekeeper, error)

type Mode

type Mode string

const (
	Client Mode = "client"
	Server Mode = "server"
	SSO    Mode = "sso"
)

type Modes

type Modes map[Mode]bool

func (Modes) Add

func (m Modes) Add(value string) error

func (Modes) GetMode

func (m Modes) GetMode(authorisation string) (Mode, bool)