bootstrappolicy

Documentation

Index

• Constants
• func GetBootstrapMasterRoleBindings(masterNamespace string) []authorizationapi.RoleBinding
• func GetBootstrapMasterRoles(masterNamespace string) []authorizationapi.Role
• func GetBootstrapOpenshiftRoleBindings(openshiftNamespace string) []authorizationapi.RoleBinding
• func GetBootstrapOpenshiftRoles(openshiftNamespace string) []authorizationapi.Role
• func GetBootstrapRoleBindings(masterNamespace, openshiftNamespace string) []authorizationapi.RoleBinding
• func GetBootstrapRoles(masterNamespace, openshiftNamespace string) []authorizationapi.Role

Constants

const (
	DefaultMasterAuthorizationNamespace      = "master"
	DefaultOpenShiftSharedResourcesNamespace = "openshift"
)

known namespaces

const (
	RouterUnqualifiedUsername   = "openshift-router"
	RegistryUnqualifiedUsername = "openshift-registry"

	RouterUsername   = "system:" + RouterUnqualifiedUsername
	RegistryUsername = "system:" + RegistryUnqualifiedUsername
)

users

const (
	UnauthenticatedUsername       = "system:anonymous"
	InternalComponentUsername     = "system:openshift-client"
	InternalComponentKubeUsername = "system:kube-client"
	DeployerUsername              = "system:openshift-deployer"

	AuthenticatedGroup   = "system:authenticated"
	UnauthenticatedGroup = "system:unauthenticated"
	ClusterAdminGroup    = "system:cluster-admins"
	NodesGroup           = "system:nodes"
	RouterGroup          = "system:routers"
	RegistryGroup        = "system:registries"
)

groups

const (
	ClusterAdminRoleName      = "cluster-admin"
	AdminRoleName             = "admin"
	EditRoleName              = "edit"
	ViewRoleName              = "view"
	BasicUserRoleName         = "basic-user"
	StatusCheckerRoleName     = "cluster-status"
	DeployerRoleName          = "system:deployer"
	RouterRoleName            = "system:router"
	RegistryRoleName          = "system:registry"
	InternalComponentRoleName = "system:component"
	DeleteTokensRoleName      = "system:delete-tokens"

	OpenshiftSharedResourceViewRoleName = "shared-resource-viewer"
)

Roles

const (
	InternalComponentRoleBindingName = InternalComponentRoleName + "-binding"
	DeployerRoleBindingName          = DeployerRoleName + "-binding"
	ClusterAdminRoleBindingName      = ClusterAdminRoleName + "-binding"
	BasicUserRoleBindingName         = BasicUserRoleName + "-binding"
	DeleteTokensRoleBindingName      = DeleteTokensRoleName + "-binding"
	StatusCheckerRoleBindingName     = StatusCheckerRoleName + "-binding"
	RouterRoleBindingName            = RouterRoleName + "-binding"
	RegistryRoleBindingName          = RegistryRoleName + "-binding"

	OpenshiftSharedResourceViewRoleBindingName = OpenshiftSharedResourceViewRoleName + "-binding"
)

RoleBindings

Functions

func GetBootstrapMasterRoleBindings

func GetBootstrapMasterRoleBindings(masterNamespace string) []authorizationapi.RoleBinding

func GetBootstrapMasterRoles

func GetBootstrapMasterRoles(masterNamespace string) []authorizationapi.Role

func GetBootstrapOpenshiftRoleBindings

func GetBootstrapOpenshiftRoleBindings(openshiftNamespace string) []authorizationapi.RoleBinding

func GetBootstrapOpenshiftRoles

func GetBootstrapOpenshiftRoles(openshiftNamespace string) []authorizationapi.Role

func GetBootstrapRoleBindings

func GetBootstrapRoleBindings(masterNamespace, openshiftNamespace string) []authorizationapi.RoleBinding

func GetBootstrapRoles

func GetBootstrapRoles(masterNamespace, openshiftNamespace string) []authorizationapi.Role