Documentation ¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func NewAuthorizer ¶
func NewAuthorizer(client RemoteAuthorizerClient) (authorizer.Authorizer, error)
Types ¶
type RemoteAuthorizer ¶
type RemoteAuthorizer struct {
// contains filtered or unexported fields
}
RemoteAuthorizer provides authorization using subject access review and resource access review requests
func (*RemoteAuthorizer) Authorize ¶
func (r *RemoteAuthorizer) Authorize(ctx kapi.Context, a authorizer.AuthorizationAttributes) (bool, string, error)
func (*RemoteAuthorizer) GetAllowedSubjects ¶
func (r *RemoteAuthorizer) GetAllowedSubjects(ctx kapi.Context, attributes authorizer.AuthorizationAttributes) (sets.String, sets.String, error)
type RemoteAuthorizerClient ¶
type RemoteAuthorizerClient interface { oclient.SubjectAccessReviews oclient.ResourceAccessReviews oclient.LocalSubjectAccessReviewsNamespacer oclient.LocalResourceAccessReviewsNamespacer }
Click to show internal directories.
Click to hide internal directories.