rbac

Documentation

Index

• func APIGroupMatches(rule *rbacv1.PolicyRule, requestedGroup string) bool
• func NewAuthorizer(am iam.Operator) authorizer.Authorizer
• func NonResourceURLMatches(rule *rbacv1.PolicyRule, requestedURL string) bool
• func ResourceMatches(rule *rbacv1.PolicyRule, ...) bool
• func ResourceNameMatches(rule *rbacv1.PolicyRule, requestedName string) bool
• func VerbMatches(rule *rbacv1.PolicyRule, requestedVerb string) bool
• type Authorizer
  • func (a *Authorizer) Authorize(attributes authorizer.Attributes) (authorizer.Decision, string, error)

Functions

func APIGroupMatches

func APIGroupMatches(rule *rbacv1.PolicyRule, requestedGroup string) bool

func NewAuthorizer

func NewAuthorizer(am iam.Operator) authorizer.Authorizer

func NonResourceURLMatches

func NonResourceURLMatches(rule *rbacv1.PolicyRule, requestedURL string) bool

func ResourceMatches

func ResourceMatches(rule *rbacv1.PolicyRule, combinedRequestedResource, requestedSubresource string) bool

func ResourceNameMatches

func ResourceNameMatches(rule *rbacv1.PolicyRule, requestedName string) bool

func VerbMatches

func VerbMatches(rule *rbacv1.PolicyRule, requestedVerb string) bool

Types

type Authorizer

type Authorizer struct {
	// contains filtered or unexported fields
}

func (*Authorizer) Authorize

func (a *Authorizer) Authorize(attributes authorizer.Attributes) (authorizer.Decision, string, error)