controller

Documentation

Index

• type Controller
  • func (c *Controller) GetRoleReferenceRules(ctx context.Context, roleRef rbacv1.RoleRef, bindingNamespace string) ([]rbacv1.PolicyRule, error)
  • func (c *Controller) Reconcile(ctx context.Context, request controllerruntime.Request) (controllerruntime.Result, error)
  • func (c *Controller) SetupWithManager(ctx context.Context, mgr controllerruntime.Manager) error
  • func (c *Controller) VisitRulesFor(ctx context.Context, user user.Info, namespace string, ...)
• type PolicyMatcher
• type PolicyRequestVisitor

Types

type Controller

type Controller struct {
	client.Client
	MessageLayer messagelayer.MessageLayer
}

func (*Controller) GetRoleReferenceRules

func (c *Controller) GetRoleReferenceRules(ctx context.Context, roleRef rbacv1.RoleRef, bindingNamespace string) ([]rbacv1.PolicyRule, error)

GetRoleReferenceRules attempts to resolve the RoleBinding or ClusterRoleBinding.

func (*Controller) Reconcile

func (c *Controller) Reconcile(ctx context.Context, request controllerruntime.Request) (controllerruntime.Result, error)

func (*Controller) SetupWithManager

func (c *Controller) SetupWithManager(ctx context.Context, mgr controllerruntime.Manager) error

SetupWithManager creates a controller and register to controller manager.

func (*Controller) VisitRulesFor

func (c *Controller) VisitRulesFor(ctx context.Context, user user.Info, namespace string, acc *policyv1alpha1.ServiceAccountAccess)

type PolicyMatcher

type PolicyMatcher struct {
	// contains filtered or unexported fields
}

type PolicyRequestVisitor

type PolicyRequestVisitor struct {
	AuthPolicy []controllerruntime.Request
}