authz

Documentation

Index

• func NewAuthorizer(client authorizationclient.SubjectAccessReviewInterface) (authorizer.Authorizer, error)
• type Config
• type ResourceAttributes

Functions

func NewAuthorizer

func NewAuthorizer(client authorizationclient.SubjectAccessReviewInterface) (authorizer.Authorizer, error)

NewAuthorizer creates an authorizer compatible with the kubelet's needs

Types

type Config

type Config struct {
	ResourceAttributes     *ResourceAttributes
	ResourceAttributesFile string
}

Config holds configuration enabling request authorization

type ResourceAttributes

type ResourceAttributes struct {
	Namespace   string `json:"namespace,omitempty"`
	APIGroup    string `json:"apiGroup,omitempty"`
	APIVersion  string `json:"apiVersion,omitempty"`
	Resource    string `json:"resource,omitempty"`
	Subresource string `json:"subresource,omitempty"`
	Name        string `json:"name,omitempty"`
}

ResourceAttributes describes attributes available for resource request authorization