auth

Documentation

Index

• type Auth
  • func NewAuth(client dclient.Interface, user string, log logr.Logger) *Auth
  • func (a *Auth) CanI(ctx context.Context, verbs []string, gvk, namespace, name, subresource string) (bool, string, error)
  • func (a *Auth) CanICreate(ctx context.Context, gvk, namespace, name, subresource string) (bool, error)
  • func (a *Auth) User() string
• type AuthChecks

Types

type Auth

type Auth struct {
	// contains filtered or unexported fields
}

Auth provides implementation to check if caller/self/kyverno has access to perofrm operations

func NewAuth

func NewAuth(client dclient.Interface, user string, log logr.Logger) *Auth

NewAuth returns a new instance of Auth for operations

func (*Auth) CanI

func (a *Auth) CanI(ctx context.Context, verbs []string, gvk, namespace, name, subresource string) (bool, string, error)

func (*Auth) CanICreate

func (a *Auth) CanICreate(ctx context.Context, gvk, namespace, name, subresource string) (bool, error)

CanICreate returns 'true' if self can 'create' resource

func (*Auth) User

func (a *Auth) User() string

type AuthChecks

type AuthChecks interface {
	// User returns the subject
	User() string
	// CanI returns 'true' if user has permissions for all specified verbs.
	// When the result is 'false' a message with details on missing verbs is returned.
	CanI(ctx context.Context, verbs []string, gvk, namespace, name, subresource string) (bool, string, error)
}

AuthChecks provides methods to performing operations on resource