userinfo

Documentation

Index

• Constants
• func GetRoleRef(rbLister rbaclister.RoleBindingLister, ...) (roles []string, clusterRoles []string, err error)
• func IsRoleAuthorize(rbLister rbaclister.RoleBindingLister, ...) (bool, error)

Constants

const (

	// SaPrefix represents service account prefix in admission requests
	SaPrefix = "system:serviceaccount:"
	// KyvernoSuffix ...
	KyvernoSuffix = "kyverno:"
)

Functions

func GetRoleRef

func GetRoleRef(rbLister rbaclister.RoleBindingLister, crbLister rbaclister.ClusterRoleBindingLister, request *v1beta1.AdmissionRequest, dynamicConfig config.Interface) (roles []string, clusterRoles []string, err error)

GetRoleRef gets the list of roles and cluster roles for the incoming api-request

func IsRoleAuthorize

func IsRoleAuthorize(rbLister rbaclister.RoleBindingLister, crbLister rbaclister.ClusterRoleBindingLister, rLister rbaclister.RoleLister, crLister rbaclister.ClusterRoleLister, request *v1beta1.AdmissionRequest, dynamicConfig config.Interface) (bool, error)

IsRoleAuthorize is role authorize or not