auth

Documentation

Index

• type CanIOptions
  • func NewCanI(client dclient.Interface, kind, namespace, verb string) CanIOptions

Types

type CanIOptions

type CanIOptions interface {
	// RunAccessCheck checks if the caller can perform the operation
	// - operation is a combination of namespace, kind, verb
	// - can only evaluate a single verb
	// - group version resource is determined from the kind using the discovery client REST mapper
	// - If disallowed, the reason and evaluationError is available in the logs
	// - each can generates a SelfSubjectAccessReview resource and response is evaluated for permissions
	RunAccessCheck() (bool, error)
}

CanIOptions provides utility to check if user has authorization for the given operation

func NewCanI

func NewCanI(client dclient.Interface, kind, namespace, verb string) CanIOptions

NewCanI returns a new instance of operation access controller evaluator