Documentation
¶
Index ¶
- type Auth
- func (a *Auth) CanICreate(ctx context.Context, kind, namespace string) (bool, error)
- func (a *Auth) CanIDelete(ctx context.Context, kind, namespace string) (bool, error)
- func (a *Auth) CanIGet(ctx context.Context, kind, namespace string) (bool, error)
- func (a *Auth) CanIUpdate(ctx context.Context, kind, namespace string) (bool, error)
- type FakeGenerate
- type Generate
- type Operations
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Auth ¶
type Auth struct {
// contains filtered or unexported fields
}
Auth provides implementation to check if caller/self/kyverno has access to perofrm operations
func (*Auth) CanICreate ¶
CanICreate returns 'true' if self can 'create' resource
func (*Auth) CanIDelete ¶
CanIDelete returns 'true' if self can 'delete' resource
type FakeGenerate ¶
type FakeGenerate struct {
Generate
}
FakeGenerate provides implementation for generate rule processing with mocks/fakes for cluster interactions
func NewFakeGenerate ¶
func NewFakeGenerate(rule kyvernov1.Generation) *FakeGenerate
NewFakeGenerate returns a new instance of generatecheck that uses fake/mock implementation for operation access(always returns true)
type Generate ¶
type Generate struct {
// contains filtered or unexported fields
}
Generate provides implementation to validate 'generate' rule
func NewGenerateFactory ¶
func NewGenerateFactory(client dclient.Interface, rule kyvernov1.Generation, log logr.Logger) *Generate
NewGenerateFactory returns a new instance of Generate validation checker
type Operations ¶
type Operations interface { // CanICreate returns 'true' if self can 'create' resource CanICreate(ctx context.Context, kind, namespace string) (bool, error) // CanIUpdate returns 'true' if self can 'update' resource CanIUpdate(ctx context.Context, kind, namespace string) (bool, error) // CanIDelete returns 'true' if self can 'delete' resource CanIDelete(ctx context.Context, kind, namespace string) (bool, error) // CanIGet returns 'true' if self can 'get' resource CanIGet(ctx context.Context, kind, namespace string) (bool, error) }
Operations provides methods to performing operations on resource