Versions in this module Expand all Collapse all v0 v0.2.11 Nov 23, 2021 v0.2.10 Nov 23, 2021 Changes in this version + func ConvertSubject(namespace string, subject *rbacv1.Subject) string + func RuleAllows(requestAttributes authorizer.Attributes, rule *rbacv1.PolicyRule) bool + type ClusterRoleBindingLister struct + Lister rbaclisters.ClusterRoleBindingLister + func (l *ClusterRoleBindingLister) ListClusterRoleBindings() ([]*rbacv1.ClusterRoleBinding, error) + type ClusterRoleGetter struct + Lister rbaclisters.ClusterRoleLister + func (g *ClusterRoleGetter) GetClusterRole(name string) (*rbacv1.ClusterRole, error) + type DefaultRuleResolver struct + Client client.Client + ListAll bool + func NewDefaultRuleResolver(client client.Client) *DefaultRuleResolver + func (r *DefaultRuleResolver) GetRoleReferenceRules(ctx context.Context, roleRef rbacv1.RoleRef, bindingNamespace string) ([]rbacv1.PolicyRule, error) + func (r *DefaultRuleResolver) VisitRulesFor(ctx context.Context, user user.Info, namespace string, ...) + type RBACAuthorizer struct + AuthorizationRuleResolver *DefaultRuleResolver + func New(client client.Client) *RBACAuthorizer + func (r *RBACAuthorizer) Authorize(ctx context.Context, requestAttributes authorizer.Attributes) (authorizer.Decision, string, error) + type RoleBindingLister struct + Lister rbaclisters.RoleBindingLister + func (l *RoleBindingLister) ListRoleBindings(namespace string) ([]*rbacv1.RoleBinding, error) + type RoleGetter struct + Lister rbaclisters.RoleLister + func (g *RoleGetter) GetRole(namespace, name string) (*rbacv1.Role, error)