role

Documentation

Index

• func NewEmptyPolicy(namespace string) *authorizationapi.Policy
• type REST
  • func NewREST(registry Registry) *REST
  • func (r *REST) Create(ctx kapi.Context, obj runtime.Object) (runtime.Object, error)
  • func (r *REST) Delete(ctx kapi.Context, name string) (runtime.Object, error)
  • func (r *REST) Get(ctx kapi.Context, name string) (runtime.Object, error)
  • func (r *REST) List(ctx kapi.Context, label labels.Selector, field fields.Selector) (runtime.Object, error)
  • func (r *REST) New() runtime.Object
  • func (*REST) NewList() runtime.Object
  • func (r *REST) Update(ctx kapi.Context, obj runtime.Object) (runtime.Object, bool, error)
• type Registry
  • func NewVirtualRegistry(policyRegistry policyregistry.Registry) Registry
• type VirtualRegistry
  • func (m *VirtualRegistry) CreateRole(ctx kapi.Context, role *authorizationapi.Role) error
  • func (m *VirtualRegistry) DeleteRole(ctx kapi.Context, name string) error
  • func (m *VirtualRegistry) EnsurePolicy(ctx kapi.Context) (*authorizationapi.Policy, error)
  • func (m *VirtualRegistry) GetRole(ctx kapi.Context, name string) (*authorizationapi.Role, error)
  • func (m *VirtualRegistry) ListRoles(ctx kapi.Context, label labels.Selector, field fields.Selector) (*authorizationapi.RoleList, error)
  • func (m *VirtualRegistry) UpdateRole(ctx kapi.Context, role *authorizationapi.Role) error

Functions

func NewEmptyPolicy

func NewEmptyPolicy(namespace string) *authorizationapi.Policy

Types

type REST

type REST struct {
	// contains filtered or unexported fields
}

REST implements the RESTStorage interface in terms of an Registry.

func NewREST

func NewREST(registry Registry) *REST

NewREST creates a new REST for policies.

func (*REST) Create

func (r *REST) Create(ctx kapi.Context, obj runtime.Object) (runtime.Object, error)

Create registers a given new Role inside the Policy instance to r.registry.

func (*REST) Delete

func (r *REST) Delete(ctx kapi.Context, name string) (runtime.Object, error)

Delete asynchronously deletes the role specified by its name.

func (*REST) Get

func (r *REST) Get(ctx kapi.Context, name string) (runtime.Object, error)

Get obtains the role specified by its name.

func (*REST) List

func (r *REST) List(ctx kapi.Context, label labels.Selector, field fields.Selector) (runtime.Object, error)

List obtains a list of roles that match label.

func (*REST) New

func (r *REST) New() runtime.Object

New creates a new Role object

func (*REST) NewList

func (*REST) NewList() runtime.Object

func (*REST) Update

func (r *REST) Update(ctx kapi.Context, obj runtime.Object) (runtime.Object, bool, error)

Update replaces a given Role inside the Policy instance with an existing instance in r.registry.

type Registry

type Registry interface {
	// ListRoles obtains list of policyRoles that match a selector.
	ListRoles(ctx kapi.Context, label labels.Selector, field fields.Selector) (*authorizationapi.RoleList, error)
	// GetRole retrieves a specific policyRole.
	GetRole(ctx kapi.Context, id string) (*authorizationapi.Role, error)
	// CreateRole creates a new policyRole.
	CreateRole(ctx kapi.Context, policyRole *authorizationapi.Role) error
	// UpdateRole updates a policyRole.
	UpdateRole(ctx kapi.Context, policyRole *authorizationapi.Role) error
	// DeleteRole deletes a policyRole.
	DeleteRole(ctx kapi.Context, id string) error
}

Registry is an interface for things that know how to store Roles.

func NewVirtualRegistry

func NewVirtualRegistry(policyRegistry policyregistry.Registry) Registry

NewVirtualRegistry creates a new REST for policies.

type VirtualRegistry

type VirtualRegistry struct {
	// contains filtered or unexported fields
}

func (*VirtualRegistry) CreateRole

func (m *VirtualRegistry) CreateRole(ctx kapi.Context, role *authorizationapi.Role) error

func (*VirtualRegistry) DeleteRole

func (m *VirtualRegistry) DeleteRole(ctx kapi.Context, name string) error

func (*VirtualRegistry) EnsurePolicy

func (m *VirtualRegistry) EnsurePolicy(ctx kapi.Context) (*authorizationapi.Policy, error)

EnsurePolicy returns the policy object for the specified namespace. If one does not exist, it is created for you. Permission to create, update, or delete roles in a namespace implies the ability to create a Policy object itself.

func (*VirtualRegistry) GetRole

func (m *VirtualRegistry) GetRole(ctx kapi.Context, name string) (*authorizationapi.Role, error)

func (*VirtualRegistry) ListRoles

func (m *VirtualRegistry) ListRoles(ctx kapi.Context, label labels.Selector, field fields.Selector) (*authorizationapi.RoleList, error)

TODO either add selector for fields ot eliminate the option

func (*VirtualRegistry) UpdateRole

func (m *VirtualRegistry) UpdateRole(ctx kapi.Context, role *authorizationapi.Role) error