types

Documentation

Index

• Constants
• type APIGroupFilter
  • func (f *APIGroupFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule
• type CSVPermissions
  • func (cp *CSVPermissions) FilterRules(ruleFilter RuleFilter) []Rule
• type Filter
• type FilterParams
• type IndexImageExtractor
• type MetaBundle
  • func NewMetaBundle(addonMeta *v1alpha1.AddonMetadataSpec, bundles []op.Bundle) *MetaBundle
• type NonResourceURLsFilter
  • func (f *NonResourceURLsFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule
• type Permission
• type ResourceNamesFilter
  • func (f *ResourceNamesFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule
• type ResourcesFilter
  • func (f *ResourcesFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule
• type Rule
• type RuleFilter
  • func (r *RuleFilter) GetRelevantPermissions(cp *CSVPermissions) []Permission
  • func (r *RuleFilter) Run(rule *rbac.PolicyRule) *rbac.PolicyRule
• type VerbsFilter
  • func (f *VerbsFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule

Constants

const (
	InOperator           operator = "IN"
	NotInOperator        operator = "NOT_IN"
	EqualsOperator       operator = "EQUAL"
	NotEqualOperator     operator = "NOT_EQUAL"
	ExistsOperator       operator = "EXISTS"
	DoesNotExistOperator operator = "DOES_NOT_EXIST"
	AnyOperator          operator = "ANY"
)

const (
	AllPermissionType        permissionType = "all"
	NameSpacedPermissionType permissionType = "namespaced"
	ClusterPermissionType    permissionType = "clusterScoped"
)

Types

type APIGroupFilter

type APIGroupFilter struct {
	Params FilterParams
}

func (*APIGroupFilter) Filter

func (f *APIGroupFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule

type CSVPermissions

type CSVPermissions struct {
	ClusterPermissions []Permission `json:"clusterPermissions"`
	Permissions        []Permission `json:"permissions"`
}

func (*CSVPermissions) FilterRules

func (cp *CSVPermissions) FilterRules(ruleFilter RuleFilter) []Rule

Returns the list of rules matching the filtering conditions

type Filter

type Filter interface {
	Filter(*rbac.PolicyRule) *rbac.PolicyRule
}

type FilterParams

type FilterParams struct {
	Args         []string
	OperatorName operator
}

type IndexImageExtractor

type IndexImageExtractor interface {
	ExtractBundlesFromImage(indexImage string, extractTo string) error
	CacheKey(indexImage, addonName string) string
	CacheHit(key string) bool
	ExtractionPath() string
	ManifestsPath(addonName string) string
	CacheLocation() string
	WriteToCache(value string) error
}

type MetaBundle

type MetaBundle struct {
	AddonMeta *v1alpha1.AddonMetadataSpec
	Bundles   []op.Bundle
}

func NewMetaBundle

func NewMetaBundle(addonMeta *v1alpha1.AddonMetadataSpec, bundles []op.Bundle) *MetaBundle

type NonResourceURLsFilter

type NonResourceURLsFilter struct {
	Params FilterParams
}

func (*NonResourceURLsFilter) Filter

func (f *NonResourceURLsFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule

type Permission

type Permission struct {
	ServiceAccountName string
	Rules              []Rule
}

type ResourceNamesFilter

type ResourceNamesFilter struct {
	Params FilterParams
}

func (*ResourceNamesFilter) Filter

func (f *ResourceNamesFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule

type ResourcesFilter

type ResourcesFilter struct {
	Params FilterParams
}

func (*ResourcesFilter) Filter

func (f *ResourcesFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule

type Rule

type Rule struct {
	rbac.PolicyRule
	// contains filtered or unexported fields
}

type RuleFilter

type RuleFilter struct {
	PermissionType permissionType
	Filters        []Filter
}

func (*RuleFilter) GetRelevantPermissions

func (r *RuleFilter) GetRelevantPermissions(cp *CSVPermissions) []Permission

func (*RuleFilter) Run

func (r *RuleFilter) Run(rule *rbac.PolicyRule) *rbac.PolicyRule

type VerbsFilter

type VerbsFilter struct {
	Params FilterParams
}

func (*VerbsFilter) Filter

func (f *VerbsFilter) Filter(rule *rbac.PolicyRule) *rbac.PolicyRule