Documentation
¶
Index ¶
- func CheckForConfidentialObjAccessAtClusterScope(csvPermissions *types.CSVPermissions) bool
- func GetApisOwned(csv operator.ClusterServiceVersion) ([]string, error)
- func GetPermissions(csv operator.ClusterServiceVersion) (*types.CSVPermissions, error)
- func WildCardApiGroupPresent(csvPermissions *types.CSVPermissions) bool
- func WildCardResourcePresent(csvPermissions *types.CSVPermissions, ownedApis []string) bool
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func CheckForConfidentialObjAccessAtClusterScope ¶
func CheckForConfidentialObjAccessAtClusterScope(csvPermissions *types.CSVPermissions) bool
Checks if secrets and configmaps without explicitly defined resource names are accessed at the cluster scope.
func GetApisOwned ¶
func GetApisOwned(csv operator.ClusterServiceVersion) ([]string, error)
func GetPermissions ¶
func GetPermissions(csv operator.ClusterServiceVersion) (*types.CSVPermissions, error)
func WildCardApiGroupPresent ¶
func WildCardApiGroupPresent(csvPermissions *types.CSVPermissions) bool
Checks if any rules have "*" defined in its apiGroup definition.
func WildCardResourcePresent ¶
func WildCardResourcePresent(csvPermissions *types.CSVPermissions, ownedApis []string) bool
Checks if any rules have "*" defined under resources.(For non-operator owned apis.)
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.