tobac

Documentation

Index

• Constants
• type KubernetesResource
• type Request
• type Response
  • func Allowed(request Request) Response
  • func ClusterAdminResponse(request Request) *Response
• type TeamProvider

Constants

const ErrorExistingTeamDoesNotExistInAzureAD = "team '%s' on existing resource does not exist in Azure AD"

const ErrorNotTaggedWithTeamLabel = "object is not tagged with a team label"

const ErrorTeamDoesNotExistInAzureAD = "team '%s' does not exist in Azure AD"

const ErrorUserHasNoAccessToTeam = "user '%s' has no access to team '%s'"

const SuccessUserBelongsToTeam = "user belongs to owner team '%s'"

const SuccessUserIsClusterAdmin = "user is cluster administrator through group '%s'"

const SuccessUserMatchesServiceUserTemplate = "user matches service user template"

const SuccessUserMayAnnexateOrphanResource = "resource did not have a team label set"

Types

type KubernetesResource

type KubernetesResource struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
}

KubernetesResource represents any Kubernetes resource with standard object metadata structures.

type Request

type Request struct {
	UserInfo             authenticationv1.UserInfo
	ExistingResource     metav1.Object
	SubmittedResource    metav1.Object
	ClusterAdmins        []string
	ServiceUserTemplates []string
	TeamProvider         TeamProvider
}

type Response

type Response struct {
	Allowed bool
	Reason  string
}

func Allowed

func Allowed(request Request) Response

func ClusterAdminResponse

func ClusterAdminResponse(request Request) *Response

type TeamProvider

type TeamProvider func(string) azure.Team