rbac

Documentation

Index

• func APIGroupMatches(rule *rbacv1.PolicyRule, requestedGroup string) bool
• func CompactString(r rbacv1.PolicyRule) string
• func NonResourceURLMatches(rule *rbacv1.PolicyRule, requestedURL string) bool
• func ResourceMatches(rule *rbacv1.PolicyRule, ...) bool
• func ResourceNameMatches(rule *rbacv1.PolicyRule, requestedName string) bool
• func RoleRefGroupKind(roleRef rbacv1.RoleRef) schema.GroupKind
• func String(r rbacv1.PolicyRule) string
• func SubjectsStrings(subjects []rbacv1.Subject) ([]string, []string, []string, []string)
• func VerbMatches(rule *rbacv1.PolicyRule, requestedVerb string) bool
• type RBACAuthorizer
  • func NewRBACAuthorizer(am am.AccessManagementInterface) *RBACAuthorizer
  • func (r *RBACAuthorizer) Authorize(requestAttributes authorizer.Attributes) (authorizer.Decision, string, error)
• type SortableRuleSlice
  • func (s SortableRuleSlice) Len() int
  • func (s SortableRuleSlice) Less(i, j int) bool
  • func (s SortableRuleSlice) Swap(i, j int)

Functions

func APIGroupMatches

func APIGroupMatches(rule *rbacv1.PolicyRule, requestedGroup string) bool

func CompactString

func CompactString(r rbacv1.PolicyRule) string

CompactString exposes a compact string representation for use in escalation error messages

func NonResourceURLMatches

func NonResourceURLMatches(rule *rbacv1.PolicyRule, requestedURL string) bool

func ResourceMatches

func ResourceMatches(rule *rbacv1.PolicyRule, combinedRequestedResource, requestedSubresource string) bool

func ResourceNameMatches

func ResourceNameMatches(rule *rbacv1.PolicyRule, requestedName string) bool

func RoleRefGroupKind

func RoleRefGroupKind(roleRef rbacv1.RoleRef) schema.GroupKind

func String

func String(r rbacv1.PolicyRule) string

func SubjectsStrings

func SubjectsStrings(subjects []rbacv1.Subject) ([]string, []string, []string, []string)

subjectsStrings returns users, groups, serviceaccounts, unknown for display purposes.

func VerbMatches

func VerbMatches(rule *rbacv1.PolicyRule, requestedVerb string) bool

Types

type RBACAuthorizer

type RBACAuthorizer struct {
	// contains filtered or unexported fields
}

func NewRBACAuthorizer

func NewRBACAuthorizer(am am.AccessManagementInterface) *RBACAuthorizer

func (*RBACAuthorizer) Authorize

func (r *RBACAuthorizer) Authorize(requestAttributes authorizer.Attributes) (authorizer.Decision, string, error)

type SortableRuleSlice

type SortableRuleSlice []rbacv1.PolicyRule

func (SortableRuleSlice) Len

func (s SortableRuleSlice) Len() int

func (SortableRuleSlice) Less

func (s SortableRuleSlice) Less(i, j int) bool

func (SortableRuleSlice) Swap

func (s SortableRuleSlice) Swap(i, j int)