auth

Documentation

Index

• Constants
• func IsAuthorized(c *v1.Client, namespace, verb, group, resource, name string) (allowed bool, err error)
• func StreamingInterceptor(kubeConfig *v1.Config, db *v1.DB, sysConfig v1.SystemConfig) grpc.StreamServerInterceptor
• func UnaryInterceptor(kubeConfig *v1.Config, db *v1.DB, sysConfig v1.SystemConfig) grpc.UnaryServerInterceptor

Constants

const (
	// ContextClientKey is the key used to identify the Client value in Context
	ContextClientKey key = iota
)

Functions

func IsAuthorized

func IsAuthorized(c *v1.Client, namespace, verb, group, resource, name string) (allowed bool, err error)

func StreamingInterceptor

func StreamingInterceptor(kubeConfig *v1.Config, db *v1.DB, sysConfig v1.SystemConfig) grpc.StreamServerInterceptor

StreamingInterceptor provides an authentication wrapper around streaming requests.

func UnaryInterceptor

func UnaryInterceptor(kubeConfig *v1.Config, db *v1.DB, sysConfig v1.SystemConfig) grpc.UnaryServerInterceptor

UnaryInterceptor performs authentication checks. The two main cases are:

1. Is the token valid? This is used for logging in.
2. Is there a token? There should be a token for everything except logging in.