authorizationutil

Documentation

Index

• func AddUserToSAR(user user.Info, sar *authorizationv1.SubjectAccessReview) *authorizationv1.SubjectAccessReview
• func Authorize(sarClient authorizationclient.SubjectAccessReviewInterface, user user.Info, ...) error
• func BuildRBACSubjects(users, groups []string) []rbacv1.Subject
• func RBACSubjectsToUsersAndGroups(subjects []rbacv1.Subject, defaultNamespace string) (users []string, groups []string)

Functions

func AddUserToSAR

func AddUserToSAR(user user.Info, sar *authorizationv1.SubjectAccessReview) *authorizationv1.SubjectAccessReview

AddUserToSAR adds the requisite user information to a SubjectAccessReview. It returns the modified SubjectAccessReview.

func Authorize

func Authorize(sarClient authorizationclient.SubjectAccessReviewInterface, user user.Info, resourceAttributes *authorizationv1.ResourceAttributes) error

Authorize verifies that a given user is permitted to carry out a given action. If this cannot be determined, or if the user is not permitted, an error is returned.

func BuildRBACSubjects

func BuildRBACSubjects(users, groups []string) []rbacv1.Subject

func RBACSubjectsToUsersAndGroups

func RBACSubjectsToUsersAndGroups(subjects []rbacv1.Subject, defaultNamespace string) (users []string, groups []string)