api

Apr 28, 2017

Changes in this version

type Action

+ IsNonResourceURL bool

+ Path string

Jan 14, 2017

Changes in this version

+ var SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)

+ func DeepCopy_api_GroupRestriction(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_PolicyRuleBuilder(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_RoleBindingRestriction(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_RoleBindingRestrictionList(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_RoleBindingRestrictionSpec(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_ServiceAccountReference(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_ServiceAccountRestriction(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_SubjectRulesReview(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_SubjectRulesReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error

+ func DeepCopy_api_UserRestriction(in interface{}, out interface{}, c *conversion.Cloner) error

+ func RegisterDeepCopies(scheme *runtime.Scheme) error

+ func RoleBindingRestrictionToSelectableFields(rbr *RoleBindingRestriction) fields.Set

+ type GroupRestriction struct

+ Groups []string

+ Selectors []unversioned.LabelSelector

+ type RoleBindingRestriction struct

+ Spec RoleBindingRestrictionSpec

+ type RoleBindingRestrictionList struct

+ Items []RoleBindingRestriction

+ type RoleBindingRestrictionSpec struct

+ GroupRestriction *GroupRestriction

+ ServiceAccountRestriction *ServiceAccountRestriction

+ UserRestriction *UserRestriction

+ type ServiceAccountReference struct

+ Name string

+ Namespace string

+ type ServiceAccountRestriction struct

+ Namespaces []string

+ ServiceAccounts []ServiceAccountReference

+ type SubjectRulesReview struct

+ Spec SubjectRulesReviewSpec

+ Status SubjectRulesReviewStatus

+ type SubjectRulesReviewSpec struct

+ Groups []string

+ Scopes []string

+ User string

+ type UserRestriction struct

+ Groups []string

+ Selectors []unversioned.LabelSelector

+ Users []string

Oct 14, 2016

Changes in this version

+ const NodeSpecResource

Sep 16, 2016

Changes in this version

+ const FutureGroupName

+ const GroupResource

+ const JenkinsPipelineBuildResource

+ const RestrictedEndpointsResource

+ const ScopesAllNamespaces

+ const ScopesKey

+ const ServiceAccountResource

+ const SystemGroupResource

+ const SystemUserResource

+ const UserResource

+ var DiscoveryRule = PolicyRule

+ func DeepCopy_api_Action(in Action, out *Action, c *conversion.Cloner) error

+ func DeepCopy_api_ClusterPolicy(in ClusterPolicy, out *ClusterPolicy, c *conversion.Cloner) error

+ func DeepCopy_api_ClusterPolicyBinding(in ClusterPolicyBinding, out *ClusterPolicyBinding, c *conversion.Cloner) error

+ func DeepCopy_api_ClusterPolicyBindingList(in ClusterPolicyBindingList, out *ClusterPolicyBindingList, ...) error

+ func DeepCopy_api_ClusterPolicyList(in ClusterPolicyList, out *ClusterPolicyList, c *conversion.Cloner) error

+ func DeepCopy_api_ClusterRole(in ClusterRole, out *ClusterRole, c *conversion.Cloner) error

+ func DeepCopy_api_ClusterRoleBinding(in ClusterRoleBinding, out *ClusterRoleBinding, c *conversion.Cloner) error

+ func DeepCopy_api_ClusterRoleBindingList(in ClusterRoleBindingList, out *ClusterRoleBindingList, c *conversion.Cloner) error

+ func DeepCopy_api_ClusterRoleList(in ClusterRoleList, out *ClusterRoleList, c *conversion.Cloner) error

+ func DeepCopy_api_IsPersonalSubjectAccessReview(in IsPersonalSubjectAccessReview, out *IsPersonalSubjectAccessReview, ...) error

+ func DeepCopy_api_LocalResourceAccessReview(in LocalResourceAccessReview, out *LocalResourceAccessReview, ...) error

+ func DeepCopy_api_LocalSubjectAccessReview(in LocalSubjectAccessReview, out *LocalSubjectAccessReview, ...) error

+ func DeepCopy_api_Policy(in Policy, out *Policy, c *conversion.Cloner) error

+ func DeepCopy_api_PolicyBinding(in PolicyBinding, out *PolicyBinding, c *conversion.Cloner) error

+ func DeepCopy_api_PolicyBindingList(in PolicyBindingList, out *PolicyBindingList, c *conversion.Cloner) error

+ func DeepCopy_api_PolicyList(in PolicyList, out *PolicyList, c *conversion.Cloner) error

+ func DeepCopy_api_PolicyRule(in PolicyRule, out *PolicyRule, c *conversion.Cloner) error

+ func DeepCopy_api_ResourceAccessReview(in ResourceAccessReview, out *ResourceAccessReview, c *conversion.Cloner) error

+ func DeepCopy_api_ResourceAccessReviewResponse(in ResourceAccessReviewResponse, out *ResourceAccessReviewResponse, ...) error

+ func DeepCopy_api_Role(in Role, out *Role, c *conversion.Cloner) error

+ func DeepCopy_api_RoleBinding(in RoleBinding, out *RoleBinding, c *conversion.Cloner) error

+ func DeepCopy_api_RoleBindingList(in RoleBindingList, out *RoleBindingList, c *conversion.Cloner) error

+ func DeepCopy_api_RoleList(in RoleList, out *RoleList, c *conversion.Cloner) error

+ func DeepCopy_api_SelfSubjectRulesReview(in SelfSubjectRulesReview, out *SelfSubjectRulesReview, c *conversion.Cloner) error

+ func DeepCopy_api_SelfSubjectRulesReviewSpec(in SelfSubjectRulesReviewSpec, out *SelfSubjectRulesReviewSpec, ...) error

+ func DeepCopy_api_SubjectAccessReview(in SubjectAccessReview, out *SubjectAccessReview, c *conversion.Cloner) error

+ func DeepCopy_api_SubjectAccessReviewResponse(in SubjectAccessReviewResponse, out *SubjectAccessReviewResponse, ...) error

+ func DeepCopy_api_SubjectRulesReviewStatus(in SubjectRulesReviewStatus, out *SubjectRulesReviewStatus, ...) error

+ func SubjectsContainAnyGroup(subjects []kapi.ObjectReference, groups []string) bool

+ func SubjectsContainUser(subjects []kapi.ObjectReference, currentNamespace string, user string) bool

+ type Action struct

+ Content kruntime.Object

+ Group string

+ Namespace string

+ Resource string

+ ResourceName string

+ Verb string

+ Version string

+ type ClusterRoleBindingsByName map[string]*ClusterRoleBinding

+ type ClusterRolesByName map[string]*ClusterRole

type LocalSubjectAccessReview

+ Scopes []string

+ func AddUserToLSAR(user user.Info, lsar *LocalSubjectAccessReview) *LocalSubjectAccessReview

type PolicyRule

+ func (r PolicyRule) CompactString() string

+ type PolicyRuleBuilder struct

+ PolicyRule PolicyRule

+ func NewRule(verbs ...string) *PolicyRuleBuilder

+ func (r *PolicyRuleBuilder) Groups(groups ...string) *PolicyRuleBuilder

+ func (r *PolicyRuleBuilder) Names(names ...string) *PolicyRuleBuilder

+ func (r *PolicyRuleBuilder) Resources(resources ...string) *PolicyRuleBuilder

+ func (r *PolicyRuleBuilder) Rule() (PolicyRule, error)

+ func (r *PolicyRuleBuilder) RuleOrDie() PolicyRule

type ResourceAccessReviewResponse

+ EvaluationError string

+ type RoleBindingsByName map[string]*RoleBinding

+ type RolesByName map[string]*Role

+ type SelfSubjectRulesReview struct

+ Spec SelfSubjectRulesReviewSpec

+ Status SubjectRulesReviewStatus

+ type SelfSubjectRulesReviewSpec struct

+ Scopes []string

+ type SortableRuleSlice []PolicyRule

+ func (s SortableRuleSlice) Len() int

+ func (s SortableRuleSlice) Less(i, j int) bool

+ func (s SortableRuleSlice) Swap(i, j int)

type SubjectAccessReview

+ Scopes []string

+ func AddUserToSAR(user user.Info, sar *SubjectAccessReview) *SubjectAccessReview

type SubjectAccessReviewResponse

+ EvaluationError string

+ type SubjectRulesReviewStatus struct

+ EvaluationError string

+ Rules []PolicyRule

Mar 14, 2016

Changes in this version

type AuthorizationAttributes

+ Group string

+ Version string

Feb 17, 2016

Changes in this version

+ const GroupName

+ func AddToScheme(scheme *runtime.Scheme)

type ClusterPolicy

+ func (obj *ClusterPolicy) GetObjectKind() unversioned.ObjectKind

type ClusterPolicyBinding

+ func (obj *ClusterPolicyBinding) GetObjectKind() unversioned.ObjectKind

type ClusterPolicyBindingList

+ func (obj *ClusterPolicyBindingList) GetObjectKind() unversioned.ObjectKind

type ClusterPolicyList

+ func (obj *ClusterPolicyList) GetObjectKind() unversioned.ObjectKind

type ClusterRole

+ func (obj *ClusterRole) GetObjectKind() unversioned.ObjectKind

type ClusterRoleBinding

+ func (obj *ClusterRoleBinding) GetObjectKind() unversioned.ObjectKind

type ClusterRoleBindingList

+ func (obj *ClusterRoleBindingList) GetObjectKind() unversioned.ObjectKind

type ClusterRoleList

+ func (obj *ClusterRoleList) GetObjectKind() unversioned.ObjectKind

type IsPersonalSubjectAccessReview

+ func (obj *IsPersonalSubjectAccessReview) GetObjectKind() unversioned.ObjectKind

type LocalResourceAccessReview

+ func (obj *LocalResourceAccessReview) GetObjectKind() unversioned.ObjectKind

type LocalSubjectAccessReview

+ func (obj *LocalSubjectAccessReview) GetObjectKind() unversioned.ObjectKind

type Policy

+ func (obj *Policy) GetObjectKind() unversioned.ObjectKind

type PolicyBinding

+ func (obj *PolicyBinding) GetObjectKind() unversioned.ObjectKind

type PolicyBindingList

+ func (obj *PolicyBindingList) GetObjectKind() unversioned.ObjectKind

type PolicyList

+ func (obj *PolicyList) GetObjectKind() unversioned.ObjectKind

type ResourceAccessReview

+ func (obj *ResourceAccessReview) GetObjectKind() unversioned.ObjectKind

type ResourceAccessReviewResponse

+ func (obj *ResourceAccessReviewResponse) GetObjectKind() unversioned.ObjectKind

type Role

+ func (obj *Role) GetObjectKind() unversioned.ObjectKind

type RoleBinding

+ func (obj *RoleBinding) GetObjectKind() unversioned.ObjectKind

type RoleBindingList

+ func (obj *RoleBindingList) GetObjectKind() unversioned.ObjectKind

type RoleList

+ func (obj *RoleList) GetObjectKind() unversioned.ObjectKind

type SubjectAccessReview

+ func (obj *SubjectAccessReview) GetObjectKind() unversioned.ObjectKind

type SubjectAccessReviewResponse

+ func (obj *SubjectAccessReviewResponse) GetObjectKind() unversioned.ObjectKind

Feb 6, 2016

Changes in this version

+ var SchemeGroupVersion = unversioned.GroupVersion

+ func Kind(kind string) unversioned.GroupKind

+ func Resource(resource string) unversioned.GroupResource

Jan 18, 2016

Changes in this version

+ func NormalizeResources(rawResources sets.String) sets.String

Nov 7, 2015 GO-2022-0854

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

Changes in this version

+ func ClusterPolicyBindingToSelectableFields(policyBinding *ClusterPolicyBinding) fields.Set

+ func ClusterPolicyToSelectableFields(policy *ClusterPolicy) fields.Set

+ func PolicyBindingToSelectableFields(policyBinding *PolicyBinding) fields.Set

+ func PolicyToSelectableFields(policy *Policy) fields.Set

+ func RoleBindingToSelectableFields(roleBinding *RoleBinding) fields.Set

+ func RoleToSelectableFields(role *Role) fields.Set

Oct 29, 2015 GO-2022-0854

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

Changes in this version

+ const APIGroupAll

+ const APIGroupExtensions

+ const NodeLogResource

+ const NodeMetricsResource

+ const NodeStatsResource

type PolicyRule

+ APIGroups []string

Sep 13, 2015 GO-2022-0854

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

Aug 24, 2015 GO-2022-0854 +1 more

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

  GO-2022-0875: Denial of Service in OpenShift Origin in github.com/openshift/origin

Changes in this version

+ const GroupKind

+ const ServiceAccountKind

+ const SystemGroupKind

+ const SystemUserKind

+ const UserKind

+ func BuildSubjects(users, groups []string, ...) []kapi.ObjectReference

+ func StringSubjectsFor(currentNamespace string, subjects []kapi.ObjectReference) ([]string, []string)

+ func SubjectsStrings(currentNamespace string, subjects []kapi.ObjectReference) ([]string, []string, []string, []string)

+ type AuthorizationAttributes struct

+ Content kruntime.EmbeddedObject

+ Namespace string

+ Resource string

+ ResourceName string

+ Verb string

type ClusterRoleBinding

+ Subjects []kapi.ObjectReference

+ type LocalResourceAccessReview struct

+ Action AuthorizationAttributes

+ func (*LocalResourceAccessReview) IsAnAPIObject()

+ type LocalSubjectAccessReview struct

+ Action AuthorizationAttributes

+ Groups util.StringSet

+ User string

+ func (*LocalSubjectAccessReview) IsAnAPIObject()

type ResourceAccessReview

+ Action AuthorizationAttributes

type RoleBinding

+ Subjects []kapi.ObjectReference

type SubjectAccessReview

+ Action AuthorizationAttributes

Jul 29, 2015 GO-2022-0854 +1 more

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

  GO-2022-0875: Denial of Service in OpenShift Origin in github.com/openshift/origin

Jul 20, 2015 GO-2022-0854 +1 more

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

  GO-2022-0875: Denial of Service in OpenShift Origin in github.com/openshift/origin

Jul 14, 2015 GO-2022-0854 +1 more

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

  GO-2022-0875: Denial of Service in OpenShift Origin in github.com/openshift/origin

Jun 30, 2015 GO-2022-0854 +1 more

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

  GO-2022-0875: Denial of Service in OpenShift Origin in github.com/openshift/origin

Jun 18, 2015 GO-2022-0854 +1 more

  GO-2022-0854: Authorization bypass in Openshift in github.com/openshift/origin

  GO-2022-0875: Denial of Service in OpenShift Origin in github.com/openshift/origin

Changes in this version

+ const BuildGroupName

+ const CustomBuildResource

+ const DeploymentGroupName

+ const DockerBuildResource

+ const EscalatingResourcesGroupName

+ const ImageGroupName

+ const KubeAllGroupName

+ const KubeEscalatingViewableGroupName

+ const KubeExposedGroupName

+ const KubeInternalsGroupName

+ const KubeNonEscalatingViewableGroupName

+ const KubeStatusGroupName

+ const NonEscalatingResourcesGroupName

+ const NonResourceAll

+ const OAuthGroupName

+ const OpenshiftAllGroupName

+ const OpenshiftEscalatingViewableGroupName

+ const OpenshiftExposedGroupName

+ const OpenshiftNonEscalatingViewableGroupName

+ const OpenshiftStatusGroupName

+ const PermissionGrantingGroupName

+ const PolicyName

+ const PolicyOwnerGroupName

+ const QuotaGroupName

+ const ResourceAll

+ const ResourceGroupPrefix

+ const SDNGroupName

+ const SourceBuildResource

+ const TemplateGroupName

+ const UserGroupName

+ const VerbAll

+ var ClusterPolicyBindingName = GetPolicyBindingName("")

+ var GroupsToResources = map[string][]string

+ func ExpandResources(rawResources kutil.StringSet) kutil.StringSet

+ func GetPolicyBindingName(policyRefNamespace string) string

+ func ToClusterPolicyRef(in kapi.ObjectReference) kapi.ObjectReference

+ func ToClusterRoleBindingMap(in map[string]*RoleBinding) map[string]*ClusterRoleBinding

+ func ToClusterRoleMap(in map[string]*Role) map[string]*ClusterRole

+ func ToClusterRoleRef(in kapi.ObjectReference) kapi.ObjectReference

+ func ToPolicyRef(in kapi.ObjectReference) kapi.ObjectReference

+ func ToRoleBindingMap(in map[string]*ClusterRoleBinding) map[string]*RoleBinding

+ func ToRoleMap(in map[string]*ClusterRole) map[string]*Role

+ func ToRoleRef(in kapi.ObjectReference) kapi.ObjectReference

+ type ClusterPolicy struct

+ LastModified util.Time

+ Roles map[string]*ClusterRole

+ func ToClusterPolicy(in *Policy) *ClusterPolicy

+ func (*ClusterPolicy) IsAnAPIObject()

+ type ClusterPolicyBinding struct

+ LastModified util.Time

+ PolicyRef kapi.ObjectReference

+ RoleBindings map[string]*ClusterRoleBinding

+ func ToClusterPolicyBinding(in *PolicyBinding) *ClusterPolicyBinding

+ func (*ClusterPolicyBinding) IsAnAPIObject()

+ type ClusterPolicyBindingList struct

+ Items []ClusterPolicyBinding

+ func ToClusterPolicyBindingList(in *PolicyBindingList) *ClusterPolicyBindingList

+ func (*ClusterPolicyBindingList) IsAnAPIObject()

+ type ClusterPolicyList struct

+ Items []ClusterPolicy

+ func ToClusterPolicyList(in *PolicyList) *ClusterPolicyList

+ func (*ClusterPolicyList) IsAnAPIObject()

+ type ClusterRole struct

+ Rules []PolicyRule

+ func ToClusterRole(in *Role) *ClusterRole

+ func (*ClusterRole) IsAnAPIObject()

+ type ClusterRoleBinding struct

+ Groups util.StringSet

+ RoleRef kapi.ObjectReference

+ Users util.StringSet

+ func ToClusterRoleBinding(in *RoleBinding) *ClusterRoleBinding

+ func (*ClusterRoleBinding) IsAnAPIObject()

+ type ClusterRoleBindingList struct

+ Items []ClusterRoleBinding

+ func ToClusterRoleBindingList(in *RoleBindingList) *ClusterRoleBindingList

+ func (*ClusterRoleBindingList) IsAnAPIObject()

+ type ClusterRoleList struct

+ Items []ClusterRole

+ func ToClusterRoleList(in *RoleList) *ClusterRoleList

+ func (*ClusterRoleList) IsAnAPIObject()

+ type IsPersonalSubjectAccessReview struct

+ func (*IsPersonalSubjectAccessReview) IsAnAPIObject()

+ type Policy struct

+ LastModified util.Time

+ Roles map[string]*Role

+ func ToPolicy(in *ClusterPolicy) *Policy

+ func (*Policy) IsAnAPIObject()

+ type PolicyBinding struct

+ LastModified util.Time

+ PolicyRef kapi.ObjectReference

+ RoleBindings map[string]*RoleBinding

+ func ToPolicyBinding(in *ClusterPolicyBinding) *PolicyBinding

+ func (*PolicyBinding) IsAnAPIObject()

+ type PolicyBindingList struct

+ Items []PolicyBinding

+ func ToPolicyBindingList(in *ClusterPolicyBindingList) *PolicyBindingList

+ func (*PolicyBindingList) IsAnAPIObject()

+ type PolicyBindingSorter []PolicyBinding

+ func (s PolicyBindingSorter) Len() int

+ func (s PolicyBindingSorter) Less(i, j int) bool

+ func (s PolicyBindingSorter) Swap(i, j int)

+ type PolicyList struct

+ Items []Policy

+ func ToPolicyList(in *ClusterPolicyList) *PolicyList

+ func (*PolicyList) IsAnAPIObject()

+ type PolicyRule struct

+ AttributeRestrictions kruntime.EmbeddedObject

+ NonResourceURLs util.StringSet

+ ResourceNames util.StringSet

+ Resources util.StringSet

+ Verbs util.StringSet

+ func (r PolicyRule) String() string

+ type ResourceAccessReview struct

+ Content kruntime.EmbeddedObject

+ Resource string

+ ResourceName string

+ Verb string

+ func (*ResourceAccessReview) IsAnAPIObject()

+ type ResourceAccessReviewResponse struct

+ Groups util.StringSet

+ Namespace string

+ Users util.StringSet

+ func (*ResourceAccessReviewResponse) IsAnAPIObject()

+ type Role struct

+ Rules []PolicyRule

+ func ToRole(in *ClusterRole) *Role

+ func (*Role) IsAnAPIObject()

+ type RoleBinding struct

+ Groups util.StringSet

+ RoleRef kapi.ObjectReference

+ Users util.StringSet

+ func SortRoleBindings(roleBindingMap map[string]*RoleBinding, reverse bool) []*RoleBinding

+ func ToRoleBinding(in *ClusterRoleBinding) *RoleBinding

+ func (*RoleBinding) IsAnAPIObject()

+ type RoleBindingList struct

+ Items []RoleBinding

+ func ToRoleBindingList(in *ClusterRoleBindingList) *RoleBindingList

+ func (*RoleBindingList) IsAnAPIObject()

+ type RoleBindingSorter []*RoleBinding

+ func (s RoleBindingSorter) Len() int

+ func (s RoleBindingSorter) Less(i, j int) bool

+ func (s RoleBindingSorter) Swap(i, j int)

+ type RoleList struct

+ Items []Role

+ func ToRoleList(in *ClusterRoleList) *RoleList

+ func (*RoleList) IsAnAPIObject()

+ type SubjectAccessReview struct

+ Content kruntime.EmbeddedObject

+ Groups util.StringSet

+ Resource string

+ ResourceName string

+ User string

+ Verb string

+ func (*SubjectAccessReview) IsAnAPIObject()

+ type SubjectAccessReviewResponse struct

+ Allowed bool

+ Namespace string

+ Reason string

+ func (*SubjectAccessReviewResponse) IsAnAPIObject()