rbac

Documentation

Index

• func GenerateClusterRole() *v1beta1.ClusterRole
• func GenerateClusterRoleBindingByTenant(tenant string) *v1beta1.ClusterRoleBinding
• func GenerateRoleBinding(namespace, tenant string) *v1beta1.RoleBinding
• func GenerateRoleByNamespace(namespace string) *v1beta1.Role
• func GenerateServiceAccountRoleBinding(namespace, tenant string) *v1beta1.RoleBinding

Functions

func GenerateClusterRole

func GenerateClusterRole() *v1beta1.ClusterRole

GenerateClusterRole generates namespace-creater ClusterRole which has the permission of namespaces resource.

func GenerateClusterRoleBindingByTenant

func GenerateClusterRoleBindingByTenant(tenant string) *v1beta1.ClusterRoleBinding

GenerateClusterRoleBindingByTenant generate ClusterRoleBinding which allows anyone in the "tenant" group to create namespace.

func GenerateRoleBinding

func GenerateRoleBinding(namespace, tenant string) *v1beta1.RoleBinding

GenerateRoleBinding generates rolebinding which allows user "tenant" has deault-role in the tenant namespace.

func GenerateRoleByNamespace

func GenerateRoleByNamespace(namespace string) *v1beta1.Role

GenerateRoleByNamespace generates default-role which has all the permissions in the namespace.

func GenerateServiceAccountRoleBinding

func GenerateServiceAccountRoleBinding(namespace, tenant string) *v1beta1.RoleBinding

GenerateServiceAccountRoleBinding generates rolebinding of service account in the namespace.