Documentation ¶
Index ¶
Constants ¶
View Source
const GroupName = "abac.authorization.kubernetes.io"
GroupName is the group name use in this package
Variables ¶
View Source
var ( // SchemeBuilder is the scheme builder with scheme init functions to run for this API package // TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api. SchemeBuilder runtime.SchemeBuilder // AddToScheme is a common registration function for mapping packaged scoped group & version keys to a scheme AddToScheme = localSchemeBuilder.AddToScheme )
View Source
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v0"}
SchemeGroupVersion is the API group version used to register abac v0
Functions ¶
This section is empty.
Types ¶
type Policy ¶
type Policy struct { metav1.TypeMeta `json:",inline"` // User is the username this rule applies to. // Either user or group is required to match the request. // "*" matches all users. // +optional User string `json:"user,omitempty"` // Group is the group this rule applies to. // Either user or group is required to match the request. // "*" matches all groups. // +optional Group string `json:"group,omitempty"` // Readonly matches readonly requests when true, and all requests when false // +optional Readonly bool `json:"readonly,omitempty"` // Resource is the name of a resource // "*" matches all resources // +optional Resource string `json:"resource,omitempty"` // Namespace is the name of a namespace // "*" matches all namespaces (including unnamespaced requests) // +optional Namespace string `json:"namespace,omitempty"` }
Policy contains a single ABAC policy rule
func (*Policy) DeepCopy ¶
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Policy.
func (*Policy) DeepCopyInto ¶
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Policy) DeepCopyObject ¶
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
Click to show internal directories.
Click to hide internal directories.