types

Documentation

Index

• Variables
• type APIVerb
• type APIVerbGroup
  • func ReadVerbGroup() APIVerbGroup
  • func ReadWriteVerbGroup() APIVerbGroup
• type NameOrUInt
• type PermissionScope
• type Policy
• type PolicyDocument
• type ScopeTree

Variables

var AdminPolicy = []*PolicyDocument{
	{
		Scope: ProjectScope,
		Verbs: ReadWriteVerbGroup(),
	},
}

var DeveloperPolicy = []*PolicyDocument{
	{
		Scope: ProjectScope,
		Verbs: ReadWriteVerbGroup(),
		Children: map[PermissionScope]*PolicyDocument{
			SettingsScope: {
				Scope: SettingsScope,
				Verbs: ReadVerbGroup(),
			},
		},
	},
}

var ScopeHeirarchy = ScopeTree{
	ProjectScope: {
		ClusterScope: {
			NamespaceScope: {
				ApplicationScope: {},
			},
		},
		SettingsScope: {},
	},
}

 ScopeHeirarchy describes the scope tree:
			Project
		   /	   \
		Cluster   Settings
		/
	Namespace
       |
	 Release

var ViewerPolicy = []*PolicyDocument{
	{
		Scope: ProjectScope,
		Verbs: ReadVerbGroup(),
		Children: map[PermissionScope]*PolicyDocument{
			SettingsScope: {
				Scope: SettingsScope,
				Verbs: []APIVerb{},
			},
		},
	},
}

Types

type APIVerb

type APIVerb string

const (
	APIVerbGet    APIVerb = "get"
	APIVerbCreate APIVerb = "create"
	APIVerbList   APIVerb = "list"
	APIVerbUpdate APIVerb = "update"
	APIVerbDelete APIVerb = "delete"
)

type APIVerbGroup

type APIVerbGroup []APIVerb

func ReadVerbGroup

func ReadVerbGroup() APIVerbGroup

func ReadWriteVerbGroup

func ReadWriteVerbGroup() APIVerbGroup

type NameOrUInt

type NameOrUInt struct {
	Name string `json:"name"`
	UInt uint   `json:"uint"`
}

type PermissionScope

type PermissionScope string

const (
	UserScope        PermissionScope = "user"
	ProjectScope     PermissionScope = "project"
	ClusterScope     PermissionScope = "cluster"
	NamespaceScope   PermissionScope = "namespace"
	SettingsScope    PermissionScope = "settings"
	ApplicationScope PermissionScope = "application"
)

type Policy

type Policy []*PolicyDocument

type PolicyDocument

type PolicyDocument struct {
	Scope     PermissionScope                     `json:"scope"`
	Resources []NameOrUInt                        `json:"resources"`
	Verbs     []APIVerb                           `json:"verbs"`
	Children  map[PermissionScope]*PolicyDocument `json:"children"`
}

type ScopeTree

type ScopeTree map[PermissionScope]ScopeTree