rbac

Documentation

Index

• Constants
• type Manager
  • func (r *Manager) EnsureClusterRole(ctx context.Context, roleName string) (err error)
  • func (r *Manager) EnsureClusterRoleBindings(ctx context.Context) (err error)
  • func (r *Manager) Reconcile(ctx context.Context, request reconcile.Request) (res reconcile.Result, err error)
  • func (r *Manager) SetupWithManager(ctx context.Context, mgr ctrl.Manager, configurationName string) (err error)
  • func (r *Manager) Start(ctx context.Context) error

Constants

const (
	ProvisionerRoleName = "capsule-namespace-provisioner"
	DeleterRoleName     = "capsule-namespace-deleter"
)

Types

type Manager

type Manager struct {
	Log           logr.Logger
	Client        client.Client
	Configuration configuration.Configuration
}

func (*Manager) EnsureClusterRole

func (r *Manager) EnsureClusterRole(ctx context.Context, roleName string) (err error)

func (*Manager) EnsureClusterRoleBindings

func (r *Manager) EnsureClusterRoleBindings(ctx context.Context) (err error)

func (*Manager) Reconcile

func (r *Manager) Reconcile(ctx context.Context, request reconcile.Request) (res reconcile.Result, err error)

Reconcile serves both required ClusterRole and ClusterRoleBinding resources: that's ok, we're watching for multiple Resource kinds and we're just interested to the ones with the said name since they're bounded together.

func (*Manager) SetupWithManager

func (r *Manager) SetupWithManager(ctx context.Context, mgr ctrl.Manager, configurationName string) (err error)

func (*Manager) Start

func (r *Manager) Start(ctx context.Context) error

Start is the Runnable function triggered upon Manager start-up to perform the first RBAC reconciliation since we're not creating empty CR and CRB upon Capsule installation: it's a run-once task, since the reconciliation is handled by the Reconciler implemented interface.