v1

package
v3.24.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Mar 16, 2023 License: Apache-2.0 Imports: 8 Imported by: 1

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type LocalSubjectAccessReview

type LocalSubjectAccessReview struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrOutput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpecOutput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrOutput `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func GetLocalSubjectAccessReview

func GetLocalSubjectAccessReview(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *LocalSubjectAccessReviewState, opts ...pulumi.ResourceOption) (*LocalSubjectAccessReview, error)

GetLocalSubjectAccessReview gets an existing LocalSubjectAccessReview resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewLocalSubjectAccessReview

func NewLocalSubjectAccessReview(ctx *pulumi.Context,
	name string, args *LocalSubjectAccessReviewArgs, opts ...pulumi.ResourceOption) (*LocalSubjectAccessReview, error)

NewLocalSubjectAccessReview registers a new resource with the given unique name, arguments, and options.

func (*LocalSubjectAccessReview) ElementType

func (*LocalSubjectAccessReview) ElementType() reflect.Type

func (*LocalSubjectAccessReview) ToLocalSubjectAccessReviewOutput

func (i *LocalSubjectAccessReview) ToLocalSubjectAccessReviewOutput() LocalSubjectAccessReviewOutput

func (*LocalSubjectAccessReview) ToLocalSubjectAccessReviewOutputWithContext

func (i *LocalSubjectAccessReview) ToLocalSubjectAccessReviewOutputWithContext(ctx context.Context) LocalSubjectAccessReviewOutput

type LocalSubjectAccessReviewArgs

type LocalSubjectAccessReviewArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpecInput
}

The set of arguments for constructing a LocalSubjectAccessReview resource.

func (LocalSubjectAccessReviewArgs) ElementType

type LocalSubjectAccessReviewArray

type LocalSubjectAccessReviewArray []LocalSubjectAccessReviewInput

func (LocalSubjectAccessReviewArray) ElementType

func (LocalSubjectAccessReviewArray) ToLocalSubjectAccessReviewArrayOutput

func (i LocalSubjectAccessReviewArray) ToLocalSubjectAccessReviewArrayOutput() LocalSubjectAccessReviewArrayOutput

func (LocalSubjectAccessReviewArray) ToLocalSubjectAccessReviewArrayOutputWithContext

func (i LocalSubjectAccessReviewArray) ToLocalSubjectAccessReviewArrayOutputWithContext(ctx context.Context) LocalSubjectAccessReviewArrayOutput

type LocalSubjectAccessReviewArrayInput

type LocalSubjectAccessReviewArrayInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewArrayOutput() LocalSubjectAccessReviewArrayOutput
	ToLocalSubjectAccessReviewArrayOutputWithContext(context.Context) LocalSubjectAccessReviewArrayOutput
}

LocalSubjectAccessReviewArrayInput is an input type that accepts LocalSubjectAccessReviewArray and LocalSubjectAccessReviewArrayOutput values. You can construct a concrete instance of `LocalSubjectAccessReviewArrayInput` via:

LocalSubjectAccessReviewArray{ LocalSubjectAccessReviewArgs{...} }

type LocalSubjectAccessReviewArrayOutput

type LocalSubjectAccessReviewArrayOutput struct{ *pulumi.OutputState }

func (LocalSubjectAccessReviewArrayOutput) ElementType

func (LocalSubjectAccessReviewArrayOutput) Index

func (LocalSubjectAccessReviewArrayOutput) ToLocalSubjectAccessReviewArrayOutput

func (o LocalSubjectAccessReviewArrayOutput) ToLocalSubjectAccessReviewArrayOutput() LocalSubjectAccessReviewArrayOutput

func (LocalSubjectAccessReviewArrayOutput) ToLocalSubjectAccessReviewArrayOutputWithContext

func (o LocalSubjectAccessReviewArrayOutput) ToLocalSubjectAccessReviewArrayOutputWithContext(ctx context.Context) LocalSubjectAccessReviewArrayOutput

type LocalSubjectAccessReviewInput

type LocalSubjectAccessReviewInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewOutput() LocalSubjectAccessReviewOutput
	ToLocalSubjectAccessReviewOutputWithContext(ctx context.Context) LocalSubjectAccessReviewOutput
}

type LocalSubjectAccessReviewMap

type LocalSubjectAccessReviewMap map[string]LocalSubjectAccessReviewInput

func (LocalSubjectAccessReviewMap) ElementType

func (LocalSubjectAccessReviewMap) ToLocalSubjectAccessReviewMapOutput

func (i LocalSubjectAccessReviewMap) ToLocalSubjectAccessReviewMapOutput() LocalSubjectAccessReviewMapOutput

func (LocalSubjectAccessReviewMap) ToLocalSubjectAccessReviewMapOutputWithContext

func (i LocalSubjectAccessReviewMap) ToLocalSubjectAccessReviewMapOutputWithContext(ctx context.Context) LocalSubjectAccessReviewMapOutput

type LocalSubjectAccessReviewMapInput

type LocalSubjectAccessReviewMapInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewMapOutput() LocalSubjectAccessReviewMapOutput
	ToLocalSubjectAccessReviewMapOutputWithContext(context.Context) LocalSubjectAccessReviewMapOutput
}

LocalSubjectAccessReviewMapInput is an input type that accepts LocalSubjectAccessReviewMap and LocalSubjectAccessReviewMapOutput values. You can construct a concrete instance of `LocalSubjectAccessReviewMapInput` via:

LocalSubjectAccessReviewMap{ "key": LocalSubjectAccessReviewArgs{...} }

type LocalSubjectAccessReviewMapOutput

type LocalSubjectAccessReviewMapOutput struct{ *pulumi.OutputState }

func (LocalSubjectAccessReviewMapOutput) ElementType

func (LocalSubjectAccessReviewMapOutput) MapIndex

func (LocalSubjectAccessReviewMapOutput) ToLocalSubjectAccessReviewMapOutput

func (o LocalSubjectAccessReviewMapOutput) ToLocalSubjectAccessReviewMapOutput() LocalSubjectAccessReviewMapOutput

func (LocalSubjectAccessReviewMapOutput) ToLocalSubjectAccessReviewMapOutputWithContext

func (o LocalSubjectAccessReviewMapOutput) ToLocalSubjectAccessReviewMapOutputWithContext(ctx context.Context) LocalSubjectAccessReviewMapOutput

type LocalSubjectAccessReviewOutput

type LocalSubjectAccessReviewOutput struct{ *pulumi.OutputState }

func (LocalSubjectAccessReviewOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (LocalSubjectAccessReviewOutput) ElementType

func (LocalSubjectAccessReviewOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (LocalSubjectAccessReviewOutput) Metadata added in v3.19.1

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (LocalSubjectAccessReviewOutput) Spec added in v3.19.1

Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.

func (LocalSubjectAccessReviewOutput) Status added in v3.19.1

Status is filled in by the server and indicates whether the request is allowed or not

func (LocalSubjectAccessReviewOutput) ToLocalSubjectAccessReviewOutput

func (o LocalSubjectAccessReviewOutput) ToLocalSubjectAccessReviewOutput() LocalSubjectAccessReviewOutput

func (LocalSubjectAccessReviewOutput) ToLocalSubjectAccessReviewOutputWithContext

func (o LocalSubjectAccessReviewOutput) ToLocalSubjectAccessReviewOutputWithContext(ctx context.Context) LocalSubjectAccessReviewOutput

type LocalSubjectAccessReviewPatch added in v3.20.0

type LocalSubjectAccessReviewPatch struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrOutput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpecPatchPtrOutput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrOutput `pulumi:"status"`
}

Patch resources are used to modify existing Kubernetes resources by using Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource. Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi. LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func GetLocalSubjectAccessReviewPatch added in v3.20.0

func GetLocalSubjectAccessReviewPatch(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *LocalSubjectAccessReviewPatchState, opts ...pulumi.ResourceOption) (*LocalSubjectAccessReviewPatch, error)

GetLocalSubjectAccessReviewPatch gets an existing LocalSubjectAccessReviewPatch resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewLocalSubjectAccessReviewPatch added in v3.20.0

func NewLocalSubjectAccessReviewPatch(ctx *pulumi.Context,
	name string, args *LocalSubjectAccessReviewPatchArgs, opts ...pulumi.ResourceOption) (*LocalSubjectAccessReviewPatch, error)

NewLocalSubjectAccessReviewPatch registers a new resource with the given unique name, arguments, and options.

func (*LocalSubjectAccessReviewPatch) ElementType added in v3.20.0

func (*LocalSubjectAccessReviewPatch) ToLocalSubjectAccessReviewPatchOutput added in v3.20.0

func (i *LocalSubjectAccessReviewPatch) ToLocalSubjectAccessReviewPatchOutput() LocalSubjectAccessReviewPatchOutput

func (*LocalSubjectAccessReviewPatch) ToLocalSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (i *LocalSubjectAccessReviewPatch) ToLocalSubjectAccessReviewPatchOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchOutput

type LocalSubjectAccessReviewPatchArgs added in v3.20.0

type LocalSubjectAccessReviewPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpecPatchPtrInput
}

The set of arguments for constructing a LocalSubjectAccessReviewPatch resource.

func (LocalSubjectAccessReviewPatchArgs) ElementType added in v3.20.0

type LocalSubjectAccessReviewPatchArray added in v3.20.0

type LocalSubjectAccessReviewPatchArray []LocalSubjectAccessReviewPatchInput

func (LocalSubjectAccessReviewPatchArray) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchArray) ToLocalSubjectAccessReviewPatchArrayOutput added in v3.20.0

func (i LocalSubjectAccessReviewPatchArray) ToLocalSubjectAccessReviewPatchArrayOutput() LocalSubjectAccessReviewPatchArrayOutput

func (LocalSubjectAccessReviewPatchArray) ToLocalSubjectAccessReviewPatchArrayOutputWithContext added in v3.20.0

func (i LocalSubjectAccessReviewPatchArray) ToLocalSubjectAccessReviewPatchArrayOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchArrayOutput

type LocalSubjectAccessReviewPatchArrayInput added in v3.20.0

type LocalSubjectAccessReviewPatchArrayInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewPatchArrayOutput() LocalSubjectAccessReviewPatchArrayOutput
	ToLocalSubjectAccessReviewPatchArrayOutputWithContext(context.Context) LocalSubjectAccessReviewPatchArrayOutput
}

LocalSubjectAccessReviewPatchArrayInput is an input type that accepts LocalSubjectAccessReviewPatchArray and LocalSubjectAccessReviewPatchArrayOutput values. You can construct a concrete instance of `LocalSubjectAccessReviewPatchArrayInput` via:

LocalSubjectAccessReviewPatchArray{ LocalSubjectAccessReviewPatchArgs{...} }

type LocalSubjectAccessReviewPatchArrayOutput added in v3.20.0

type LocalSubjectAccessReviewPatchArrayOutput struct{ *pulumi.OutputState }

func (LocalSubjectAccessReviewPatchArrayOutput) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchArrayOutput) Index added in v3.20.0

func (LocalSubjectAccessReviewPatchArrayOutput) ToLocalSubjectAccessReviewPatchArrayOutput added in v3.20.0

func (o LocalSubjectAccessReviewPatchArrayOutput) ToLocalSubjectAccessReviewPatchArrayOutput() LocalSubjectAccessReviewPatchArrayOutput

func (LocalSubjectAccessReviewPatchArrayOutput) ToLocalSubjectAccessReviewPatchArrayOutputWithContext added in v3.20.0

func (o LocalSubjectAccessReviewPatchArrayOutput) ToLocalSubjectAccessReviewPatchArrayOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchArrayOutput

type LocalSubjectAccessReviewPatchInput added in v3.20.0

type LocalSubjectAccessReviewPatchInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewPatchOutput() LocalSubjectAccessReviewPatchOutput
	ToLocalSubjectAccessReviewPatchOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchOutput
}

type LocalSubjectAccessReviewPatchMap added in v3.20.0

type LocalSubjectAccessReviewPatchMap map[string]LocalSubjectAccessReviewPatchInput

func (LocalSubjectAccessReviewPatchMap) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchMap) ToLocalSubjectAccessReviewPatchMapOutput added in v3.20.0

func (i LocalSubjectAccessReviewPatchMap) ToLocalSubjectAccessReviewPatchMapOutput() LocalSubjectAccessReviewPatchMapOutput

func (LocalSubjectAccessReviewPatchMap) ToLocalSubjectAccessReviewPatchMapOutputWithContext added in v3.20.0

func (i LocalSubjectAccessReviewPatchMap) ToLocalSubjectAccessReviewPatchMapOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchMapOutput

type LocalSubjectAccessReviewPatchMapInput added in v3.20.0

type LocalSubjectAccessReviewPatchMapInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewPatchMapOutput() LocalSubjectAccessReviewPatchMapOutput
	ToLocalSubjectAccessReviewPatchMapOutputWithContext(context.Context) LocalSubjectAccessReviewPatchMapOutput
}

LocalSubjectAccessReviewPatchMapInput is an input type that accepts LocalSubjectAccessReviewPatchMap and LocalSubjectAccessReviewPatchMapOutput values. You can construct a concrete instance of `LocalSubjectAccessReviewPatchMapInput` via:

LocalSubjectAccessReviewPatchMap{ "key": LocalSubjectAccessReviewPatchArgs{...} }

type LocalSubjectAccessReviewPatchMapOutput added in v3.20.0

type LocalSubjectAccessReviewPatchMapOutput struct{ *pulumi.OutputState }

func (LocalSubjectAccessReviewPatchMapOutput) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchMapOutput) MapIndex added in v3.20.0

func (LocalSubjectAccessReviewPatchMapOutput) ToLocalSubjectAccessReviewPatchMapOutput added in v3.20.0

func (o LocalSubjectAccessReviewPatchMapOutput) ToLocalSubjectAccessReviewPatchMapOutput() LocalSubjectAccessReviewPatchMapOutput

func (LocalSubjectAccessReviewPatchMapOutput) ToLocalSubjectAccessReviewPatchMapOutputWithContext added in v3.20.0

func (o LocalSubjectAccessReviewPatchMapOutput) ToLocalSubjectAccessReviewPatchMapOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchMapOutput

type LocalSubjectAccessReviewPatchOutput added in v3.20.0

type LocalSubjectAccessReviewPatchOutput struct{ *pulumi.OutputState }

func (LocalSubjectAccessReviewPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (LocalSubjectAccessReviewPatchOutput) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (LocalSubjectAccessReviewPatchOutput) Metadata added in v3.20.0

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (LocalSubjectAccessReviewPatchOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.

func (LocalSubjectAccessReviewPatchOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (LocalSubjectAccessReviewPatchOutput) ToLocalSubjectAccessReviewPatchOutput added in v3.20.0

func (o LocalSubjectAccessReviewPatchOutput) ToLocalSubjectAccessReviewPatchOutput() LocalSubjectAccessReviewPatchOutput

func (LocalSubjectAccessReviewPatchOutput) ToLocalSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (o LocalSubjectAccessReviewPatchOutput) ToLocalSubjectAccessReviewPatchOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchOutput

type LocalSubjectAccessReviewPatchState added in v3.20.0

type LocalSubjectAccessReviewPatchState struct {
}

func (LocalSubjectAccessReviewPatchState) ElementType added in v3.20.0

type LocalSubjectAccessReviewPatchType added in v3.20.0

type LocalSubjectAccessReviewPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec *SubjectAccessReviewSpecPatch `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatusPatch `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

type LocalSubjectAccessReviewPatchTypeArgs added in v3.20.0

type LocalSubjectAccessReviewPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpecPatchPtrInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrInput `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func (LocalSubjectAccessReviewPatchTypeArgs) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchTypeArgs) ToLocalSubjectAccessReviewPatchTypeOutput added in v3.20.0

func (i LocalSubjectAccessReviewPatchTypeArgs) ToLocalSubjectAccessReviewPatchTypeOutput() LocalSubjectAccessReviewPatchTypeOutput

func (LocalSubjectAccessReviewPatchTypeArgs) ToLocalSubjectAccessReviewPatchTypeOutputWithContext added in v3.20.0

func (i LocalSubjectAccessReviewPatchTypeArgs) ToLocalSubjectAccessReviewPatchTypeOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchTypeOutput

type LocalSubjectAccessReviewPatchTypeInput added in v3.20.0

type LocalSubjectAccessReviewPatchTypeInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewPatchTypeOutput() LocalSubjectAccessReviewPatchTypeOutput
	ToLocalSubjectAccessReviewPatchTypeOutputWithContext(context.Context) LocalSubjectAccessReviewPatchTypeOutput
}

LocalSubjectAccessReviewPatchTypeInput is an input type that accepts LocalSubjectAccessReviewPatchTypeArgs and LocalSubjectAccessReviewPatchTypeOutput values. You can construct a concrete instance of `LocalSubjectAccessReviewPatchTypeInput` via:

LocalSubjectAccessReviewPatchTypeArgs{...}

type LocalSubjectAccessReviewPatchTypeOutput added in v3.20.0

type LocalSubjectAccessReviewPatchTypeOutput struct{ *pulumi.OutputState }

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func (LocalSubjectAccessReviewPatchTypeOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (LocalSubjectAccessReviewPatchTypeOutput) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchTypeOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (LocalSubjectAccessReviewPatchTypeOutput) Metadata added in v3.20.0

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (LocalSubjectAccessReviewPatchTypeOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.

func (LocalSubjectAccessReviewPatchTypeOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (LocalSubjectAccessReviewPatchTypeOutput) ToLocalSubjectAccessReviewPatchTypeOutput added in v3.20.0

func (o LocalSubjectAccessReviewPatchTypeOutput) ToLocalSubjectAccessReviewPatchTypeOutput() LocalSubjectAccessReviewPatchTypeOutput

func (LocalSubjectAccessReviewPatchTypeOutput) ToLocalSubjectAccessReviewPatchTypeOutputWithContext added in v3.20.0

func (o LocalSubjectAccessReviewPatchTypeOutput) ToLocalSubjectAccessReviewPatchTypeOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchTypeOutput

type LocalSubjectAccessReviewState

type LocalSubjectAccessReviewState struct {
}

func (LocalSubjectAccessReviewState) ElementType

type LocalSubjectAccessReviewType

type LocalSubjectAccessReviewType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpec `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatus `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

type LocalSubjectAccessReviewTypeArgs

type LocalSubjectAccessReviewTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpecInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrInput `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func (LocalSubjectAccessReviewTypeArgs) ElementType

func (LocalSubjectAccessReviewTypeArgs) ToLocalSubjectAccessReviewTypeOutput

func (i LocalSubjectAccessReviewTypeArgs) ToLocalSubjectAccessReviewTypeOutput() LocalSubjectAccessReviewTypeOutput

func (LocalSubjectAccessReviewTypeArgs) ToLocalSubjectAccessReviewTypeOutputWithContext

func (i LocalSubjectAccessReviewTypeArgs) ToLocalSubjectAccessReviewTypeOutputWithContext(ctx context.Context) LocalSubjectAccessReviewTypeOutput

type LocalSubjectAccessReviewTypeInput

type LocalSubjectAccessReviewTypeInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewTypeOutput() LocalSubjectAccessReviewTypeOutput
	ToLocalSubjectAccessReviewTypeOutputWithContext(context.Context) LocalSubjectAccessReviewTypeOutput
}

LocalSubjectAccessReviewTypeInput is an input type that accepts LocalSubjectAccessReviewTypeArgs and LocalSubjectAccessReviewTypeOutput values. You can construct a concrete instance of `LocalSubjectAccessReviewTypeInput` via:

LocalSubjectAccessReviewTypeArgs{...}

type LocalSubjectAccessReviewTypeOutput

type LocalSubjectAccessReviewTypeOutput struct{ *pulumi.OutputState }

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func (LocalSubjectAccessReviewTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (LocalSubjectAccessReviewTypeOutput) ElementType

func (LocalSubjectAccessReviewTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (LocalSubjectAccessReviewTypeOutput) Spec

Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.

func (LocalSubjectAccessReviewTypeOutput) Status

Status is filled in by the server and indicates whether the request is allowed or not

func (LocalSubjectAccessReviewTypeOutput) ToLocalSubjectAccessReviewTypeOutput

func (o LocalSubjectAccessReviewTypeOutput) ToLocalSubjectAccessReviewTypeOutput() LocalSubjectAccessReviewTypeOutput

func (LocalSubjectAccessReviewTypeOutput) ToLocalSubjectAccessReviewTypeOutputWithContext

func (o LocalSubjectAccessReviewTypeOutput) ToLocalSubjectAccessReviewTypeOutputWithContext(ctx context.Context) LocalSubjectAccessReviewTypeOutput

type NonResourceAttributes

type NonResourceAttributes struct {
	// Path is the URL path of the request
	Path *string `pulumi:"path"`
	// Verb is the standard HTTP verb
	Verb *string `pulumi:"verb"`
}

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

type NonResourceAttributesArgs

type NonResourceAttributesArgs struct {
	// Path is the URL path of the request
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Verb is the standard HTTP verb
	Verb pulumi.StringPtrInput `pulumi:"verb"`
}

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

func (NonResourceAttributesArgs) ElementType

func (NonResourceAttributesArgs) ElementType() reflect.Type

func (NonResourceAttributesArgs) ToNonResourceAttributesOutput

func (i NonResourceAttributesArgs) ToNonResourceAttributesOutput() NonResourceAttributesOutput

func (NonResourceAttributesArgs) ToNonResourceAttributesOutputWithContext

func (i NonResourceAttributesArgs) ToNonResourceAttributesOutputWithContext(ctx context.Context) NonResourceAttributesOutput

func (NonResourceAttributesArgs) ToNonResourceAttributesPtrOutput

func (i NonResourceAttributesArgs) ToNonResourceAttributesPtrOutput() NonResourceAttributesPtrOutput

func (NonResourceAttributesArgs) ToNonResourceAttributesPtrOutputWithContext

func (i NonResourceAttributesArgs) ToNonResourceAttributesPtrOutputWithContext(ctx context.Context) NonResourceAttributesPtrOutput

type NonResourceAttributesInput

type NonResourceAttributesInput interface {
	pulumi.Input

	ToNonResourceAttributesOutput() NonResourceAttributesOutput
	ToNonResourceAttributesOutputWithContext(context.Context) NonResourceAttributesOutput
}

NonResourceAttributesInput is an input type that accepts NonResourceAttributesArgs and NonResourceAttributesOutput values. You can construct a concrete instance of `NonResourceAttributesInput` via:

NonResourceAttributesArgs{...}

type NonResourceAttributesOutput

type NonResourceAttributesOutput struct{ *pulumi.OutputState }

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

func (NonResourceAttributesOutput) ElementType

func (NonResourceAttributesOutput) Path

Path is the URL path of the request

func (NonResourceAttributesOutput) ToNonResourceAttributesOutput

func (o NonResourceAttributesOutput) ToNonResourceAttributesOutput() NonResourceAttributesOutput

func (NonResourceAttributesOutput) ToNonResourceAttributesOutputWithContext

func (o NonResourceAttributesOutput) ToNonResourceAttributesOutputWithContext(ctx context.Context) NonResourceAttributesOutput

func (NonResourceAttributesOutput) ToNonResourceAttributesPtrOutput

func (o NonResourceAttributesOutput) ToNonResourceAttributesPtrOutput() NonResourceAttributesPtrOutput

func (NonResourceAttributesOutput) ToNonResourceAttributesPtrOutputWithContext

func (o NonResourceAttributesOutput) ToNonResourceAttributesPtrOutputWithContext(ctx context.Context) NonResourceAttributesPtrOutput

func (NonResourceAttributesOutput) Verb

Verb is the standard HTTP verb

type NonResourceAttributesPatch added in v3.20.0

type NonResourceAttributesPatch struct {
	// Path is the URL path of the request
	Path *string `pulumi:"path"`
	// Verb is the standard HTTP verb
	Verb *string `pulumi:"verb"`
}

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

type NonResourceAttributesPatchArgs added in v3.20.0

type NonResourceAttributesPatchArgs struct {
	// Path is the URL path of the request
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Verb is the standard HTTP verb
	Verb pulumi.StringPtrInput `pulumi:"verb"`
}

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

func (NonResourceAttributesPatchArgs) ElementType added in v3.20.0

func (NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchOutput added in v3.20.0

func (i NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchOutput() NonResourceAttributesPatchOutput

func (NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchOutputWithContext added in v3.20.0

func (i NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchOutputWithContext(ctx context.Context) NonResourceAttributesPatchOutput

func (NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchPtrOutput added in v3.20.0

func (i NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchPtrOutput() NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (i NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchPtrOutputWithContext(ctx context.Context) NonResourceAttributesPatchPtrOutput

type NonResourceAttributesPatchInput added in v3.20.0

type NonResourceAttributesPatchInput interface {
	pulumi.Input

	ToNonResourceAttributesPatchOutput() NonResourceAttributesPatchOutput
	ToNonResourceAttributesPatchOutputWithContext(context.Context) NonResourceAttributesPatchOutput
}

NonResourceAttributesPatchInput is an input type that accepts NonResourceAttributesPatchArgs and NonResourceAttributesPatchOutput values. You can construct a concrete instance of `NonResourceAttributesPatchInput` via:

NonResourceAttributesPatchArgs{...}

type NonResourceAttributesPatchOutput added in v3.20.0

type NonResourceAttributesPatchOutput struct{ *pulumi.OutputState }

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

func (NonResourceAttributesPatchOutput) ElementType added in v3.20.0

func (NonResourceAttributesPatchOutput) Path added in v3.20.0

Path is the URL path of the request

func (NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchOutput added in v3.20.0

func (o NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchOutput() NonResourceAttributesPatchOutput

func (NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchOutputWithContext added in v3.20.0

func (o NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchOutputWithContext(ctx context.Context) NonResourceAttributesPatchOutput

func (NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchPtrOutput added in v3.20.0

func (o NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchPtrOutput() NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (o NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchPtrOutputWithContext(ctx context.Context) NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchOutput) Verb added in v3.20.0

Verb is the standard HTTP verb

type NonResourceAttributesPatchPtrInput added in v3.20.0

type NonResourceAttributesPatchPtrInput interface {
	pulumi.Input

	ToNonResourceAttributesPatchPtrOutput() NonResourceAttributesPatchPtrOutput
	ToNonResourceAttributesPatchPtrOutputWithContext(context.Context) NonResourceAttributesPatchPtrOutput
}

NonResourceAttributesPatchPtrInput is an input type that accepts NonResourceAttributesPatchArgs, NonResourceAttributesPatchPtr and NonResourceAttributesPatchPtrOutput values. You can construct a concrete instance of `NonResourceAttributesPatchPtrInput` via:

        NonResourceAttributesPatchArgs{...}

or:

        nil

func NonResourceAttributesPatchPtr added in v3.20.0

type NonResourceAttributesPatchPtrOutput added in v3.20.0

type NonResourceAttributesPatchPtrOutput struct{ *pulumi.OutputState }

func (NonResourceAttributesPatchPtrOutput) Elem added in v3.20.0

func (NonResourceAttributesPatchPtrOutput) ElementType added in v3.20.0

func (NonResourceAttributesPatchPtrOutput) Path added in v3.20.0

Path is the URL path of the request

func (NonResourceAttributesPatchPtrOutput) ToNonResourceAttributesPatchPtrOutput added in v3.20.0

func (o NonResourceAttributesPatchPtrOutput) ToNonResourceAttributesPatchPtrOutput() NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchPtrOutput) ToNonResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (o NonResourceAttributesPatchPtrOutput) ToNonResourceAttributesPatchPtrOutputWithContext(ctx context.Context) NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchPtrOutput) Verb added in v3.20.0

Verb is the standard HTTP verb

type NonResourceAttributesPtrInput

type NonResourceAttributesPtrInput interface {
	pulumi.Input

	ToNonResourceAttributesPtrOutput() NonResourceAttributesPtrOutput
	ToNonResourceAttributesPtrOutputWithContext(context.Context) NonResourceAttributesPtrOutput
}

NonResourceAttributesPtrInput is an input type that accepts NonResourceAttributesArgs, NonResourceAttributesPtr and NonResourceAttributesPtrOutput values. You can construct a concrete instance of `NonResourceAttributesPtrInput` via:

        NonResourceAttributesArgs{...}

or:

        nil

type NonResourceAttributesPtrOutput

type NonResourceAttributesPtrOutput struct{ *pulumi.OutputState }

func (NonResourceAttributesPtrOutput) Elem

func (NonResourceAttributesPtrOutput) ElementType

func (NonResourceAttributesPtrOutput) Path

Path is the URL path of the request

func (NonResourceAttributesPtrOutput) ToNonResourceAttributesPtrOutput

func (o NonResourceAttributesPtrOutput) ToNonResourceAttributesPtrOutput() NonResourceAttributesPtrOutput

func (NonResourceAttributesPtrOutput) ToNonResourceAttributesPtrOutputWithContext

func (o NonResourceAttributesPtrOutput) ToNonResourceAttributesPtrOutputWithContext(ctx context.Context) NonResourceAttributesPtrOutput

func (NonResourceAttributesPtrOutput) Verb

Verb is the standard HTTP verb

type NonResourceRule

type NonResourceRule struct {
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
	NonResourceURLs []string `pulumi:"nonResourceURLs"`
	// Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
	Verbs []string `pulumi:"verbs"`
}

NonResourceRule holds information that describes a rule for the non-resource

type NonResourceRuleArgs

type NonResourceRuleArgs struct {
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
	NonResourceURLs pulumi.StringArrayInput `pulumi:"nonResourceURLs"`
	// Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
	Verbs pulumi.StringArrayInput `pulumi:"verbs"`
}

NonResourceRule holds information that describes a rule for the non-resource

func (NonResourceRuleArgs) ElementType

func (NonResourceRuleArgs) ElementType() reflect.Type

func (NonResourceRuleArgs) ToNonResourceRuleOutput

func (i NonResourceRuleArgs) ToNonResourceRuleOutput() NonResourceRuleOutput

func (NonResourceRuleArgs) ToNonResourceRuleOutputWithContext

func (i NonResourceRuleArgs) ToNonResourceRuleOutputWithContext(ctx context.Context) NonResourceRuleOutput

type NonResourceRuleArray

type NonResourceRuleArray []NonResourceRuleInput

func (NonResourceRuleArray) ElementType

func (NonResourceRuleArray) ElementType() reflect.Type

func (NonResourceRuleArray) ToNonResourceRuleArrayOutput

func (i NonResourceRuleArray) ToNonResourceRuleArrayOutput() NonResourceRuleArrayOutput

func (NonResourceRuleArray) ToNonResourceRuleArrayOutputWithContext

func (i NonResourceRuleArray) ToNonResourceRuleArrayOutputWithContext(ctx context.Context) NonResourceRuleArrayOutput

type NonResourceRuleArrayInput

type NonResourceRuleArrayInput interface {
	pulumi.Input

	ToNonResourceRuleArrayOutput() NonResourceRuleArrayOutput
	ToNonResourceRuleArrayOutputWithContext(context.Context) NonResourceRuleArrayOutput
}

NonResourceRuleArrayInput is an input type that accepts NonResourceRuleArray and NonResourceRuleArrayOutput values. You can construct a concrete instance of `NonResourceRuleArrayInput` via:

NonResourceRuleArray{ NonResourceRuleArgs{...} }

type NonResourceRuleArrayOutput

type NonResourceRuleArrayOutput struct{ *pulumi.OutputState }

func (NonResourceRuleArrayOutput) ElementType

func (NonResourceRuleArrayOutput) ElementType() reflect.Type

func (NonResourceRuleArrayOutput) Index

func (NonResourceRuleArrayOutput) ToNonResourceRuleArrayOutput

func (o NonResourceRuleArrayOutput) ToNonResourceRuleArrayOutput() NonResourceRuleArrayOutput

func (NonResourceRuleArrayOutput) ToNonResourceRuleArrayOutputWithContext

func (o NonResourceRuleArrayOutput) ToNonResourceRuleArrayOutputWithContext(ctx context.Context) NonResourceRuleArrayOutput

type NonResourceRuleInput

type NonResourceRuleInput interface {
	pulumi.Input

	ToNonResourceRuleOutput() NonResourceRuleOutput
	ToNonResourceRuleOutputWithContext(context.Context) NonResourceRuleOutput
}

NonResourceRuleInput is an input type that accepts NonResourceRuleArgs and NonResourceRuleOutput values. You can construct a concrete instance of `NonResourceRuleInput` via:

NonResourceRuleArgs{...}

type NonResourceRuleOutput

type NonResourceRuleOutput struct{ *pulumi.OutputState }

NonResourceRule holds information that describes a rule for the non-resource

func (NonResourceRuleOutput) ElementType

func (NonResourceRuleOutput) ElementType() reflect.Type

func (NonResourceRuleOutput) NonResourceURLs

func (o NonResourceRuleOutput) NonResourceURLs() pulumi.StringArrayOutput

NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. "*" means all.

func (NonResourceRuleOutput) ToNonResourceRuleOutput

func (o NonResourceRuleOutput) ToNonResourceRuleOutput() NonResourceRuleOutput

func (NonResourceRuleOutput) ToNonResourceRuleOutputWithContext

func (o NonResourceRuleOutput) ToNonResourceRuleOutputWithContext(ctx context.Context) NonResourceRuleOutput

func (NonResourceRuleOutput) Verbs

Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. "*" means all.

type NonResourceRulePatch added in v3.20.0

type NonResourceRulePatch struct {
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
	NonResourceURLs []string `pulumi:"nonResourceURLs"`
	// Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
	Verbs []string `pulumi:"verbs"`
}

NonResourceRule holds information that describes a rule for the non-resource

type NonResourceRulePatchArgs added in v3.20.0

type NonResourceRulePatchArgs struct {
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
	NonResourceURLs pulumi.StringArrayInput `pulumi:"nonResourceURLs"`
	// Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
	Verbs pulumi.StringArrayInput `pulumi:"verbs"`
}

NonResourceRule holds information that describes a rule for the non-resource

func (NonResourceRulePatchArgs) ElementType added in v3.20.0

func (NonResourceRulePatchArgs) ElementType() reflect.Type

func (NonResourceRulePatchArgs) ToNonResourceRulePatchOutput added in v3.20.0

func (i NonResourceRulePatchArgs) ToNonResourceRulePatchOutput() NonResourceRulePatchOutput

func (NonResourceRulePatchArgs) ToNonResourceRulePatchOutputWithContext added in v3.20.0

func (i NonResourceRulePatchArgs) ToNonResourceRulePatchOutputWithContext(ctx context.Context) NonResourceRulePatchOutput

type NonResourceRulePatchArray added in v3.20.0

type NonResourceRulePatchArray []NonResourceRulePatchInput

func (NonResourceRulePatchArray) ElementType added in v3.20.0

func (NonResourceRulePatchArray) ElementType() reflect.Type

func (NonResourceRulePatchArray) ToNonResourceRulePatchArrayOutput added in v3.20.0

func (i NonResourceRulePatchArray) ToNonResourceRulePatchArrayOutput() NonResourceRulePatchArrayOutput

func (NonResourceRulePatchArray) ToNonResourceRulePatchArrayOutputWithContext added in v3.20.0

func (i NonResourceRulePatchArray) ToNonResourceRulePatchArrayOutputWithContext(ctx context.Context) NonResourceRulePatchArrayOutput

type NonResourceRulePatchArrayInput added in v3.20.0

type NonResourceRulePatchArrayInput interface {
	pulumi.Input

	ToNonResourceRulePatchArrayOutput() NonResourceRulePatchArrayOutput
	ToNonResourceRulePatchArrayOutputWithContext(context.Context) NonResourceRulePatchArrayOutput
}

NonResourceRulePatchArrayInput is an input type that accepts NonResourceRulePatchArray and NonResourceRulePatchArrayOutput values. You can construct a concrete instance of `NonResourceRulePatchArrayInput` via:

NonResourceRulePatchArray{ NonResourceRulePatchArgs{...} }

type NonResourceRulePatchArrayOutput added in v3.20.0

type NonResourceRulePatchArrayOutput struct{ *pulumi.OutputState }

func (NonResourceRulePatchArrayOutput) ElementType added in v3.20.0

func (NonResourceRulePatchArrayOutput) Index added in v3.20.0

func (NonResourceRulePatchArrayOutput) ToNonResourceRulePatchArrayOutput added in v3.20.0

func (o NonResourceRulePatchArrayOutput) ToNonResourceRulePatchArrayOutput() NonResourceRulePatchArrayOutput

func (NonResourceRulePatchArrayOutput) ToNonResourceRulePatchArrayOutputWithContext added in v3.20.0

func (o NonResourceRulePatchArrayOutput) ToNonResourceRulePatchArrayOutputWithContext(ctx context.Context) NonResourceRulePatchArrayOutput

type NonResourceRulePatchInput added in v3.20.0

type NonResourceRulePatchInput interface {
	pulumi.Input

	ToNonResourceRulePatchOutput() NonResourceRulePatchOutput
	ToNonResourceRulePatchOutputWithContext(context.Context) NonResourceRulePatchOutput
}

NonResourceRulePatchInput is an input type that accepts NonResourceRulePatchArgs and NonResourceRulePatchOutput values. You can construct a concrete instance of `NonResourceRulePatchInput` via:

NonResourceRulePatchArgs{...}

type NonResourceRulePatchOutput added in v3.20.0

type NonResourceRulePatchOutput struct{ *pulumi.OutputState }

NonResourceRule holds information that describes a rule for the non-resource

func (NonResourceRulePatchOutput) ElementType added in v3.20.0

func (NonResourceRulePatchOutput) ElementType() reflect.Type

func (NonResourceRulePatchOutput) NonResourceURLs added in v3.20.0

NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. "*" means all.

func (NonResourceRulePatchOutput) ToNonResourceRulePatchOutput added in v3.20.0

func (o NonResourceRulePatchOutput) ToNonResourceRulePatchOutput() NonResourceRulePatchOutput

func (NonResourceRulePatchOutput) ToNonResourceRulePatchOutputWithContext added in v3.20.0

func (o NonResourceRulePatchOutput) ToNonResourceRulePatchOutputWithContext(ctx context.Context) NonResourceRulePatchOutput

func (NonResourceRulePatchOutput) Verbs added in v3.20.0

Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. "*" means all.

type ResourceAttributes

type ResourceAttributes struct {
	// Group is the API Group of the Resource.  "*" means all.
	Group *string `pulumi:"group"`
	// Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
	Name *string `pulumi:"name"`
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
	Namespace *string `pulumi:"namespace"`
	// Resource is one of the existing resource types.  "*" means all.
	Resource *string `pulumi:"resource"`
	// Subresource is one of the existing resource types.  "" means none.
	Subresource *string `pulumi:"subresource"`
	// Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verb *string `pulumi:"verb"`
	// Version is the API Version of the Resource.  "*" means all.
	Version *string `pulumi:"version"`
}

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

type ResourceAttributesArgs

type ResourceAttributesArgs struct {
	// Group is the API Group of the Resource.  "*" means all.
	Group pulumi.StringPtrInput `pulumi:"group"`
	// Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
	// Resource is one of the existing resource types.  "*" means all.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
	// Subresource is one of the existing resource types.  "" means none.
	Subresource pulumi.StringPtrInput `pulumi:"subresource"`
	// Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verb pulumi.StringPtrInput `pulumi:"verb"`
	// Version is the API Version of the Resource.  "*" means all.
	Version pulumi.StringPtrInput `pulumi:"version"`
}

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

func (ResourceAttributesArgs) ElementType

func (ResourceAttributesArgs) ElementType() reflect.Type

func (ResourceAttributesArgs) ToResourceAttributesOutput

func (i ResourceAttributesArgs) ToResourceAttributesOutput() ResourceAttributesOutput

func (ResourceAttributesArgs) ToResourceAttributesOutputWithContext

func (i ResourceAttributesArgs) ToResourceAttributesOutputWithContext(ctx context.Context) ResourceAttributesOutput

func (ResourceAttributesArgs) ToResourceAttributesPtrOutput

func (i ResourceAttributesArgs) ToResourceAttributesPtrOutput() ResourceAttributesPtrOutput

func (ResourceAttributesArgs) ToResourceAttributesPtrOutputWithContext

func (i ResourceAttributesArgs) ToResourceAttributesPtrOutputWithContext(ctx context.Context) ResourceAttributesPtrOutput

type ResourceAttributesInput

type ResourceAttributesInput interface {
	pulumi.Input

	ToResourceAttributesOutput() ResourceAttributesOutput
	ToResourceAttributesOutputWithContext(context.Context) ResourceAttributesOutput
}

ResourceAttributesInput is an input type that accepts ResourceAttributesArgs and ResourceAttributesOutput values. You can construct a concrete instance of `ResourceAttributesInput` via:

ResourceAttributesArgs{...}

type ResourceAttributesOutput

type ResourceAttributesOutput struct{ *pulumi.OutputState }

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

func (ResourceAttributesOutput) ElementType

func (ResourceAttributesOutput) ElementType() reflect.Type

func (ResourceAttributesOutput) Group

Group is the API Group of the Resource. "*" means all.

func (ResourceAttributesOutput) Name

Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.

func (ResourceAttributesOutput) Namespace

Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview

func (ResourceAttributesOutput) Resource

Resource is one of the existing resource types. "*" means all.

func (ResourceAttributesOutput) Subresource

Subresource is one of the existing resource types. "" means none.

func (ResourceAttributesOutput) ToResourceAttributesOutput

func (o ResourceAttributesOutput) ToResourceAttributesOutput() ResourceAttributesOutput

func (ResourceAttributesOutput) ToResourceAttributesOutputWithContext

func (o ResourceAttributesOutput) ToResourceAttributesOutputWithContext(ctx context.Context) ResourceAttributesOutput

func (ResourceAttributesOutput) ToResourceAttributesPtrOutput

func (o ResourceAttributesOutput) ToResourceAttributesPtrOutput() ResourceAttributesPtrOutput

func (ResourceAttributesOutput) ToResourceAttributesPtrOutputWithContext

func (o ResourceAttributesOutput) ToResourceAttributesPtrOutputWithContext(ctx context.Context) ResourceAttributesPtrOutput

func (ResourceAttributesOutput) Verb

Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.

func (ResourceAttributesOutput) Version

Version is the API Version of the Resource. "*" means all.

type ResourceAttributesPatch added in v3.20.0

type ResourceAttributesPatch struct {
	// Group is the API Group of the Resource.  "*" means all.
	Group *string `pulumi:"group"`
	// Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
	Name *string `pulumi:"name"`
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
	Namespace *string `pulumi:"namespace"`
	// Resource is one of the existing resource types.  "*" means all.
	Resource *string `pulumi:"resource"`
	// Subresource is one of the existing resource types.  "" means none.
	Subresource *string `pulumi:"subresource"`
	// Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verb *string `pulumi:"verb"`
	// Version is the API Version of the Resource.  "*" means all.
	Version *string `pulumi:"version"`
}

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

type ResourceAttributesPatchArgs added in v3.20.0

type ResourceAttributesPatchArgs struct {
	// Group is the API Group of the Resource.  "*" means all.
	Group pulumi.StringPtrInput `pulumi:"group"`
	// Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
	// Resource is one of the existing resource types.  "*" means all.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
	// Subresource is one of the existing resource types.  "" means none.
	Subresource pulumi.StringPtrInput `pulumi:"subresource"`
	// Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verb pulumi.StringPtrInput `pulumi:"verb"`
	// Version is the API Version of the Resource.  "*" means all.
	Version pulumi.StringPtrInput `pulumi:"version"`
}

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

func (ResourceAttributesPatchArgs) ElementType added in v3.20.0

func (ResourceAttributesPatchArgs) ToResourceAttributesPatchOutput added in v3.20.0

func (i ResourceAttributesPatchArgs) ToResourceAttributesPatchOutput() ResourceAttributesPatchOutput

func (ResourceAttributesPatchArgs) ToResourceAttributesPatchOutputWithContext added in v3.20.0

func (i ResourceAttributesPatchArgs) ToResourceAttributesPatchOutputWithContext(ctx context.Context) ResourceAttributesPatchOutput

func (ResourceAttributesPatchArgs) ToResourceAttributesPatchPtrOutput added in v3.20.0

func (i ResourceAttributesPatchArgs) ToResourceAttributesPatchPtrOutput() ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchArgs) ToResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (i ResourceAttributesPatchArgs) ToResourceAttributesPatchPtrOutputWithContext(ctx context.Context) ResourceAttributesPatchPtrOutput

type ResourceAttributesPatchInput added in v3.20.0

type ResourceAttributesPatchInput interface {
	pulumi.Input

	ToResourceAttributesPatchOutput() ResourceAttributesPatchOutput
	ToResourceAttributesPatchOutputWithContext(context.Context) ResourceAttributesPatchOutput
}

ResourceAttributesPatchInput is an input type that accepts ResourceAttributesPatchArgs and ResourceAttributesPatchOutput values. You can construct a concrete instance of `ResourceAttributesPatchInput` via:

ResourceAttributesPatchArgs{...}

type ResourceAttributesPatchOutput added in v3.20.0

type ResourceAttributesPatchOutput struct{ *pulumi.OutputState }

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

func (ResourceAttributesPatchOutput) ElementType added in v3.20.0

func (ResourceAttributesPatchOutput) Group added in v3.20.0

Group is the API Group of the Resource. "*" means all.

func (ResourceAttributesPatchOutput) Name added in v3.20.0

Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.

func (ResourceAttributesPatchOutput) Namespace added in v3.20.0

Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview

func (ResourceAttributesPatchOutput) Resource added in v3.20.0

Resource is one of the existing resource types. "*" means all.

func (ResourceAttributesPatchOutput) Subresource added in v3.20.0

Subresource is one of the existing resource types. "" means none.

func (ResourceAttributesPatchOutput) ToResourceAttributesPatchOutput added in v3.20.0

func (o ResourceAttributesPatchOutput) ToResourceAttributesPatchOutput() ResourceAttributesPatchOutput

func (ResourceAttributesPatchOutput) ToResourceAttributesPatchOutputWithContext added in v3.20.0

func (o ResourceAttributesPatchOutput) ToResourceAttributesPatchOutputWithContext(ctx context.Context) ResourceAttributesPatchOutput

func (ResourceAttributesPatchOutput) ToResourceAttributesPatchPtrOutput added in v3.20.0

func (o ResourceAttributesPatchOutput) ToResourceAttributesPatchPtrOutput() ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchOutput) ToResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (o ResourceAttributesPatchOutput) ToResourceAttributesPatchPtrOutputWithContext(ctx context.Context) ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchOutput) Verb added in v3.20.0

Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.

func (ResourceAttributesPatchOutput) Version added in v3.20.0

Version is the API Version of the Resource. "*" means all.

type ResourceAttributesPatchPtrInput added in v3.20.0

type ResourceAttributesPatchPtrInput interface {
	pulumi.Input

	ToResourceAttributesPatchPtrOutput() ResourceAttributesPatchPtrOutput
	ToResourceAttributesPatchPtrOutputWithContext(context.Context) ResourceAttributesPatchPtrOutput
}

ResourceAttributesPatchPtrInput is an input type that accepts ResourceAttributesPatchArgs, ResourceAttributesPatchPtr and ResourceAttributesPatchPtrOutput values. You can construct a concrete instance of `ResourceAttributesPatchPtrInput` via:

        ResourceAttributesPatchArgs{...}

or:

        nil

func ResourceAttributesPatchPtr added in v3.20.0

func ResourceAttributesPatchPtr(v *ResourceAttributesPatchArgs) ResourceAttributesPatchPtrInput

type ResourceAttributesPatchPtrOutput added in v3.20.0

type ResourceAttributesPatchPtrOutput struct{ *pulumi.OutputState }

func (ResourceAttributesPatchPtrOutput) Elem added in v3.20.0

func (ResourceAttributesPatchPtrOutput) ElementType added in v3.20.0

func (ResourceAttributesPatchPtrOutput) Group added in v3.20.0

Group is the API Group of the Resource. "*" means all.

func (ResourceAttributesPatchPtrOutput) Name added in v3.20.0

Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.

func (ResourceAttributesPatchPtrOutput) Namespace added in v3.20.0

Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview

func (ResourceAttributesPatchPtrOutput) Resource added in v3.20.0

Resource is one of the existing resource types. "*" means all.

func (ResourceAttributesPatchPtrOutput) Subresource added in v3.20.0

Subresource is one of the existing resource types. "" means none.

func (ResourceAttributesPatchPtrOutput) ToResourceAttributesPatchPtrOutput added in v3.20.0

func (o ResourceAttributesPatchPtrOutput) ToResourceAttributesPatchPtrOutput() ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchPtrOutput) ToResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (o ResourceAttributesPatchPtrOutput) ToResourceAttributesPatchPtrOutputWithContext(ctx context.Context) ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchPtrOutput) Verb added in v3.20.0

Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.

func (ResourceAttributesPatchPtrOutput) Version added in v3.20.0

Version is the API Version of the Resource. "*" means all.

type ResourceAttributesPtrInput

type ResourceAttributesPtrInput interface {
	pulumi.Input

	ToResourceAttributesPtrOutput() ResourceAttributesPtrOutput
	ToResourceAttributesPtrOutputWithContext(context.Context) ResourceAttributesPtrOutput
}

ResourceAttributesPtrInput is an input type that accepts ResourceAttributesArgs, ResourceAttributesPtr and ResourceAttributesPtrOutput values. You can construct a concrete instance of `ResourceAttributesPtrInput` via:

        ResourceAttributesArgs{...}

or:

        nil

type ResourceAttributesPtrOutput

type ResourceAttributesPtrOutput struct{ *pulumi.OutputState }

func (ResourceAttributesPtrOutput) Elem

func (ResourceAttributesPtrOutput) ElementType

func (ResourceAttributesPtrOutput) Group

Group is the API Group of the Resource. "*" means all.

func (ResourceAttributesPtrOutput) Name

Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.

func (ResourceAttributesPtrOutput) Namespace

Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview

func (ResourceAttributesPtrOutput) Resource

Resource is one of the existing resource types. "*" means all.

func (ResourceAttributesPtrOutput) Subresource

Subresource is one of the existing resource types. "" means none.

func (ResourceAttributesPtrOutput) ToResourceAttributesPtrOutput

func (o ResourceAttributesPtrOutput) ToResourceAttributesPtrOutput() ResourceAttributesPtrOutput

func (ResourceAttributesPtrOutput) ToResourceAttributesPtrOutputWithContext

func (o ResourceAttributesPtrOutput) ToResourceAttributesPtrOutputWithContext(ctx context.Context) ResourceAttributesPtrOutput

func (ResourceAttributesPtrOutput) Verb

Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.

func (ResourceAttributesPtrOutput) Version

Version is the API Version of the Resource. "*" means all.

type ResourceRule

type ResourceRule struct {
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
	ApiGroups []string `pulumi:"apiGroups"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
	ResourceNames []string `pulumi:"resourceNames"`
	// Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
	//  "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
	Resources []string `pulumi:"resources"`
	// Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verbs []string `pulumi:"verbs"`
}

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

type ResourceRuleArgs

type ResourceRuleArgs struct {
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
	ApiGroups pulumi.StringArrayInput `pulumi:"apiGroups"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
	ResourceNames pulumi.StringArrayInput `pulumi:"resourceNames"`
	// Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
	//  "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
	// Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verbs pulumi.StringArrayInput `pulumi:"verbs"`
}

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (ResourceRuleArgs) ElementType

func (ResourceRuleArgs) ElementType() reflect.Type

func (ResourceRuleArgs) ToResourceRuleOutput

func (i ResourceRuleArgs) ToResourceRuleOutput() ResourceRuleOutput

func (ResourceRuleArgs) ToResourceRuleOutputWithContext

func (i ResourceRuleArgs) ToResourceRuleOutputWithContext(ctx context.Context) ResourceRuleOutput

type ResourceRuleArray

type ResourceRuleArray []ResourceRuleInput

func (ResourceRuleArray) ElementType

func (ResourceRuleArray) ElementType() reflect.Type

func (ResourceRuleArray) ToResourceRuleArrayOutput

func (i ResourceRuleArray) ToResourceRuleArrayOutput() ResourceRuleArrayOutput

func (ResourceRuleArray) ToResourceRuleArrayOutputWithContext

func (i ResourceRuleArray) ToResourceRuleArrayOutputWithContext(ctx context.Context) ResourceRuleArrayOutput

type ResourceRuleArrayInput

type ResourceRuleArrayInput interface {
	pulumi.Input

	ToResourceRuleArrayOutput() ResourceRuleArrayOutput
	ToResourceRuleArrayOutputWithContext(context.Context) ResourceRuleArrayOutput
}

ResourceRuleArrayInput is an input type that accepts ResourceRuleArray and ResourceRuleArrayOutput values. You can construct a concrete instance of `ResourceRuleArrayInput` via:

ResourceRuleArray{ ResourceRuleArgs{...} }

type ResourceRuleArrayOutput

type ResourceRuleArrayOutput struct{ *pulumi.OutputState }

func (ResourceRuleArrayOutput) ElementType

func (ResourceRuleArrayOutput) ElementType() reflect.Type

func (ResourceRuleArrayOutput) Index

func (ResourceRuleArrayOutput) ToResourceRuleArrayOutput

func (o ResourceRuleArrayOutput) ToResourceRuleArrayOutput() ResourceRuleArrayOutput

func (ResourceRuleArrayOutput) ToResourceRuleArrayOutputWithContext

func (o ResourceRuleArrayOutput) ToResourceRuleArrayOutputWithContext(ctx context.Context) ResourceRuleArrayOutput

type ResourceRuleInput

type ResourceRuleInput interface {
	pulumi.Input

	ToResourceRuleOutput() ResourceRuleOutput
	ToResourceRuleOutputWithContext(context.Context) ResourceRuleOutput
}

ResourceRuleInput is an input type that accepts ResourceRuleArgs and ResourceRuleOutput values. You can construct a concrete instance of `ResourceRuleInput` via:

ResourceRuleArgs{...}

type ResourceRuleOutput

type ResourceRuleOutput struct{ *pulumi.OutputState }

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (ResourceRuleOutput) ApiGroups

APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "*" means all.

func (ResourceRuleOutput) ElementType

func (ResourceRuleOutput) ElementType() reflect.Type

func (ResourceRuleOutput) ResourceNames

func (o ResourceRuleOutput) ResourceNames() pulumi.StringArrayOutput

ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. "*" means all.

func (ResourceRuleOutput) Resources

Resources is a list of resources this rule applies to. "*" means all in the specified apiGroups.

"*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.

func (ResourceRuleOutput) ToResourceRuleOutput

func (o ResourceRuleOutput) ToResourceRuleOutput() ResourceRuleOutput

func (ResourceRuleOutput) ToResourceRuleOutputWithContext

func (o ResourceRuleOutput) ToResourceRuleOutputWithContext(ctx context.Context) ResourceRuleOutput

func (ResourceRuleOutput) Verbs

Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. "*" means all.

type ResourceRulePatch added in v3.20.0

type ResourceRulePatch struct {
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
	ApiGroups []string `pulumi:"apiGroups"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
	ResourceNames []string `pulumi:"resourceNames"`
	// Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
	//  "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
	Resources []string `pulumi:"resources"`
	// Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verbs []string `pulumi:"verbs"`
}

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

type ResourceRulePatchArgs added in v3.20.0

type ResourceRulePatchArgs struct {
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
	ApiGroups pulumi.StringArrayInput `pulumi:"apiGroups"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
	ResourceNames pulumi.StringArrayInput `pulumi:"resourceNames"`
	// Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
	//  "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
	// Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verbs pulumi.StringArrayInput `pulumi:"verbs"`
}

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (ResourceRulePatchArgs) ElementType added in v3.20.0

func (ResourceRulePatchArgs) ElementType() reflect.Type

func (ResourceRulePatchArgs) ToResourceRulePatchOutput added in v3.20.0

func (i ResourceRulePatchArgs) ToResourceRulePatchOutput() ResourceRulePatchOutput

func (ResourceRulePatchArgs) ToResourceRulePatchOutputWithContext added in v3.20.0

func (i ResourceRulePatchArgs) ToResourceRulePatchOutputWithContext(ctx context.Context) ResourceRulePatchOutput

type ResourceRulePatchArray added in v3.20.0

type ResourceRulePatchArray []ResourceRulePatchInput

func (ResourceRulePatchArray) ElementType added in v3.20.0

func (ResourceRulePatchArray) ElementType() reflect.Type

func (ResourceRulePatchArray) ToResourceRulePatchArrayOutput added in v3.20.0

func (i ResourceRulePatchArray) ToResourceRulePatchArrayOutput() ResourceRulePatchArrayOutput

func (ResourceRulePatchArray) ToResourceRulePatchArrayOutputWithContext added in v3.20.0

func (i ResourceRulePatchArray) ToResourceRulePatchArrayOutputWithContext(ctx context.Context) ResourceRulePatchArrayOutput

type ResourceRulePatchArrayInput added in v3.20.0

type ResourceRulePatchArrayInput interface {
	pulumi.Input

	ToResourceRulePatchArrayOutput() ResourceRulePatchArrayOutput
	ToResourceRulePatchArrayOutputWithContext(context.Context) ResourceRulePatchArrayOutput
}

ResourceRulePatchArrayInput is an input type that accepts ResourceRulePatchArray and ResourceRulePatchArrayOutput values. You can construct a concrete instance of `ResourceRulePatchArrayInput` via:

ResourceRulePatchArray{ ResourceRulePatchArgs{...} }

type ResourceRulePatchArrayOutput added in v3.20.0

type ResourceRulePatchArrayOutput struct{ *pulumi.OutputState }

func (ResourceRulePatchArrayOutput) ElementType added in v3.20.0

func (ResourceRulePatchArrayOutput) Index added in v3.20.0

func (ResourceRulePatchArrayOutput) ToResourceRulePatchArrayOutput added in v3.20.0

func (o ResourceRulePatchArrayOutput) ToResourceRulePatchArrayOutput() ResourceRulePatchArrayOutput

func (ResourceRulePatchArrayOutput) ToResourceRulePatchArrayOutputWithContext added in v3.20.0

func (o ResourceRulePatchArrayOutput) ToResourceRulePatchArrayOutputWithContext(ctx context.Context) ResourceRulePatchArrayOutput

type ResourceRulePatchInput added in v3.20.0

type ResourceRulePatchInput interface {
	pulumi.Input

	ToResourceRulePatchOutput() ResourceRulePatchOutput
	ToResourceRulePatchOutputWithContext(context.Context) ResourceRulePatchOutput
}

ResourceRulePatchInput is an input type that accepts ResourceRulePatchArgs and ResourceRulePatchOutput values. You can construct a concrete instance of `ResourceRulePatchInput` via:

ResourceRulePatchArgs{...}

type ResourceRulePatchOutput added in v3.20.0

type ResourceRulePatchOutput struct{ *pulumi.OutputState }

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (ResourceRulePatchOutput) ApiGroups added in v3.20.0

APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "*" means all.

func (ResourceRulePatchOutput) ElementType added in v3.20.0

func (ResourceRulePatchOutput) ElementType() reflect.Type

func (ResourceRulePatchOutput) ResourceNames added in v3.20.0

ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. "*" means all.

func (ResourceRulePatchOutput) Resources added in v3.20.0

Resources is a list of resources this rule applies to. "*" means all in the specified apiGroups.

"*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.

func (ResourceRulePatchOutput) ToResourceRulePatchOutput added in v3.20.0

func (o ResourceRulePatchOutput) ToResourceRulePatchOutput() ResourceRulePatchOutput

func (ResourceRulePatchOutput) ToResourceRulePatchOutputWithContext added in v3.20.0

func (o ResourceRulePatchOutput) ToResourceRulePatchOutputWithContext(ctx context.Context) ResourceRulePatchOutput

func (ResourceRulePatchOutput) Verbs added in v3.20.0

Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. "*" means all.

type SelfSubjectAccessReview

type SelfSubjectAccessReview struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrOutput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpecOutput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrOutput `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func GetSelfSubjectAccessReview

func GetSelfSubjectAccessReview(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SelfSubjectAccessReviewState, opts ...pulumi.ResourceOption) (*SelfSubjectAccessReview, error)

GetSelfSubjectAccessReview gets an existing SelfSubjectAccessReview resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSelfSubjectAccessReview

func NewSelfSubjectAccessReview(ctx *pulumi.Context,
	name string, args *SelfSubjectAccessReviewArgs, opts ...pulumi.ResourceOption) (*SelfSubjectAccessReview, error)

NewSelfSubjectAccessReview registers a new resource with the given unique name, arguments, and options.

func (*SelfSubjectAccessReview) ElementType

func (*SelfSubjectAccessReview) ElementType() reflect.Type

func (*SelfSubjectAccessReview) ToSelfSubjectAccessReviewOutput

func (i *SelfSubjectAccessReview) ToSelfSubjectAccessReviewOutput() SelfSubjectAccessReviewOutput

func (*SelfSubjectAccessReview) ToSelfSubjectAccessReviewOutputWithContext

func (i *SelfSubjectAccessReview) ToSelfSubjectAccessReviewOutputWithContext(ctx context.Context) SelfSubjectAccessReviewOutput

type SelfSubjectAccessReviewArgs

type SelfSubjectAccessReviewArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpecInput
}

The set of arguments for constructing a SelfSubjectAccessReview resource.

func (SelfSubjectAccessReviewArgs) ElementType

type SelfSubjectAccessReviewArray

type SelfSubjectAccessReviewArray []SelfSubjectAccessReviewInput

func (SelfSubjectAccessReviewArray) ElementType

func (SelfSubjectAccessReviewArray) ToSelfSubjectAccessReviewArrayOutput

func (i SelfSubjectAccessReviewArray) ToSelfSubjectAccessReviewArrayOutput() SelfSubjectAccessReviewArrayOutput

func (SelfSubjectAccessReviewArray) ToSelfSubjectAccessReviewArrayOutputWithContext

func (i SelfSubjectAccessReviewArray) ToSelfSubjectAccessReviewArrayOutputWithContext(ctx context.Context) SelfSubjectAccessReviewArrayOutput

type SelfSubjectAccessReviewArrayInput

type SelfSubjectAccessReviewArrayInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewArrayOutput() SelfSubjectAccessReviewArrayOutput
	ToSelfSubjectAccessReviewArrayOutputWithContext(context.Context) SelfSubjectAccessReviewArrayOutput
}

SelfSubjectAccessReviewArrayInput is an input type that accepts SelfSubjectAccessReviewArray and SelfSubjectAccessReviewArrayOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewArrayInput` via:

SelfSubjectAccessReviewArray{ SelfSubjectAccessReviewArgs{...} }

type SelfSubjectAccessReviewArrayOutput

type SelfSubjectAccessReviewArrayOutput struct{ *pulumi.OutputState }

func (SelfSubjectAccessReviewArrayOutput) ElementType

func (SelfSubjectAccessReviewArrayOutput) Index

func (SelfSubjectAccessReviewArrayOutput) ToSelfSubjectAccessReviewArrayOutput

func (o SelfSubjectAccessReviewArrayOutput) ToSelfSubjectAccessReviewArrayOutput() SelfSubjectAccessReviewArrayOutput

func (SelfSubjectAccessReviewArrayOutput) ToSelfSubjectAccessReviewArrayOutputWithContext

func (o SelfSubjectAccessReviewArrayOutput) ToSelfSubjectAccessReviewArrayOutputWithContext(ctx context.Context) SelfSubjectAccessReviewArrayOutput

type SelfSubjectAccessReviewInput

type SelfSubjectAccessReviewInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewOutput() SelfSubjectAccessReviewOutput
	ToSelfSubjectAccessReviewOutputWithContext(ctx context.Context) SelfSubjectAccessReviewOutput
}

type SelfSubjectAccessReviewMap

type SelfSubjectAccessReviewMap map[string]SelfSubjectAccessReviewInput

func (SelfSubjectAccessReviewMap) ElementType

func (SelfSubjectAccessReviewMap) ElementType() reflect.Type

func (SelfSubjectAccessReviewMap) ToSelfSubjectAccessReviewMapOutput

func (i SelfSubjectAccessReviewMap) ToSelfSubjectAccessReviewMapOutput() SelfSubjectAccessReviewMapOutput

func (SelfSubjectAccessReviewMap) ToSelfSubjectAccessReviewMapOutputWithContext

func (i SelfSubjectAccessReviewMap) ToSelfSubjectAccessReviewMapOutputWithContext(ctx context.Context) SelfSubjectAccessReviewMapOutput

type SelfSubjectAccessReviewMapInput

type SelfSubjectAccessReviewMapInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewMapOutput() SelfSubjectAccessReviewMapOutput
	ToSelfSubjectAccessReviewMapOutputWithContext(context.Context) SelfSubjectAccessReviewMapOutput
}

SelfSubjectAccessReviewMapInput is an input type that accepts SelfSubjectAccessReviewMap and SelfSubjectAccessReviewMapOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewMapInput` via:

SelfSubjectAccessReviewMap{ "key": SelfSubjectAccessReviewArgs{...} }

type SelfSubjectAccessReviewMapOutput

type SelfSubjectAccessReviewMapOutput struct{ *pulumi.OutputState }

func (SelfSubjectAccessReviewMapOutput) ElementType

func (SelfSubjectAccessReviewMapOutput) MapIndex

func (SelfSubjectAccessReviewMapOutput) ToSelfSubjectAccessReviewMapOutput

func (o SelfSubjectAccessReviewMapOutput) ToSelfSubjectAccessReviewMapOutput() SelfSubjectAccessReviewMapOutput

func (SelfSubjectAccessReviewMapOutput) ToSelfSubjectAccessReviewMapOutputWithContext

func (o SelfSubjectAccessReviewMapOutput) ToSelfSubjectAccessReviewMapOutputWithContext(ctx context.Context) SelfSubjectAccessReviewMapOutput

type SelfSubjectAccessReviewOutput

type SelfSubjectAccessReviewOutput struct{ *pulumi.OutputState }

func (SelfSubjectAccessReviewOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectAccessReviewOutput) ElementType

func (SelfSubjectAccessReviewOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectAccessReviewOutput) Metadata added in v3.19.1

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SelfSubjectAccessReviewOutput) Spec added in v3.19.1

Spec holds information about the request being evaluated. user and groups must be empty

func (SelfSubjectAccessReviewOutput) Status added in v3.19.1

Status is filled in by the server and indicates whether the request is allowed or not

func (SelfSubjectAccessReviewOutput) ToSelfSubjectAccessReviewOutput

func (o SelfSubjectAccessReviewOutput) ToSelfSubjectAccessReviewOutput() SelfSubjectAccessReviewOutput

func (SelfSubjectAccessReviewOutput) ToSelfSubjectAccessReviewOutputWithContext

func (o SelfSubjectAccessReviewOutput) ToSelfSubjectAccessReviewOutputWithContext(ctx context.Context) SelfSubjectAccessReviewOutput

type SelfSubjectAccessReviewPatch added in v3.20.0

type SelfSubjectAccessReviewPatch struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrOutput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpecPatchPtrOutput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrOutput `pulumi:"status"`
}

Patch resources are used to modify existing Kubernetes resources by using Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource. Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi. SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func GetSelfSubjectAccessReviewPatch added in v3.20.0

func GetSelfSubjectAccessReviewPatch(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SelfSubjectAccessReviewPatchState, opts ...pulumi.ResourceOption) (*SelfSubjectAccessReviewPatch, error)

GetSelfSubjectAccessReviewPatch gets an existing SelfSubjectAccessReviewPatch resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSelfSubjectAccessReviewPatch added in v3.20.0

func NewSelfSubjectAccessReviewPatch(ctx *pulumi.Context,
	name string, args *SelfSubjectAccessReviewPatchArgs, opts ...pulumi.ResourceOption) (*SelfSubjectAccessReviewPatch, error)

NewSelfSubjectAccessReviewPatch registers a new resource with the given unique name, arguments, and options.

func (*SelfSubjectAccessReviewPatch) ElementType added in v3.20.0

func (*SelfSubjectAccessReviewPatch) ElementType() reflect.Type

func (*SelfSubjectAccessReviewPatch) ToSelfSubjectAccessReviewPatchOutput added in v3.20.0

func (i *SelfSubjectAccessReviewPatch) ToSelfSubjectAccessReviewPatchOutput() SelfSubjectAccessReviewPatchOutput

func (*SelfSubjectAccessReviewPatch) ToSelfSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (i *SelfSubjectAccessReviewPatch) ToSelfSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchOutput

type SelfSubjectAccessReviewPatchArgs added in v3.20.0

type SelfSubjectAccessReviewPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpecPatchPtrInput
}

The set of arguments for constructing a SelfSubjectAccessReviewPatch resource.

func (SelfSubjectAccessReviewPatchArgs) ElementType added in v3.20.0

type SelfSubjectAccessReviewPatchArray added in v3.20.0

type SelfSubjectAccessReviewPatchArray []SelfSubjectAccessReviewPatchInput

func (SelfSubjectAccessReviewPatchArray) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchArray) ToSelfSubjectAccessReviewPatchArrayOutput added in v3.20.0

func (i SelfSubjectAccessReviewPatchArray) ToSelfSubjectAccessReviewPatchArrayOutput() SelfSubjectAccessReviewPatchArrayOutput

func (SelfSubjectAccessReviewPatchArray) ToSelfSubjectAccessReviewPatchArrayOutputWithContext added in v3.20.0

func (i SelfSubjectAccessReviewPatchArray) ToSelfSubjectAccessReviewPatchArrayOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchArrayOutput

type SelfSubjectAccessReviewPatchArrayInput added in v3.20.0

type SelfSubjectAccessReviewPatchArrayInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewPatchArrayOutput() SelfSubjectAccessReviewPatchArrayOutput
	ToSelfSubjectAccessReviewPatchArrayOutputWithContext(context.Context) SelfSubjectAccessReviewPatchArrayOutput
}

SelfSubjectAccessReviewPatchArrayInput is an input type that accepts SelfSubjectAccessReviewPatchArray and SelfSubjectAccessReviewPatchArrayOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewPatchArrayInput` via:

SelfSubjectAccessReviewPatchArray{ SelfSubjectAccessReviewPatchArgs{...} }

type SelfSubjectAccessReviewPatchArrayOutput added in v3.20.0

type SelfSubjectAccessReviewPatchArrayOutput struct{ *pulumi.OutputState }

func (SelfSubjectAccessReviewPatchArrayOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchArrayOutput) Index added in v3.20.0

func (SelfSubjectAccessReviewPatchArrayOutput) ToSelfSubjectAccessReviewPatchArrayOutput added in v3.20.0

func (o SelfSubjectAccessReviewPatchArrayOutput) ToSelfSubjectAccessReviewPatchArrayOutput() SelfSubjectAccessReviewPatchArrayOutput

func (SelfSubjectAccessReviewPatchArrayOutput) ToSelfSubjectAccessReviewPatchArrayOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewPatchArrayOutput) ToSelfSubjectAccessReviewPatchArrayOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchArrayOutput

type SelfSubjectAccessReviewPatchInput added in v3.20.0

type SelfSubjectAccessReviewPatchInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewPatchOutput() SelfSubjectAccessReviewPatchOutput
	ToSelfSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchOutput
}

type SelfSubjectAccessReviewPatchMap added in v3.20.0

type SelfSubjectAccessReviewPatchMap map[string]SelfSubjectAccessReviewPatchInput

func (SelfSubjectAccessReviewPatchMap) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchMap) ToSelfSubjectAccessReviewPatchMapOutput added in v3.20.0

func (i SelfSubjectAccessReviewPatchMap) ToSelfSubjectAccessReviewPatchMapOutput() SelfSubjectAccessReviewPatchMapOutput

func (SelfSubjectAccessReviewPatchMap) ToSelfSubjectAccessReviewPatchMapOutputWithContext added in v3.20.0

func (i SelfSubjectAccessReviewPatchMap) ToSelfSubjectAccessReviewPatchMapOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchMapOutput

type SelfSubjectAccessReviewPatchMapInput added in v3.20.0

type SelfSubjectAccessReviewPatchMapInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewPatchMapOutput() SelfSubjectAccessReviewPatchMapOutput
	ToSelfSubjectAccessReviewPatchMapOutputWithContext(context.Context) SelfSubjectAccessReviewPatchMapOutput
}

SelfSubjectAccessReviewPatchMapInput is an input type that accepts SelfSubjectAccessReviewPatchMap and SelfSubjectAccessReviewPatchMapOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewPatchMapInput` via:

SelfSubjectAccessReviewPatchMap{ "key": SelfSubjectAccessReviewPatchArgs{...} }

type SelfSubjectAccessReviewPatchMapOutput added in v3.20.0

type SelfSubjectAccessReviewPatchMapOutput struct{ *pulumi.OutputState }

func (SelfSubjectAccessReviewPatchMapOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchMapOutput) MapIndex added in v3.20.0

func (SelfSubjectAccessReviewPatchMapOutput) ToSelfSubjectAccessReviewPatchMapOutput added in v3.20.0

func (o SelfSubjectAccessReviewPatchMapOutput) ToSelfSubjectAccessReviewPatchMapOutput() SelfSubjectAccessReviewPatchMapOutput

func (SelfSubjectAccessReviewPatchMapOutput) ToSelfSubjectAccessReviewPatchMapOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewPatchMapOutput) ToSelfSubjectAccessReviewPatchMapOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchMapOutput

type SelfSubjectAccessReviewPatchOutput added in v3.20.0

type SelfSubjectAccessReviewPatchOutput struct{ *pulumi.OutputState }

func (SelfSubjectAccessReviewPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectAccessReviewPatchOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectAccessReviewPatchOutput) Metadata added in v3.20.0

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SelfSubjectAccessReviewPatchOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated. user and groups must be empty

func (SelfSubjectAccessReviewPatchOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (SelfSubjectAccessReviewPatchOutput) ToSelfSubjectAccessReviewPatchOutput added in v3.20.0

func (o SelfSubjectAccessReviewPatchOutput) ToSelfSubjectAccessReviewPatchOutput() SelfSubjectAccessReviewPatchOutput

func (SelfSubjectAccessReviewPatchOutput) ToSelfSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewPatchOutput) ToSelfSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchOutput

type SelfSubjectAccessReviewPatchState added in v3.20.0

type SelfSubjectAccessReviewPatchState struct {
}

func (SelfSubjectAccessReviewPatchState) ElementType added in v3.20.0

type SelfSubjectAccessReviewPatchType added in v3.20.0

type SelfSubjectAccessReviewPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec *SelfSubjectAccessReviewSpecPatch `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatusPatch `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

type SelfSubjectAccessReviewPatchTypeArgs added in v3.20.0

type SelfSubjectAccessReviewPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpecPatchPtrInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrInput `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func (SelfSubjectAccessReviewPatchTypeArgs) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchTypeArgs) ToSelfSubjectAccessReviewPatchTypeOutput added in v3.20.0

func (i SelfSubjectAccessReviewPatchTypeArgs) ToSelfSubjectAccessReviewPatchTypeOutput() SelfSubjectAccessReviewPatchTypeOutput

func (SelfSubjectAccessReviewPatchTypeArgs) ToSelfSubjectAccessReviewPatchTypeOutputWithContext added in v3.20.0

func (i SelfSubjectAccessReviewPatchTypeArgs) ToSelfSubjectAccessReviewPatchTypeOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchTypeOutput

type SelfSubjectAccessReviewPatchTypeInput added in v3.20.0

type SelfSubjectAccessReviewPatchTypeInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewPatchTypeOutput() SelfSubjectAccessReviewPatchTypeOutput
	ToSelfSubjectAccessReviewPatchTypeOutputWithContext(context.Context) SelfSubjectAccessReviewPatchTypeOutput
}

SelfSubjectAccessReviewPatchTypeInput is an input type that accepts SelfSubjectAccessReviewPatchTypeArgs and SelfSubjectAccessReviewPatchTypeOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewPatchTypeInput` via:

SelfSubjectAccessReviewPatchTypeArgs{...}

type SelfSubjectAccessReviewPatchTypeOutput added in v3.20.0

type SelfSubjectAccessReviewPatchTypeOutput struct{ *pulumi.OutputState }

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func (SelfSubjectAccessReviewPatchTypeOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectAccessReviewPatchTypeOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchTypeOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectAccessReviewPatchTypeOutput) Metadata added in v3.20.0

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SelfSubjectAccessReviewPatchTypeOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated. user and groups must be empty

func (SelfSubjectAccessReviewPatchTypeOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (SelfSubjectAccessReviewPatchTypeOutput) ToSelfSubjectAccessReviewPatchTypeOutput added in v3.20.0

func (o SelfSubjectAccessReviewPatchTypeOutput) ToSelfSubjectAccessReviewPatchTypeOutput() SelfSubjectAccessReviewPatchTypeOutput

func (SelfSubjectAccessReviewPatchTypeOutput) ToSelfSubjectAccessReviewPatchTypeOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewPatchTypeOutput) ToSelfSubjectAccessReviewPatchTypeOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchTypeOutput

type SelfSubjectAccessReviewSpec

type SelfSubjectAccessReviewSpec struct {
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes *NonResourceAttributes `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes *ResourceAttributes `pulumi:"resourceAttributes"`
}

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

type SelfSubjectAccessReviewSpecArgs

type SelfSubjectAccessReviewSpecArgs struct {
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes NonResourceAttributesPtrInput `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes ResourceAttributesPtrInput `pulumi:"resourceAttributes"`
}

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SelfSubjectAccessReviewSpecArgs) ElementType

func (SelfSubjectAccessReviewSpecArgs) ToSelfSubjectAccessReviewSpecOutput

func (i SelfSubjectAccessReviewSpecArgs) ToSelfSubjectAccessReviewSpecOutput() SelfSubjectAccessReviewSpecOutput

func (SelfSubjectAccessReviewSpecArgs) ToSelfSubjectAccessReviewSpecOutputWithContext

func (i SelfSubjectAccessReviewSpecArgs) ToSelfSubjectAccessReviewSpecOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecOutput

type SelfSubjectAccessReviewSpecInput

type SelfSubjectAccessReviewSpecInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewSpecOutput() SelfSubjectAccessReviewSpecOutput
	ToSelfSubjectAccessReviewSpecOutputWithContext(context.Context) SelfSubjectAccessReviewSpecOutput
}

SelfSubjectAccessReviewSpecInput is an input type that accepts SelfSubjectAccessReviewSpecArgs and SelfSubjectAccessReviewSpecOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewSpecInput` via:

SelfSubjectAccessReviewSpecArgs{...}

type SelfSubjectAccessReviewSpecOutput

type SelfSubjectAccessReviewSpecOutput struct{ *pulumi.OutputState }

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SelfSubjectAccessReviewSpecOutput) ElementType

func (SelfSubjectAccessReviewSpecOutput) NonResourceAttributes

NonResourceAttributes describes information for a non-resource access request

func (SelfSubjectAccessReviewSpecOutput) ResourceAttributes

ResourceAuthorizationAttributes describes information for a resource access request

func (SelfSubjectAccessReviewSpecOutput) ToSelfSubjectAccessReviewSpecOutput

func (o SelfSubjectAccessReviewSpecOutput) ToSelfSubjectAccessReviewSpecOutput() SelfSubjectAccessReviewSpecOutput

func (SelfSubjectAccessReviewSpecOutput) ToSelfSubjectAccessReviewSpecOutputWithContext

func (o SelfSubjectAccessReviewSpecOutput) ToSelfSubjectAccessReviewSpecOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecOutput

type SelfSubjectAccessReviewSpecPatch added in v3.20.0

type SelfSubjectAccessReviewSpecPatch struct {
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes *NonResourceAttributesPatch `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes *ResourceAttributesPatch `pulumi:"resourceAttributes"`
}

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

type SelfSubjectAccessReviewSpecPatchArgs added in v3.20.0

type SelfSubjectAccessReviewSpecPatchArgs struct {
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes NonResourceAttributesPatchPtrInput `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes ResourceAttributesPatchPtrInput `pulumi:"resourceAttributes"`
}

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SelfSubjectAccessReviewSpecPatchArgs) ElementType added in v3.20.0

func (SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchOutput added in v3.20.0

func (i SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchOutput() SelfSubjectAccessReviewSpecPatchOutput

func (SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchOutputWithContext added in v3.20.0

func (i SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchOutput

func (SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (i SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchPtrOutput() SelfSubjectAccessReviewSpecPatchPtrOutput

func (SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (i SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchPtrOutput

type SelfSubjectAccessReviewSpecPatchInput added in v3.20.0

type SelfSubjectAccessReviewSpecPatchInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewSpecPatchOutput() SelfSubjectAccessReviewSpecPatchOutput
	ToSelfSubjectAccessReviewSpecPatchOutputWithContext(context.Context) SelfSubjectAccessReviewSpecPatchOutput
}

SelfSubjectAccessReviewSpecPatchInput is an input type that accepts SelfSubjectAccessReviewSpecPatchArgs and SelfSubjectAccessReviewSpecPatchOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewSpecPatchInput` via:

SelfSubjectAccessReviewSpecPatchArgs{...}

type SelfSubjectAccessReviewSpecPatchOutput added in v3.20.0

type SelfSubjectAccessReviewSpecPatchOutput struct{ *pulumi.OutputState }

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SelfSubjectAccessReviewSpecPatchOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewSpecPatchOutput) NonResourceAttributes added in v3.20.0

NonResourceAttributes describes information for a non-resource access request

func (SelfSubjectAccessReviewSpecPatchOutput) ResourceAttributes added in v3.20.0

ResourceAuthorizationAttributes describes information for a resource access request

func (SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchOutput added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchOutput() SelfSubjectAccessReviewSpecPatchOutput

func (SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchOutput

func (SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutput() SelfSubjectAccessReviewSpecPatchPtrOutput

func (SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchPtrOutput

type SelfSubjectAccessReviewSpecPatchPtrInput added in v3.20.0

type SelfSubjectAccessReviewSpecPatchPtrInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewSpecPatchPtrOutput() SelfSubjectAccessReviewSpecPatchPtrOutput
	ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext(context.Context) SelfSubjectAccessReviewSpecPatchPtrOutput
}

SelfSubjectAccessReviewSpecPatchPtrInput is an input type that accepts SelfSubjectAccessReviewSpecPatchArgs, SelfSubjectAccessReviewSpecPatchPtr and SelfSubjectAccessReviewSpecPatchPtrOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewSpecPatchPtrInput` via:

        SelfSubjectAccessReviewSpecPatchArgs{...}

or:

        nil

type SelfSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

type SelfSubjectAccessReviewSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (SelfSubjectAccessReviewSpecPatchPtrOutput) Elem added in v3.20.0

func (SelfSubjectAccessReviewSpecPatchPtrOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewSpecPatchPtrOutput) NonResourceAttributes added in v3.20.0

NonResourceAttributes describes information for a non-resource access request

func (SelfSubjectAccessReviewSpecPatchPtrOutput) ResourceAttributes added in v3.20.0

ResourceAuthorizationAttributes describes information for a resource access request

func (SelfSubjectAccessReviewSpecPatchPtrOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchPtrOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutput() SelfSubjectAccessReviewSpecPatchPtrOutput

func (SelfSubjectAccessReviewSpecPatchPtrOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchPtrOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchPtrOutput

type SelfSubjectAccessReviewState

type SelfSubjectAccessReviewState struct {
}

func (SelfSubjectAccessReviewState) ElementType

type SelfSubjectAccessReviewType

type SelfSubjectAccessReviewType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpec `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatus `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

type SelfSubjectAccessReviewTypeArgs

type SelfSubjectAccessReviewTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpecInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrInput `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func (SelfSubjectAccessReviewTypeArgs) ElementType

func (SelfSubjectAccessReviewTypeArgs) ToSelfSubjectAccessReviewTypeOutput

func (i SelfSubjectAccessReviewTypeArgs) ToSelfSubjectAccessReviewTypeOutput() SelfSubjectAccessReviewTypeOutput

func (SelfSubjectAccessReviewTypeArgs) ToSelfSubjectAccessReviewTypeOutputWithContext

func (i SelfSubjectAccessReviewTypeArgs) ToSelfSubjectAccessReviewTypeOutputWithContext(ctx context.Context) SelfSubjectAccessReviewTypeOutput

type SelfSubjectAccessReviewTypeInput

type SelfSubjectAccessReviewTypeInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewTypeOutput() SelfSubjectAccessReviewTypeOutput
	ToSelfSubjectAccessReviewTypeOutputWithContext(context.Context) SelfSubjectAccessReviewTypeOutput
}

SelfSubjectAccessReviewTypeInput is an input type that accepts SelfSubjectAccessReviewTypeArgs and SelfSubjectAccessReviewTypeOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewTypeInput` via:

SelfSubjectAccessReviewTypeArgs{...}

type SelfSubjectAccessReviewTypeOutput

type SelfSubjectAccessReviewTypeOutput struct{ *pulumi.OutputState }

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func (SelfSubjectAccessReviewTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectAccessReviewTypeOutput) ElementType

func (SelfSubjectAccessReviewTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectAccessReviewTypeOutput) Spec

Spec holds information about the request being evaluated. user and groups must be empty

func (SelfSubjectAccessReviewTypeOutput) Status

Status is filled in by the server and indicates whether the request is allowed or not

func (SelfSubjectAccessReviewTypeOutput) ToSelfSubjectAccessReviewTypeOutput

func (o SelfSubjectAccessReviewTypeOutput) ToSelfSubjectAccessReviewTypeOutput() SelfSubjectAccessReviewTypeOutput

func (SelfSubjectAccessReviewTypeOutput) ToSelfSubjectAccessReviewTypeOutputWithContext

func (o SelfSubjectAccessReviewTypeOutput) ToSelfSubjectAccessReviewTypeOutputWithContext(ctx context.Context) SelfSubjectAccessReviewTypeOutput

type SelfSubjectRulesReview

type SelfSubjectRulesReview struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrOutput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpecOutput `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status SubjectRulesReviewStatusPtrOutput `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func GetSelfSubjectRulesReview

func GetSelfSubjectRulesReview(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SelfSubjectRulesReviewState, opts ...pulumi.ResourceOption) (*SelfSubjectRulesReview, error)

GetSelfSubjectRulesReview gets an existing SelfSubjectRulesReview resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSelfSubjectRulesReview

func NewSelfSubjectRulesReview(ctx *pulumi.Context,
	name string, args *SelfSubjectRulesReviewArgs, opts ...pulumi.ResourceOption) (*SelfSubjectRulesReview, error)

NewSelfSubjectRulesReview registers a new resource with the given unique name, arguments, and options.

func (*SelfSubjectRulesReview) ElementType

func (*SelfSubjectRulesReview) ElementType() reflect.Type

func (*SelfSubjectRulesReview) ToSelfSubjectRulesReviewOutput

func (i *SelfSubjectRulesReview) ToSelfSubjectRulesReviewOutput() SelfSubjectRulesReviewOutput

func (*SelfSubjectRulesReview) ToSelfSubjectRulesReviewOutputWithContext

func (i *SelfSubjectRulesReview) ToSelfSubjectRulesReviewOutputWithContext(ctx context.Context) SelfSubjectRulesReviewOutput

type SelfSubjectRulesReviewArgs

type SelfSubjectRulesReviewArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpecInput
}

The set of arguments for constructing a SelfSubjectRulesReview resource.

func (SelfSubjectRulesReviewArgs) ElementType

func (SelfSubjectRulesReviewArgs) ElementType() reflect.Type

type SelfSubjectRulesReviewArray

type SelfSubjectRulesReviewArray []SelfSubjectRulesReviewInput

func (SelfSubjectRulesReviewArray) ElementType

func (SelfSubjectRulesReviewArray) ToSelfSubjectRulesReviewArrayOutput

func (i SelfSubjectRulesReviewArray) ToSelfSubjectRulesReviewArrayOutput() SelfSubjectRulesReviewArrayOutput

func (SelfSubjectRulesReviewArray) ToSelfSubjectRulesReviewArrayOutputWithContext

func (i SelfSubjectRulesReviewArray) ToSelfSubjectRulesReviewArrayOutputWithContext(ctx context.Context) SelfSubjectRulesReviewArrayOutput

type SelfSubjectRulesReviewArrayInput

type SelfSubjectRulesReviewArrayInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewArrayOutput() SelfSubjectRulesReviewArrayOutput
	ToSelfSubjectRulesReviewArrayOutputWithContext(context.Context) SelfSubjectRulesReviewArrayOutput
}

SelfSubjectRulesReviewArrayInput is an input type that accepts SelfSubjectRulesReviewArray and SelfSubjectRulesReviewArrayOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewArrayInput` via:

SelfSubjectRulesReviewArray{ SelfSubjectRulesReviewArgs{...} }

type SelfSubjectRulesReviewArrayOutput

type SelfSubjectRulesReviewArrayOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewArrayOutput) ElementType

func (SelfSubjectRulesReviewArrayOutput) Index

func (SelfSubjectRulesReviewArrayOutput) ToSelfSubjectRulesReviewArrayOutput

func (o SelfSubjectRulesReviewArrayOutput) ToSelfSubjectRulesReviewArrayOutput() SelfSubjectRulesReviewArrayOutput

func (SelfSubjectRulesReviewArrayOutput) ToSelfSubjectRulesReviewArrayOutputWithContext

func (o SelfSubjectRulesReviewArrayOutput) ToSelfSubjectRulesReviewArrayOutputWithContext(ctx context.Context) SelfSubjectRulesReviewArrayOutput

type SelfSubjectRulesReviewInput

type SelfSubjectRulesReviewInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewOutput() SelfSubjectRulesReviewOutput
	ToSelfSubjectRulesReviewOutputWithContext(ctx context.Context) SelfSubjectRulesReviewOutput
}

type SelfSubjectRulesReviewMap

type SelfSubjectRulesReviewMap map[string]SelfSubjectRulesReviewInput

func (SelfSubjectRulesReviewMap) ElementType

func (SelfSubjectRulesReviewMap) ElementType() reflect.Type

func (SelfSubjectRulesReviewMap) ToSelfSubjectRulesReviewMapOutput

func (i SelfSubjectRulesReviewMap) ToSelfSubjectRulesReviewMapOutput() SelfSubjectRulesReviewMapOutput

func (SelfSubjectRulesReviewMap) ToSelfSubjectRulesReviewMapOutputWithContext

func (i SelfSubjectRulesReviewMap) ToSelfSubjectRulesReviewMapOutputWithContext(ctx context.Context) SelfSubjectRulesReviewMapOutput

type SelfSubjectRulesReviewMapInput

type SelfSubjectRulesReviewMapInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewMapOutput() SelfSubjectRulesReviewMapOutput
	ToSelfSubjectRulesReviewMapOutputWithContext(context.Context) SelfSubjectRulesReviewMapOutput
}

SelfSubjectRulesReviewMapInput is an input type that accepts SelfSubjectRulesReviewMap and SelfSubjectRulesReviewMapOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewMapInput` via:

SelfSubjectRulesReviewMap{ "key": SelfSubjectRulesReviewArgs{...} }

type SelfSubjectRulesReviewMapOutput

type SelfSubjectRulesReviewMapOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewMapOutput) ElementType

func (SelfSubjectRulesReviewMapOutput) MapIndex

func (SelfSubjectRulesReviewMapOutput) ToSelfSubjectRulesReviewMapOutput

func (o SelfSubjectRulesReviewMapOutput) ToSelfSubjectRulesReviewMapOutput() SelfSubjectRulesReviewMapOutput

func (SelfSubjectRulesReviewMapOutput) ToSelfSubjectRulesReviewMapOutputWithContext

func (o SelfSubjectRulesReviewMapOutput) ToSelfSubjectRulesReviewMapOutputWithContext(ctx context.Context) SelfSubjectRulesReviewMapOutput

type SelfSubjectRulesReviewOutput

type SelfSubjectRulesReviewOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectRulesReviewOutput) ElementType

func (SelfSubjectRulesReviewOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectRulesReviewOutput) Metadata added in v3.19.1

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SelfSubjectRulesReviewOutput) Spec added in v3.19.1

Spec holds information about the request being evaluated.

func (SelfSubjectRulesReviewOutput) Status added in v3.19.1

Status is filled in by the server and indicates the set of actions a user can perform.

func (SelfSubjectRulesReviewOutput) ToSelfSubjectRulesReviewOutput

func (o SelfSubjectRulesReviewOutput) ToSelfSubjectRulesReviewOutput() SelfSubjectRulesReviewOutput

func (SelfSubjectRulesReviewOutput) ToSelfSubjectRulesReviewOutputWithContext

func (o SelfSubjectRulesReviewOutput) ToSelfSubjectRulesReviewOutputWithContext(ctx context.Context) SelfSubjectRulesReviewOutput

type SelfSubjectRulesReviewPatch added in v3.20.0

type SelfSubjectRulesReviewPatch struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrOutput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpecPatchPtrOutput `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status SubjectRulesReviewStatusPatchPtrOutput `pulumi:"status"`
}

Patch resources are used to modify existing Kubernetes resources by using Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource. Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi. SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func GetSelfSubjectRulesReviewPatch added in v3.20.0

func GetSelfSubjectRulesReviewPatch(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SelfSubjectRulesReviewPatchState, opts ...pulumi.ResourceOption) (*SelfSubjectRulesReviewPatch, error)

GetSelfSubjectRulesReviewPatch gets an existing SelfSubjectRulesReviewPatch resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSelfSubjectRulesReviewPatch added in v3.20.0

func NewSelfSubjectRulesReviewPatch(ctx *pulumi.Context,
	name string, args *SelfSubjectRulesReviewPatchArgs, opts ...pulumi.ResourceOption) (*SelfSubjectRulesReviewPatch, error)

NewSelfSubjectRulesReviewPatch registers a new resource with the given unique name, arguments, and options.

func (*SelfSubjectRulesReviewPatch) ElementType added in v3.20.0

func (*SelfSubjectRulesReviewPatch) ElementType() reflect.Type

func (*SelfSubjectRulesReviewPatch) ToSelfSubjectRulesReviewPatchOutput added in v3.20.0

func (i *SelfSubjectRulesReviewPatch) ToSelfSubjectRulesReviewPatchOutput() SelfSubjectRulesReviewPatchOutput

func (*SelfSubjectRulesReviewPatch) ToSelfSubjectRulesReviewPatchOutputWithContext added in v3.20.0

func (i *SelfSubjectRulesReviewPatch) ToSelfSubjectRulesReviewPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchOutput

type SelfSubjectRulesReviewPatchArgs added in v3.20.0

type SelfSubjectRulesReviewPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpecPatchPtrInput
}

The set of arguments for constructing a SelfSubjectRulesReviewPatch resource.

func (SelfSubjectRulesReviewPatchArgs) ElementType added in v3.20.0

type SelfSubjectRulesReviewPatchArray added in v3.20.0

type SelfSubjectRulesReviewPatchArray []SelfSubjectRulesReviewPatchInput

func (SelfSubjectRulesReviewPatchArray) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchArray) ToSelfSubjectRulesReviewPatchArrayOutput added in v3.20.0

func (i SelfSubjectRulesReviewPatchArray) ToSelfSubjectRulesReviewPatchArrayOutput() SelfSubjectRulesReviewPatchArrayOutput

func (SelfSubjectRulesReviewPatchArray) ToSelfSubjectRulesReviewPatchArrayOutputWithContext added in v3.20.0

func (i SelfSubjectRulesReviewPatchArray) ToSelfSubjectRulesReviewPatchArrayOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchArrayOutput

type SelfSubjectRulesReviewPatchArrayInput added in v3.20.0

type SelfSubjectRulesReviewPatchArrayInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewPatchArrayOutput() SelfSubjectRulesReviewPatchArrayOutput
	ToSelfSubjectRulesReviewPatchArrayOutputWithContext(context.Context) SelfSubjectRulesReviewPatchArrayOutput
}

SelfSubjectRulesReviewPatchArrayInput is an input type that accepts SelfSubjectRulesReviewPatchArray and SelfSubjectRulesReviewPatchArrayOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewPatchArrayInput` via:

SelfSubjectRulesReviewPatchArray{ SelfSubjectRulesReviewPatchArgs{...} }

type SelfSubjectRulesReviewPatchArrayOutput added in v3.20.0

type SelfSubjectRulesReviewPatchArrayOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewPatchArrayOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchArrayOutput) Index added in v3.20.0

func (SelfSubjectRulesReviewPatchArrayOutput) ToSelfSubjectRulesReviewPatchArrayOutput added in v3.20.0

func (o SelfSubjectRulesReviewPatchArrayOutput) ToSelfSubjectRulesReviewPatchArrayOutput() SelfSubjectRulesReviewPatchArrayOutput

func (SelfSubjectRulesReviewPatchArrayOutput) ToSelfSubjectRulesReviewPatchArrayOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewPatchArrayOutput) ToSelfSubjectRulesReviewPatchArrayOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchArrayOutput

type SelfSubjectRulesReviewPatchInput added in v3.20.0

type SelfSubjectRulesReviewPatchInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewPatchOutput() SelfSubjectRulesReviewPatchOutput
	ToSelfSubjectRulesReviewPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchOutput
}

type SelfSubjectRulesReviewPatchMap added in v3.20.0

type SelfSubjectRulesReviewPatchMap map[string]SelfSubjectRulesReviewPatchInput

func (SelfSubjectRulesReviewPatchMap) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchMap) ToSelfSubjectRulesReviewPatchMapOutput added in v3.20.0

func (i SelfSubjectRulesReviewPatchMap) ToSelfSubjectRulesReviewPatchMapOutput() SelfSubjectRulesReviewPatchMapOutput

func (SelfSubjectRulesReviewPatchMap) ToSelfSubjectRulesReviewPatchMapOutputWithContext added in v3.20.0

func (i SelfSubjectRulesReviewPatchMap) ToSelfSubjectRulesReviewPatchMapOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchMapOutput

type SelfSubjectRulesReviewPatchMapInput added in v3.20.0

type SelfSubjectRulesReviewPatchMapInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewPatchMapOutput() SelfSubjectRulesReviewPatchMapOutput
	ToSelfSubjectRulesReviewPatchMapOutputWithContext(context.Context) SelfSubjectRulesReviewPatchMapOutput
}

SelfSubjectRulesReviewPatchMapInput is an input type that accepts SelfSubjectRulesReviewPatchMap and SelfSubjectRulesReviewPatchMapOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewPatchMapInput` via:

SelfSubjectRulesReviewPatchMap{ "key": SelfSubjectRulesReviewPatchArgs{...} }

type SelfSubjectRulesReviewPatchMapOutput added in v3.20.0

type SelfSubjectRulesReviewPatchMapOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewPatchMapOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchMapOutput) MapIndex added in v3.20.0

func (SelfSubjectRulesReviewPatchMapOutput) ToSelfSubjectRulesReviewPatchMapOutput added in v3.20.0

func (o SelfSubjectRulesReviewPatchMapOutput) ToSelfSubjectRulesReviewPatchMapOutput() SelfSubjectRulesReviewPatchMapOutput

func (SelfSubjectRulesReviewPatchMapOutput) ToSelfSubjectRulesReviewPatchMapOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewPatchMapOutput) ToSelfSubjectRulesReviewPatchMapOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchMapOutput

type SelfSubjectRulesReviewPatchOutput added in v3.20.0

type SelfSubjectRulesReviewPatchOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectRulesReviewPatchOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectRulesReviewPatchOutput) Metadata added in v3.20.0

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SelfSubjectRulesReviewPatchOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated.

func (SelfSubjectRulesReviewPatchOutput) Status added in v3.20.0

Status is filled in by the server and indicates the set of actions a user can perform.

func (SelfSubjectRulesReviewPatchOutput) ToSelfSubjectRulesReviewPatchOutput added in v3.20.0

func (o SelfSubjectRulesReviewPatchOutput) ToSelfSubjectRulesReviewPatchOutput() SelfSubjectRulesReviewPatchOutput

func (SelfSubjectRulesReviewPatchOutput) ToSelfSubjectRulesReviewPatchOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewPatchOutput) ToSelfSubjectRulesReviewPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchOutput

type SelfSubjectRulesReviewPatchState added in v3.20.0

type SelfSubjectRulesReviewPatchState struct {
}

func (SelfSubjectRulesReviewPatchState) ElementType added in v3.20.0

type SelfSubjectRulesReviewPatchType added in v3.20.0

type SelfSubjectRulesReviewPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec *SelfSubjectRulesReviewSpecPatch `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status *SubjectRulesReviewStatusPatch `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

type SelfSubjectRulesReviewPatchTypeArgs added in v3.20.0

type SelfSubjectRulesReviewPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpecPatchPtrInput `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status SubjectRulesReviewStatusPatchPtrInput `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func (SelfSubjectRulesReviewPatchTypeArgs) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchTypeArgs) ToSelfSubjectRulesReviewPatchTypeOutput added in v3.20.0

func (i SelfSubjectRulesReviewPatchTypeArgs) ToSelfSubjectRulesReviewPatchTypeOutput() SelfSubjectRulesReviewPatchTypeOutput

func (SelfSubjectRulesReviewPatchTypeArgs) ToSelfSubjectRulesReviewPatchTypeOutputWithContext added in v3.20.0

func (i SelfSubjectRulesReviewPatchTypeArgs) ToSelfSubjectRulesReviewPatchTypeOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchTypeOutput

type SelfSubjectRulesReviewPatchTypeInput added in v3.20.0

type SelfSubjectRulesReviewPatchTypeInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewPatchTypeOutput() SelfSubjectRulesReviewPatchTypeOutput
	ToSelfSubjectRulesReviewPatchTypeOutputWithContext(context.Context) SelfSubjectRulesReviewPatchTypeOutput
}

SelfSubjectRulesReviewPatchTypeInput is an input type that accepts SelfSubjectRulesReviewPatchTypeArgs and SelfSubjectRulesReviewPatchTypeOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewPatchTypeInput` via:

SelfSubjectRulesReviewPatchTypeArgs{...}

type SelfSubjectRulesReviewPatchTypeOutput added in v3.20.0

type SelfSubjectRulesReviewPatchTypeOutput struct{ *pulumi.OutputState }

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func (SelfSubjectRulesReviewPatchTypeOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectRulesReviewPatchTypeOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchTypeOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectRulesReviewPatchTypeOutput) Metadata added in v3.20.0

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SelfSubjectRulesReviewPatchTypeOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated.

func (SelfSubjectRulesReviewPatchTypeOutput) Status added in v3.20.0

Status is filled in by the server and indicates the set of actions a user can perform.

func (SelfSubjectRulesReviewPatchTypeOutput) ToSelfSubjectRulesReviewPatchTypeOutput added in v3.20.0

func (o SelfSubjectRulesReviewPatchTypeOutput) ToSelfSubjectRulesReviewPatchTypeOutput() SelfSubjectRulesReviewPatchTypeOutput

func (SelfSubjectRulesReviewPatchTypeOutput) ToSelfSubjectRulesReviewPatchTypeOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewPatchTypeOutput) ToSelfSubjectRulesReviewPatchTypeOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchTypeOutput

type SelfSubjectRulesReviewSpec

type SelfSubjectRulesReviewSpec struct {
	// Namespace to evaluate rules for. Required.
	Namespace *string `pulumi:"namespace"`
}

SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.

type SelfSubjectRulesReviewSpecArgs

type SelfSubjectRulesReviewSpecArgs struct {
	// Namespace to evaluate rules for. Required.
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
}

SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.

func (SelfSubjectRulesReviewSpecArgs) ElementType

func (SelfSubjectRulesReviewSpecArgs) ToSelfSubjectRulesReviewSpecOutput

func (i SelfSubjectRulesReviewSpecArgs) ToSelfSubjectRulesReviewSpecOutput() SelfSubjectRulesReviewSpecOutput

func (SelfSubjectRulesReviewSpecArgs) ToSelfSubjectRulesReviewSpecOutputWithContext

func (i SelfSubjectRulesReviewSpecArgs) ToSelfSubjectRulesReviewSpecOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecOutput

type SelfSubjectRulesReviewSpecInput

type SelfSubjectRulesReviewSpecInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewSpecOutput() SelfSubjectRulesReviewSpecOutput
	ToSelfSubjectRulesReviewSpecOutputWithContext(context.Context) SelfSubjectRulesReviewSpecOutput
}

SelfSubjectRulesReviewSpecInput is an input type that accepts SelfSubjectRulesReviewSpecArgs and SelfSubjectRulesReviewSpecOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewSpecInput` via:

SelfSubjectRulesReviewSpecArgs{...}

type SelfSubjectRulesReviewSpecOutput

type SelfSubjectRulesReviewSpecOutput struct{ *pulumi.OutputState }

SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.

func (SelfSubjectRulesReviewSpecOutput) ElementType

func (SelfSubjectRulesReviewSpecOutput) Namespace

Namespace to evaluate rules for. Required.

func (SelfSubjectRulesReviewSpecOutput) ToSelfSubjectRulesReviewSpecOutput

func (o SelfSubjectRulesReviewSpecOutput) ToSelfSubjectRulesReviewSpecOutput() SelfSubjectRulesReviewSpecOutput

func (SelfSubjectRulesReviewSpecOutput) ToSelfSubjectRulesReviewSpecOutputWithContext

func (o SelfSubjectRulesReviewSpecOutput) ToSelfSubjectRulesReviewSpecOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecOutput

type SelfSubjectRulesReviewSpecPatch added in v3.20.0

type SelfSubjectRulesReviewSpecPatch struct {
	// Namespace to evaluate rules for. Required.
	Namespace *string `pulumi:"namespace"`
}

SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.

type SelfSubjectRulesReviewSpecPatchArgs added in v3.20.0

type SelfSubjectRulesReviewSpecPatchArgs struct {
	// Namespace to evaluate rules for. Required.
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
}

SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.

func (SelfSubjectRulesReviewSpecPatchArgs) ElementType added in v3.20.0

func (SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchOutput added in v3.20.0

func (i SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchOutput() SelfSubjectRulesReviewSpecPatchOutput

func (SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchOutputWithContext added in v3.20.0

func (i SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchOutput

func (SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchPtrOutput added in v3.20.0

func (i SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchPtrOutput() SelfSubjectRulesReviewSpecPatchPtrOutput

func (SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (i SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchPtrOutput

type SelfSubjectRulesReviewSpecPatchInput added in v3.20.0

type SelfSubjectRulesReviewSpecPatchInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewSpecPatchOutput() SelfSubjectRulesReviewSpecPatchOutput
	ToSelfSubjectRulesReviewSpecPatchOutputWithContext(context.Context) SelfSubjectRulesReviewSpecPatchOutput
}

SelfSubjectRulesReviewSpecPatchInput is an input type that accepts SelfSubjectRulesReviewSpecPatchArgs and SelfSubjectRulesReviewSpecPatchOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewSpecPatchInput` via:

SelfSubjectRulesReviewSpecPatchArgs{...}

type SelfSubjectRulesReviewSpecPatchOutput added in v3.20.0

type SelfSubjectRulesReviewSpecPatchOutput struct{ *pulumi.OutputState }

SelfSubjectRulesReviewSpec defines the specification for SelfSubjectRulesReview.

func (SelfSubjectRulesReviewSpecPatchOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewSpecPatchOutput) Namespace added in v3.20.0

Namespace to evaluate rules for. Required.

func (SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchOutput added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchOutput() SelfSubjectRulesReviewSpecPatchOutput

func (SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchOutput

func (SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutput added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutput() SelfSubjectRulesReviewSpecPatchPtrOutput

func (SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchPtrOutput

type SelfSubjectRulesReviewSpecPatchPtrInput added in v3.20.0

type SelfSubjectRulesReviewSpecPatchPtrInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewSpecPatchPtrOutput() SelfSubjectRulesReviewSpecPatchPtrOutput
	ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext(context.Context) SelfSubjectRulesReviewSpecPatchPtrOutput
}

SelfSubjectRulesReviewSpecPatchPtrInput is an input type that accepts SelfSubjectRulesReviewSpecPatchArgs, SelfSubjectRulesReviewSpecPatchPtr and SelfSubjectRulesReviewSpecPatchPtrOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewSpecPatchPtrInput` via:

        SelfSubjectRulesReviewSpecPatchArgs{...}

or:

        nil

type SelfSubjectRulesReviewSpecPatchPtrOutput added in v3.20.0

type SelfSubjectRulesReviewSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewSpecPatchPtrOutput) Elem added in v3.20.0

func (SelfSubjectRulesReviewSpecPatchPtrOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewSpecPatchPtrOutput) Namespace added in v3.20.0

Namespace to evaluate rules for. Required.

func (SelfSubjectRulesReviewSpecPatchPtrOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutput added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchPtrOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutput() SelfSubjectRulesReviewSpecPatchPtrOutput

func (SelfSubjectRulesReviewSpecPatchPtrOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchPtrOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchPtrOutput

type SelfSubjectRulesReviewState

type SelfSubjectRulesReviewState struct {
}

func (SelfSubjectRulesReviewState) ElementType

type SelfSubjectRulesReviewType

type SelfSubjectRulesReviewType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpec `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status *SubjectRulesReviewStatus `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

type SelfSubjectRulesReviewTypeArgs

type SelfSubjectRulesReviewTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpecInput `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status SubjectRulesReviewStatusPtrInput `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func (SelfSubjectRulesReviewTypeArgs) ElementType

func (SelfSubjectRulesReviewTypeArgs) ToSelfSubjectRulesReviewTypeOutput

func (i SelfSubjectRulesReviewTypeArgs) ToSelfSubjectRulesReviewTypeOutput() SelfSubjectRulesReviewTypeOutput

func (SelfSubjectRulesReviewTypeArgs) ToSelfSubjectRulesReviewTypeOutputWithContext

func (i SelfSubjectRulesReviewTypeArgs) ToSelfSubjectRulesReviewTypeOutputWithContext(ctx context.Context) SelfSubjectRulesReviewTypeOutput

type SelfSubjectRulesReviewTypeInput

type SelfSubjectRulesReviewTypeInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewTypeOutput() SelfSubjectRulesReviewTypeOutput
	ToSelfSubjectRulesReviewTypeOutputWithContext(context.Context) SelfSubjectRulesReviewTypeOutput
}

SelfSubjectRulesReviewTypeInput is an input type that accepts SelfSubjectRulesReviewTypeArgs and SelfSubjectRulesReviewTypeOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewTypeInput` via:

SelfSubjectRulesReviewTypeArgs{...}

type SelfSubjectRulesReviewTypeOutput

type SelfSubjectRulesReviewTypeOutput struct{ *pulumi.OutputState }

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func (SelfSubjectRulesReviewTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectRulesReviewTypeOutput) ElementType

func (SelfSubjectRulesReviewTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectRulesReviewTypeOutput) Spec

Spec holds information about the request being evaluated.

func (SelfSubjectRulesReviewTypeOutput) Status

Status is filled in by the server and indicates the set of actions a user can perform.

func (SelfSubjectRulesReviewTypeOutput) ToSelfSubjectRulesReviewTypeOutput

func (o SelfSubjectRulesReviewTypeOutput) ToSelfSubjectRulesReviewTypeOutput() SelfSubjectRulesReviewTypeOutput

func (SelfSubjectRulesReviewTypeOutput) ToSelfSubjectRulesReviewTypeOutputWithContext

func (o SelfSubjectRulesReviewTypeOutput) ToSelfSubjectRulesReviewTypeOutputWithContext(ctx context.Context) SelfSubjectRulesReviewTypeOutput

type SubjectAccessReview

type SubjectAccessReview struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrOutput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpecOutput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrOutput `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

func GetSubjectAccessReview

func GetSubjectAccessReview(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SubjectAccessReviewState, opts ...pulumi.ResourceOption) (*SubjectAccessReview, error)

GetSubjectAccessReview gets an existing SubjectAccessReview resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSubjectAccessReview

func NewSubjectAccessReview(ctx *pulumi.Context,
	name string, args *SubjectAccessReviewArgs, opts ...pulumi.ResourceOption) (*SubjectAccessReview, error)

NewSubjectAccessReview registers a new resource with the given unique name, arguments, and options.

func (*SubjectAccessReview) ElementType

func (*SubjectAccessReview) ElementType() reflect.Type

func (*SubjectAccessReview) ToSubjectAccessReviewOutput

func (i *SubjectAccessReview) ToSubjectAccessReviewOutput() SubjectAccessReviewOutput

func (*SubjectAccessReview) ToSubjectAccessReviewOutputWithContext

func (i *SubjectAccessReview) ToSubjectAccessReviewOutputWithContext(ctx context.Context) SubjectAccessReviewOutput

type SubjectAccessReviewArgs

type SubjectAccessReviewArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpecInput
}

The set of arguments for constructing a SubjectAccessReview resource.

func (SubjectAccessReviewArgs) ElementType

func (SubjectAccessReviewArgs) ElementType() reflect.Type

type SubjectAccessReviewArray

type SubjectAccessReviewArray []SubjectAccessReviewInput

func (SubjectAccessReviewArray) ElementType

func (SubjectAccessReviewArray) ElementType() reflect.Type

func (SubjectAccessReviewArray) ToSubjectAccessReviewArrayOutput

func (i SubjectAccessReviewArray) ToSubjectAccessReviewArrayOutput() SubjectAccessReviewArrayOutput

func (SubjectAccessReviewArray) ToSubjectAccessReviewArrayOutputWithContext

func (i SubjectAccessReviewArray) ToSubjectAccessReviewArrayOutputWithContext(ctx context.Context) SubjectAccessReviewArrayOutput

type SubjectAccessReviewArrayInput

type SubjectAccessReviewArrayInput interface {
	pulumi.Input

	ToSubjectAccessReviewArrayOutput() SubjectAccessReviewArrayOutput
	ToSubjectAccessReviewArrayOutputWithContext(context.Context) SubjectAccessReviewArrayOutput
}

SubjectAccessReviewArrayInput is an input type that accepts SubjectAccessReviewArray and SubjectAccessReviewArrayOutput values. You can construct a concrete instance of `SubjectAccessReviewArrayInput` via:

SubjectAccessReviewArray{ SubjectAccessReviewArgs{...} }

type SubjectAccessReviewArrayOutput

type SubjectAccessReviewArrayOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewArrayOutput) ElementType

func (SubjectAccessReviewArrayOutput) Index

func (SubjectAccessReviewArrayOutput) ToSubjectAccessReviewArrayOutput

func (o SubjectAccessReviewArrayOutput) ToSubjectAccessReviewArrayOutput() SubjectAccessReviewArrayOutput

func (SubjectAccessReviewArrayOutput) ToSubjectAccessReviewArrayOutputWithContext

func (o SubjectAccessReviewArrayOutput) ToSubjectAccessReviewArrayOutputWithContext(ctx context.Context) SubjectAccessReviewArrayOutput

type SubjectAccessReviewInput

type SubjectAccessReviewInput interface {
	pulumi.Input

	ToSubjectAccessReviewOutput() SubjectAccessReviewOutput
	ToSubjectAccessReviewOutputWithContext(ctx context.Context) SubjectAccessReviewOutput
}

type SubjectAccessReviewMap

type SubjectAccessReviewMap map[string]SubjectAccessReviewInput

func (SubjectAccessReviewMap) ElementType

func (SubjectAccessReviewMap) ElementType() reflect.Type

func (SubjectAccessReviewMap) ToSubjectAccessReviewMapOutput

func (i SubjectAccessReviewMap) ToSubjectAccessReviewMapOutput() SubjectAccessReviewMapOutput

func (SubjectAccessReviewMap) ToSubjectAccessReviewMapOutputWithContext

func (i SubjectAccessReviewMap) ToSubjectAccessReviewMapOutputWithContext(ctx context.Context) SubjectAccessReviewMapOutput

type SubjectAccessReviewMapInput

type SubjectAccessReviewMapInput interface {
	pulumi.Input

	ToSubjectAccessReviewMapOutput() SubjectAccessReviewMapOutput
	ToSubjectAccessReviewMapOutputWithContext(context.Context) SubjectAccessReviewMapOutput
}

SubjectAccessReviewMapInput is an input type that accepts SubjectAccessReviewMap and SubjectAccessReviewMapOutput values. You can construct a concrete instance of `SubjectAccessReviewMapInput` via:

SubjectAccessReviewMap{ "key": SubjectAccessReviewArgs{...} }

type SubjectAccessReviewMapOutput

type SubjectAccessReviewMapOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewMapOutput) ElementType

func (SubjectAccessReviewMapOutput) MapIndex

func (SubjectAccessReviewMapOutput) ToSubjectAccessReviewMapOutput

func (o SubjectAccessReviewMapOutput) ToSubjectAccessReviewMapOutput() SubjectAccessReviewMapOutput

func (SubjectAccessReviewMapOutput) ToSubjectAccessReviewMapOutputWithContext

func (o SubjectAccessReviewMapOutput) ToSubjectAccessReviewMapOutputWithContext(ctx context.Context) SubjectAccessReviewMapOutput

type SubjectAccessReviewOutput

type SubjectAccessReviewOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SubjectAccessReviewOutput) ElementType

func (SubjectAccessReviewOutput) ElementType() reflect.Type

func (SubjectAccessReviewOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SubjectAccessReviewOutput) Metadata added in v3.19.1

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SubjectAccessReviewOutput) Spec added in v3.19.1

Spec holds information about the request being evaluated

func (SubjectAccessReviewOutput) Status added in v3.19.1

Status is filled in by the server and indicates whether the request is allowed or not

func (SubjectAccessReviewOutput) ToSubjectAccessReviewOutput

func (o SubjectAccessReviewOutput) ToSubjectAccessReviewOutput() SubjectAccessReviewOutput

func (SubjectAccessReviewOutput) ToSubjectAccessReviewOutputWithContext

func (o SubjectAccessReviewOutput) ToSubjectAccessReviewOutputWithContext(ctx context.Context) SubjectAccessReviewOutput

type SubjectAccessReviewPatch added in v3.20.0

type SubjectAccessReviewPatch struct {
	pulumi.CustomResourceState

	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrOutput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrOutput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrOutput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpecPatchPtrOutput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrOutput `pulumi:"status"`
}

Patch resources are used to modify existing Kubernetes resources by using Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource. Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi. SubjectAccessReview checks whether or not a user or group can perform an action.

func GetSubjectAccessReviewPatch added in v3.20.0

func GetSubjectAccessReviewPatch(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SubjectAccessReviewPatchState, opts ...pulumi.ResourceOption) (*SubjectAccessReviewPatch, error)

GetSubjectAccessReviewPatch gets an existing SubjectAccessReviewPatch resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSubjectAccessReviewPatch added in v3.20.0

func NewSubjectAccessReviewPatch(ctx *pulumi.Context,
	name string, args *SubjectAccessReviewPatchArgs, opts ...pulumi.ResourceOption) (*SubjectAccessReviewPatch, error)

NewSubjectAccessReviewPatch registers a new resource with the given unique name, arguments, and options.

func (*SubjectAccessReviewPatch) ElementType added in v3.20.0

func (*SubjectAccessReviewPatch) ElementType() reflect.Type

func (*SubjectAccessReviewPatch) ToSubjectAccessReviewPatchOutput added in v3.20.0

func (i *SubjectAccessReviewPatch) ToSubjectAccessReviewPatchOutput() SubjectAccessReviewPatchOutput

func (*SubjectAccessReviewPatch) ToSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (i *SubjectAccessReviewPatch) ToSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SubjectAccessReviewPatchOutput

type SubjectAccessReviewPatchArgs added in v3.20.0

type SubjectAccessReviewPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpecPatchPtrInput
}

The set of arguments for constructing a SubjectAccessReviewPatch resource.

func (SubjectAccessReviewPatchArgs) ElementType added in v3.20.0

type SubjectAccessReviewPatchArray added in v3.20.0

type SubjectAccessReviewPatchArray []SubjectAccessReviewPatchInput

func (SubjectAccessReviewPatchArray) ElementType added in v3.20.0

func (SubjectAccessReviewPatchArray) ToSubjectAccessReviewPatchArrayOutput added in v3.20.0

func (i SubjectAccessReviewPatchArray) ToSubjectAccessReviewPatchArrayOutput() SubjectAccessReviewPatchArrayOutput

func (SubjectAccessReviewPatchArray) ToSubjectAccessReviewPatchArrayOutputWithContext added in v3.20.0

func (i SubjectAccessReviewPatchArray) ToSubjectAccessReviewPatchArrayOutputWithContext(ctx context.Context) SubjectAccessReviewPatchArrayOutput

type SubjectAccessReviewPatchArrayInput added in v3.20.0

type SubjectAccessReviewPatchArrayInput interface {
	pulumi.Input

	ToSubjectAccessReviewPatchArrayOutput() SubjectAccessReviewPatchArrayOutput
	ToSubjectAccessReviewPatchArrayOutputWithContext(context.Context) SubjectAccessReviewPatchArrayOutput
}

SubjectAccessReviewPatchArrayInput is an input type that accepts SubjectAccessReviewPatchArray and SubjectAccessReviewPatchArrayOutput values. You can construct a concrete instance of `SubjectAccessReviewPatchArrayInput` via:

SubjectAccessReviewPatchArray{ SubjectAccessReviewPatchArgs{...} }

type SubjectAccessReviewPatchArrayOutput added in v3.20.0

type SubjectAccessReviewPatchArrayOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewPatchArrayOutput) ElementType added in v3.20.0

func (SubjectAccessReviewPatchArrayOutput) Index added in v3.20.0

func (SubjectAccessReviewPatchArrayOutput) ToSubjectAccessReviewPatchArrayOutput added in v3.20.0

func (o SubjectAccessReviewPatchArrayOutput) ToSubjectAccessReviewPatchArrayOutput() SubjectAccessReviewPatchArrayOutput

func (SubjectAccessReviewPatchArrayOutput) ToSubjectAccessReviewPatchArrayOutputWithContext added in v3.20.0

func (o SubjectAccessReviewPatchArrayOutput) ToSubjectAccessReviewPatchArrayOutputWithContext(ctx context.Context) SubjectAccessReviewPatchArrayOutput

type SubjectAccessReviewPatchInput added in v3.20.0

type SubjectAccessReviewPatchInput interface {
	pulumi.Input

	ToSubjectAccessReviewPatchOutput() SubjectAccessReviewPatchOutput
	ToSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SubjectAccessReviewPatchOutput
}

type SubjectAccessReviewPatchMap added in v3.20.0

type SubjectAccessReviewPatchMap map[string]SubjectAccessReviewPatchInput

func (SubjectAccessReviewPatchMap) ElementType added in v3.20.0

func (SubjectAccessReviewPatchMap) ToSubjectAccessReviewPatchMapOutput added in v3.20.0

func (i SubjectAccessReviewPatchMap) ToSubjectAccessReviewPatchMapOutput() SubjectAccessReviewPatchMapOutput

func (SubjectAccessReviewPatchMap) ToSubjectAccessReviewPatchMapOutputWithContext added in v3.20.0

func (i SubjectAccessReviewPatchMap) ToSubjectAccessReviewPatchMapOutputWithContext(ctx context.Context) SubjectAccessReviewPatchMapOutput

type SubjectAccessReviewPatchMapInput added in v3.20.0

type SubjectAccessReviewPatchMapInput interface {
	pulumi.Input

	ToSubjectAccessReviewPatchMapOutput() SubjectAccessReviewPatchMapOutput
	ToSubjectAccessReviewPatchMapOutputWithContext(context.Context) SubjectAccessReviewPatchMapOutput
}

SubjectAccessReviewPatchMapInput is an input type that accepts SubjectAccessReviewPatchMap and SubjectAccessReviewPatchMapOutput values. You can construct a concrete instance of `SubjectAccessReviewPatchMapInput` via:

SubjectAccessReviewPatchMap{ "key": SubjectAccessReviewPatchArgs{...} }

type SubjectAccessReviewPatchMapOutput added in v3.20.0

type SubjectAccessReviewPatchMapOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewPatchMapOutput) ElementType added in v3.20.0

func (SubjectAccessReviewPatchMapOutput) MapIndex added in v3.20.0

func (SubjectAccessReviewPatchMapOutput) ToSubjectAccessReviewPatchMapOutput added in v3.20.0

func (o SubjectAccessReviewPatchMapOutput) ToSubjectAccessReviewPatchMapOutput() SubjectAccessReviewPatchMapOutput

func (SubjectAccessReviewPatchMapOutput) ToSubjectAccessReviewPatchMapOutputWithContext added in v3.20.0

func (o SubjectAccessReviewPatchMapOutput) ToSubjectAccessReviewPatchMapOutputWithContext(ctx context.Context) SubjectAccessReviewPatchMapOutput

type SubjectAccessReviewPatchOutput added in v3.20.0

type SubjectAccessReviewPatchOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SubjectAccessReviewPatchOutput) ElementType added in v3.20.0

func (SubjectAccessReviewPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SubjectAccessReviewPatchOutput) Metadata added in v3.20.0

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SubjectAccessReviewPatchOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated

func (SubjectAccessReviewPatchOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (SubjectAccessReviewPatchOutput) ToSubjectAccessReviewPatchOutput added in v3.20.0

func (o SubjectAccessReviewPatchOutput) ToSubjectAccessReviewPatchOutput() SubjectAccessReviewPatchOutput

func (SubjectAccessReviewPatchOutput) ToSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (o SubjectAccessReviewPatchOutput) ToSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SubjectAccessReviewPatchOutput

type SubjectAccessReviewPatchState added in v3.20.0

type SubjectAccessReviewPatchState struct {
}

func (SubjectAccessReviewPatchState) ElementType added in v3.20.0

type SubjectAccessReviewPatchType added in v3.20.0

type SubjectAccessReviewPatchType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec *SubjectAccessReviewSpecPatch `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatusPatch `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

type SubjectAccessReviewPatchTypeArgs added in v3.20.0

type SubjectAccessReviewPatchTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpecPatchPtrInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrInput `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

func (SubjectAccessReviewPatchTypeArgs) ElementType added in v3.20.0

func (SubjectAccessReviewPatchTypeArgs) ToSubjectAccessReviewPatchTypeOutput added in v3.20.0

func (i SubjectAccessReviewPatchTypeArgs) ToSubjectAccessReviewPatchTypeOutput() SubjectAccessReviewPatchTypeOutput

func (SubjectAccessReviewPatchTypeArgs) ToSubjectAccessReviewPatchTypeOutputWithContext added in v3.20.0

func (i SubjectAccessReviewPatchTypeArgs) ToSubjectAccessReviewPatchTypeOutputWithContext(ctx context.Context) SubjectAccessReviewPatchTypeOutput

type SubjectAccessReviewPatchTypeInput added in v3.20.0

type SubjectAccessReviewPatchTypeInput interface {
	pulumi.Input

	ToSubjectAccessReviewPatchTypeOutput() SubjectAccessReviewPatchTypeOutput
	ToSubjectAccessReviewPatchTypeOutputWithContext(context.Context) SubjectAccessReviewPatchTypeOutput
}

SubjectAccessReviewPatchTypeInput is an input type that accepts SubjectAccessReviewPatchTypeArgs and SubjectAccessReviewPatchTypeOutput values. You can construct a concrete instance of `SubjectAccessReviewPatchTypeInput` via:

SubjectAccessReviewPatchTypeArgs{...}

type SubjectAccessReviewPatchTypeOutput added in v3.20.0

type SubjectAccessReviewPatchTypeOutput struct{ *pulumi.OutputState }

SubjectAccessReview checks whether or not a user or group can perform an action.

func (SubjectAccessReviewPatchTypeOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SubjectAccessReviewPatchTypeOutput) ElementType added in v3.20.0

func (SubjectAccessReviewPatchTypeOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SubjectAccessReviewPatchTypeOutput) Metadata added in v3.20.0

Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata

func (SubjectAccessReviewPatchTypeOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated

func (SubjectAccessReviewPatchTypeOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (SubjectAccessReviewPatchTypeOutput) ToSubjectAccessReviewPatchTypeOutput added in v3.20.0

func (o SubjectAccessReviewPatchTypeOutput) ToSubjectAccessReviewPatchTypeOutput() SubjectAccessReviewPatchTypeOutput

func (SubjectAccessReviewPatchTypeOutput) ToSubjectAccessReviewPatchTypeOutputWithContext added in v3.20.0

func (o SubjectAccessReviewPatchTypeOutput) ToSubjectAccessReviewPatchTypeOutputWithContext(ctx context.Context) SubjectAccessReviewPatchTypeOutput

type SubjectAccessReviewSpec

type SubjectAccessReviewSpec struct {
	// Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.
	Extra map[string][]string `pulumi:"extra"`
	// Groups is the groups you're testing for.
	Groups []string `pulumi:"groups"`
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes *NonResourceAttributes `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes *ResourceAttributes `pulumi:"resourceAttributes"`
	// UID information about the requesting user.
	Uid *string `pulumi:"uid"`
	// User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups
	User *string `pulumi:"user"`
}

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

type SubjectAccessReviewSpecArgs

type SubjectAccessReviewSpecArgs struct {
	// Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.
	Extra pulumi.StringArrayMapInput `pulumi:"extra"`
	// Groups is the groups you're testing for.
	Groups pulumi.StringArrayInput `pulumi:"groups"`
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes NonResourceAttributesPtrInput `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes ResourceAttributesPtrInput `pulumi:"resourceAttributes"`
	// UID information about the requesting user.
	Uid pulumi.StringPtrInput `pulumi:"uid"`
	// User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups
	User pulumi.StringPtrInput `pulumi:"user"`
}

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SubjectAccessReviewSpecArgs) ElementType

func (SubjectAccessReviewSpecArgs) ToSubjectAccessReviewSpecOutput

func (i SubjectAccessReviewSpecArgs) ToSubjectAccessReviewSpecOutput() SubjectAccessReviewSpecOutput

func (SubjectAccessReviewSpecArgs) ToSubjectAccessReviewSpecOutputWithContext

func (i SubjectAccessReviewSpecArgs) ToSubjectAccessReviewSpecOutputWithContext(ctx context.Context) SubjectAccessReviewSpecOutput

type SubjectAccessReviewSpecInput

type SubjectAccessReviewSpecInput interface {
	pulumi.Input

	ToSubjectAccessReviewSpecOutput() SubjectAccessReviewSpecOutput
	ToSubjectAccessReviewSpecOutputWithContext(context.Context) SubjectAccessReviewSpecOutput
}

SubjectAccessReviewSpecInput is an input type that accepts SubjectAccessReviewSpecArgs and SubjectAccessReviewSpecOutput values. You can construct a concrete instance of `SubjectAccessReviewSpecInput` via:

SubjectAccessReviewSpecArgs{...}

type SubjectAccessReviewSpecOutput

type SubjectAccessReviewSpecOutput struct{ *pulumi.OutputState }

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SubjectAccessReviewSpecOutput) ElementType

func (SubjectAccessReviewSpecOutput) Extra

Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.

func (SubjectAccessReviewSpecOutput) Groups

Groups is the groups you're testing for.

func (SubjectAccessReviewSpecOutput) NonResourceAttributes

NonResourceAttributes describes information for a non-resource access request

func (SubjectAccessReviewSpecOutput) ResourceAttributes

ResourceAuthorizationAttributes describes information for a resource access request

func (SubjectAccessReviewSpecOutput) ToSubjectAccessReviewSpecOutput

func (o SubjectAccessReviewSpecOutput) ToSubjectAccessReviewSpecOutput() SubjectAccessReviewSpecOutput

func (SubjectAccessReviewSpecOutput) ToSubjectAccessReviewSpecOutputWithContext

func (o SubjectAccessReviewSpecOutput) ToSubjectAccessReviewSpecOutputWithContext(ctx context.Context) SubjectAccessReviewSpecOutput

func (SubjectAccessReviewSpecOutput) Uid

UID information about the requesting user.

func (SubjectAccessReviewSpecOutput) User

User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups

type SubjectAccessReviewSpecPatch added in v3.20.0

type SubjectAccessReviewSpecPatch struct {
	// Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.
	Extra map[string][]string `pulumi:"extra"`
	// Groups is the groups you're testing for.
	Groups []string `pulumi:"groups"`
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes *NonResourceAttributesPatch `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes *ResourceAttributesPatch `pulumi:"resourceAttributes"`
	// UID information about the requesting user.
	Uid *string `pulumi:"uid"`
	// User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups
	User *string `pulumi:"user"`
}

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

type SubjectAccessReviewSpecPatchArgs added in v3.20.0

type SubjectAccessReviewSpecPatchArgs struct {
	// Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.
	Extra pulumi.StringArrayMapInput `pulumi:"extra"`
	// Groups is the groups you're testing for.
	Groups pulumi.StringArrayInput `pulumi:"groups"`
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes NonResourceAttributesPatchPtrInput `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes ResourceAttributesPatchPtrInput `pulumi:"resourceAttributes"`
	// UID information about the requesting user.
	Uid pulumi.StringPtrInput `pulumi:"uid"`
	// User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups
	User pulumi.StringPtrInput `pulumi:"user"`
}

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SubjectAccessReviewSpecPatchArgs) ElementType added in v3.20.0

func (SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchOutput added in v3.20.0

func (i SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchOutput() SubjectAccessReviewSpecPatchOutput

func (SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchOutputWithContext added in v3.20.0

func (i SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchOutput

func (SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (i SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchPtrOutput() SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (i SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchPtrOutput

type SubjectAccessReviewSpecPatchInput added in v3.20.0

type SubjectAccessReviewSpecPatchInput interface {
	pulumi.Input

	ToSubjectAccessReviewSpecPatchOutput() SubjectAccessReviewSpecPatchOutput
	ToSubjectAccessReviewSpecPatchOutputWithContext(context.Context) SubjectAccessReviewSpecPatchOutput
}

SubjectAccessReviewSpecPatchInput is an input type that accepts SubjectAccessReviewSpecPatchArgs and SubjectAccessReviewSpecPatchOutput values. You can construct a concrete instance of `SubjectAccessReviewSpecPatchInput` via:

SubjectAccessReviewSpecPatchArgs{...}

type SubjectAccessReviewSpecPatchOutput added in v3.20.0

type SubjectAccessReviewSpecPatchOutput struct{ *pulumi.OutputState }

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SubjectAccessReviewSpecPatchOutput) ElementType added in v3.20.0

func (SubjectAccessReviewSpecPatchOutput) Extra added in v3.20.0

Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.

func (SubjectAccessReviewSpecPatchOutput) Groups added in v3.20.0

Groups is the groups you're testing for.

func (SubjectAccessReviewSpecPatchOutput) NonResourceAttributes added in v3.20.0

NonResourceAttributes describes information for a non-resource access request

func (SubjectAccessReviewSpecPatchOutput) ResourceAttributes added in v3.20.0

ResourceAuthorizationAttributes describes information for a resource access request

func (SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchOutput added in v3.20.0

func (o SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchOutput() SubjectAccessReviewSpecPatchOutput

func (SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchOutputWithContext added in v3.20.0

func (o SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchOutput

func (SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (o SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchPtrOutput() SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchOutput) Uid added in v3.20.0

UID information about the requesting user.

func (SubjectAccessReviewSpecPatchOutput) User added in v3.20.0

User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups

type SubjectAccessReviewSpecPatchPtrInput added in v3.20.0

type SubjectAccessReviewSpecPatchPtrInput interface {
	pulumi.Input

	ToSubjectAccessReviewSpecPatchPtrOutput() SubjectAccessReviewSpecPatchPtrOutput
	ToSubjectAccessReviewSpecPatchPtrOutputWithContext(context.Context) SubjectAccessReviewSpecPatchPtrOutput
}

SubjectAccessReviewSpecPatchPtrInput is an input type that accepts SubjectAccessReviewSpecPatchArgs, SubjectAccessReviewSpecPatchPtr and SubjectAccessReviewSpecPatchPtrOutput values. You can construct a concrete instance of `SubjectAccessReviewSpecPatchPtrInput` via:

        SubjectAccessReviewSpecPatchArgs{...}

or:

        nil

func SubjectAccessReviewSpecPatchPtr added in v3.20.0

type SubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

type SubjectAccessReviewSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewSpecPatchPtrOutput) Elem added in v3.20.0

func (SubjectAccessReviewSpecPatchPtrOutput) ElementType added in v3.20.0

func (SubjectAccessReviewSpecPatchPtrOutput) Extra added in v3.20.0

Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.

func (SubjectAccessReviewSpecPatchPtrOutput) Groups added in v3.20.0

Groups is the groups you're testing for.

func (SubjectAccessReviewSpecPatchPtrOutput) NonResourceAttributes added in v3.20.0

NonResourceAttributes describes information for a non-resource access request

func (SubjectAccessReviewSpecPatchPtrOutput) ResourceAttributes added in v3.20.0

ResourceAuthorizationAttributes describes information for a resource access request

func (SubjectAccessReviewSpecPatchPtrOutput) ToSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (o SubjectAccessReviewSpecPatchPtrOutput) ToSubjectAccessReviewSpecPatchPtrOutput() SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchPtrOutput) ToSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SubjectAccessReviewSpecPatchPtrOutput) ToSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchPtrOutput) Uid added in v3.20.0

UID information about the requesting user.

func (SubjectAccessReviewSpecPatchPtrOutput) User added in v3.20.0

User is the user you're testing for. If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups

type SubjectAccessReviewState

type SubjectAccessReviewState struct {
}

func (SubjectAccessReviewState) ElementType

func (SubjectAccessReviewState) ElementType() reflect.Type

type SubjectAccessReviewStatus

type SubjectAccessReviewStatus struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed bool `pulumi:"allowed"`
	// Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
	Denied *bool `pulumi:"denied"`
	// EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
	EvaluationError *string `pulumi:"evaluationError"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason *string `pulumi:"reason"`
}

SubjectAccessReviewStatus

type SubjectAccessReviewStatusArgs

type SubjectAccessReviewStatusArgs struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed pulumi.BoolInput `pulumi:"allowed"`
	// Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
	Denied pulumi.BoolPtrInput `pulumi:"denied"`
	// EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
	EvaluationError pulumi.StringPtrInput `pulumi:"evaluationError"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason pulumi.StringPtrInput `pulumi:"reason"`
}

SubjectAccessReviewStatus

func (SubjectAccessReviewStatusArgs) ElementType

func (SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusOutput

func (i SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusOutput() SubjectAccessReviewStatusOutput

func (SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusOutputWithContext

func (i SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusOutputWithContext(ctx context.Context) SubjectAccessReviewStatusOutput

func (SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusPtrOutput

func (i SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusPtrOutput() SubjectAccessReviewStatusPtrOutput

func (SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusPtrOutputWithContext

func (i SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPtrOutput

type SubjectAccessReviewStatusInput

type SubjectAccessReviewStatusInput interface {
	pulumi.Input

	ToSubjectAccessReviewStatusOutput() SubjectAccessReviewStatusOutput
	ToSubjectAccessReviewStatusOutputWithContext(context.Context) SubjectAccessReviewStatusOutput
}

SubjectAccessReviewStatusInput is an input type that accepts SubjectAccessReviewStatusArgs and SubjectAccessReviewStatusOutput values. You can construct a concrete instance of `SubjectAccessReviewStatusInput` via:

SubjectAccessReviewStatusArgs{...}

type SubjectAccessReviewStatusOutput

type SubjectAccessReviewStatusOutput struct{ *pulumi.OutputState }

SubjectAccessReviewStatus

func (SubjectAccessReviewStatusOutput) Allowed

Allowed is required. True if the action would be allowed, false otherwise.

func (SubjectAccessReviewStatusOutput) Denied

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

func (SubjectAccessReviewStatusOutput) ElementType

func (SubjectAccessReviewStatusOutput) EvaluationError

EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.

func (SubjectAccessReviewStatusOutput) Reason

Reason is optional. It indicates why a request was allowed or denied.

func (SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusOutput

func (o SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusOutput() SubjectAccessReviewStatusOutput

func (SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusOutputWithContext

func (o SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusOutputWithContext(ctx context.Context) SubjectAccessReviewStatusOutput

func (SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusPtrOutput

func (o SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusPtrOutput() SubjectAccessReviewStatusPtrOutput

func (SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusPtrOutputWithContext

func (o SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPtrOutput

type SubjectAccessReviewStatusPatch added in v3.20.0

type SubjectAccessReviewStatusPatch struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed *bool `pulumi:"allowed"`
	// Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
	Denied *bool `pulumi:"denied"`
	// EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
	EvaluationError *string `pulumi:"evaluationError"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason *string `pulumi:"reason"`
}

SubjectAccessReviewStatus

type SubjectAccessReviewStatusPatchArgs added in v3.20.0

type SubjectAccessReviewStatusPatchArgs struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed pulumi.BoolPtrInput `pulumi:"allowed"`
	// Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
	Denied pulumi.BoolPtrInput `pulumi:"denied"`
	// EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
	EvaluationError pulumi.StringPtrInput `pulumi:"evaluationError"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason pulumi.StringPtrInput `pulumi:"reason"`
}

SubjectAccessReviewStatus

func (SubjectAccessReviewStatusPatchArgs) ElementType added in v3.20.0

func (SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchOutput added in v3.20.0

func (i SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchOutput() SubjectAccessReviewStatusPatchOutput

func (SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchOutputWithContext added in v3.20.0

func (i SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchOutput

func (SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchPtrOutput added in v3.20.0

func (i SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchPtrOutput() SubjectAccessReviewStatusPatchPtrOutput

func (SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (i SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchPtrOutput

type SubjectAccessReviewStatusPatchInput added in v3.20.0

type SubjectAccessReviewStatusPatchInput interface {
	pulumi.Input

	ToSubjectAccessReviewStatusPatchOutput() SubjectAccessReviewStatusPatchOutput
	ToSubjectAccessReviewStatusPatchOutputWithContext(context.Context) SubjectAccessReviewStatusPatchOutput
}

SubjectAccessReviewStatusPatchInput is an input type that accepts SubjectAccessReviewStatusPatchArgs and SubjectAccessReviewStatusPatchOutput values. You can construct a concrete instance of `SubjectAccessReviewStatusPatchInput` via:

SubjectAccessReviewStatusPatchArgs{...}

type SubjectAccessReviewStatusPatchOutput added in v3.20.0

type SubjectAccessReviewStatusPatchOutput struct{ *pulumi.OutputState }

SubjectAccessReviewStatus

func (SubjectAccessReviewStatusPatchOutput) Allowed added in v3.20.0

Allowed is required. True if the action would be allowed, false otherwise.

func (SubjectAccessReviewStatusPatchOutput) Denied added in v3.20.0

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

func (SubjectAccessReviewStatusPatchOutput) ElementType added in v3.20.0

func (SubjectAccessReviewStatusPatchOutput) EvaluationError added in v3.20.0

EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.

func (SubjectAccessReviewStatusPatchOutput) Reason added in v3.20.0

Reason is optional. It indicates why a request was allowed or denied.

func (SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchOutput added in v3.20.0

func (o SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchOutput() SubjectAccessReviewStatusPatchOutput

func (SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchOutputWithContext added in v3.20.0

func (o SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchOutput

func (SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchPtrOutput added in v3.20.0

func (o SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchPtrOutput() SubjectAccessReviewStatusPatchPtrOutput

func (SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (o SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchPtrOutput

type SubjectAccessReviewStatusPatchPtrInput added in v3.20.0

type SubjectAccessReviewStatusPatchPtrInput interface {
	pulumi.Input

	ToSubjectAccessReviewStatusPatchPtrOutput() SubjectAccessReviewStatusPatchPtrOutput
	ToSubjectAccessReviewStatusPatchPtrOutputWithContext(context.Context) SubjectAccessReviewStatusPatchPtrOutput
}

SubjectAccessReviewStatusPatchPtrInput is an input type that accepts SubjectAccessReviewStatusPatchArgs, SubjectAccessReviewStatusPatchPtr and SubjectAccessReviewStatusPatchPtrOutput values. You can construct a concrete instance of `SubjectAccessReviewStatusPatchPtrInput` via:

        SubjectAccessReviewStatusPatchArgs{...}

or:

        nil

type SubjectAccessReviewStatusPatchPtrOutput added in v3.20.0

type SubjectAccessReviewStatusPatchPtrOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewStatusPatchPtrOutput) Allowed added in v3.20.0

Allowed is required. True if the action would be allowed, false otherwise.

func (SubjectAccessReviewStatusPatchPtrOutput) Denied added in v3.20.0

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

func (SubjectAccessReviewStatusPatchPtrOutput) Elem added in v3.20.0

func (SubjectAccessReviewStatusPatchPtrOutput) ElementType added in v3.20.0

func (SubjectAccessReviewStatusPatchPtrOutput) EvaluationError added in v3.20.0

EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.

func (SubjectAccessReviewStatusPatchPtrOutput) Reason added in v3.20.0

Reason is optional. It indicates why a request was allowed or denied.

func (SubjectAccessReviewStatusPatchPtrOutput) ToSubjectAccessReviewStatusPatchPtrOutput added in v3.20.0

func (o SubjectAccessReviewStatusPatchPtrOutput) ToSubjectAccessReviewStatusPatchPtrOutput() SubjectAccessReviewStatusPatchPtrOutput

func (SubjectAccessReviewStatusPatchPtrOutput) ToSubjectAccessReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (o SubjectAccessReviewStatusPatchPtrOutput) ToSubjectAccessReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchPtrOutput

type SubjectAccessReviewStatusPtrInput

type SubjectAccessReviewStatusPtrInput interface {
	pulumi.Input

	ToSubjectAccessReviewStatusPtrOutput() SubjectAccessReviewStatusPtrOutput
	ToSubjectAccessReviewStatusPtrOutputWithContext(context.Context) SubjectAccessReviewStatusPtrOutput
}

SubjectAccessReviewStatusPtrInput is an input type that accepts SubjectAccessReviewStatusArgs, SubjectAccessReviewStatusPtr and SubjectAccessReviewStatusPtrOutput values. You can construct a concrete instance of `SubjectAccessReviewStatusPtrInput` via:

        SubjectAccessReviewStatusArgs{...}

or:

        nil

type SubjectAccessReviewStatusPtrOutput

type SubjectAccessReviewStatusPtrOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewStatusPtrOutput) Allowed

Allowed is required. True if the action would be allowed, false otherwise.

func (SubjectAccessReviewStatusPtrOutput) Denied

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

func (SubjectAccessReviewStatusPtrOutput) Elem

func (SubjectAccessReviewStatusPtrOutput) ElementType

func (SubjectAccessReviewStatusPtrOutput) EvaluationError

EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.

func (SubjectAccessReviewStatusPtrOutput) Reason

Reason is optional. It indicates why a request was allowed or denied.

func (SubjectAccessReviewStatusPtrOutput) ToSubjectAccessReviewStatusPtrOutput

func (o SubjectAccessReviewStatusPtrOutput) ToSubjectAccessReviewStatusPtrOutput() SubjectAccessReviewStatusPtrOutput

func (SubjectAccessReviewStatusPtrOutput) ToSubjectAccessReviewStatusPtrOutputWithContext

func (o SubjectAccessReviewStatusPtrOutput) ToSubjectAccessReviewStatusPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPtrOutput

type SubjectAccessReviewType

type SubjectAccessReviewType struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind *string `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpec `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatus `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

type SubjectAccessReviewTypeArgs

type SubjectAccessReviewTypeArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind pulumi.StringPtrInput `pulumi:"kind"`
	// Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpecInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrInput `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

func (SubjectAccessReviewTypeArgs) ElementType

func (SubjectAccessReviewTypeArgs) ToSubjectAccessReviewTypeOutput

func (i SubjectAccessReviewTypeArgs) ToSubjectAccessReviewTypeOutput() SubjectAccessReviewTypeOutput

func (SubjectAccessReviewTypeArgs) ToSubjectAccessReviewTypeOutputWithContext

func (i SubjectAccessReviewTypeArgs) ToSubjectAccessReviewTypeOutputWithContext(ctx context.Context) SubjectAccessReviewTypeOutput

type SubjectAccessReviewTypeInput

type SubjectAccessReviewTypeInput interface {
	pulumi.Input

	ToSubjectAccessReviewTypeOutput() SubjectAccessReviewTypeOutput
	ToSubjectAccessReviewTypeOutputWithContext(context.Context) SubjectAccessReviewTypeOutput
}

SubjectAccessReviewTypeInput is an input type that accepts SubjectAccessReviewTypeArgs and SubjectAccessReviewTypeOutput values. You can construct a concrete instance of `SubjectAccessReviewTypeInput` via:

SubjectAccessReviewTypeArgs{...}

type SubjectAccessReviewTypeOutput

type SubjectAccessReviewTypeOutput struct{ *pulumi.OutputState }

SubjectAccessReview checks whether or not a user or group can perform an action.

func (SubjectAccessReviewTypeOutput) ApiVersion

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SubjectAccessReviewTypeOutput) ElementType

func (SubjectAccessReviewTypeOutput) Kind

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SubjectAccessReviewTypeOutput) Spec

Spec holds information about the request being evaluated

func (SubjectAccessReviewTypeOutput) Status

Status is filled in by the server and indicates whether the request is allowed or not

func (SubjectAccessReviewTypeOutput) ToSubjectAccessReviewTypeOutput

func (o SubjectAccessReviewTypeOutput) ToSubjectAccessReviewTypeOutput() SubjectAccessReviewTypeOutput

func (SubjectAccessReviewTypeOutput) ToSubjectAccessReviewTypeOutputWithContext

func (o SubjectAccessReviewTypeOutput) ToSubjectAccessReviewTypeOutputWithContext(ctx context.Context) SubjectAccessReviewTypeOutput

type SubjectRulesReviewStatus

type SubjectRulesReviewStatus struct {
	// EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
	EvaluationError *string `pulumi:"evaluationError"`
	// Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
	Incomplete bool `pulumi:"incomplete"`
	// NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	NonResourceRules []NonResourceRule `pulumi:"nonResourceRules"`
	// ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	ResourceRules []ResourceRule `pulumi:"resourceRules"`
}

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

type SubjectRulesReviewStatusArgs

type SubjectRulesReviewStatusArgs struct {
	// EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
	EvaluationError pulumi.StringPtrInput `pulumi:"evaluationError"`
	// Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
	Incomplete pulumi.BoolInput `pulumi:"incomplete"`
	// NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	NonResourceRules NonResourceRuleArrayInput `pulumi:"nonResourceRules"`
	// ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	ResourceRules ResourceRuleArrayInput `pulumi:"resourceRules"`
}

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

func (SubjectRulesReviewStatusArgs) ElementType

func (SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusOutput

func (i SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusOutput() SubjectRulesReviewStatusOutput

func (SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusOutputWithContext

func (i SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusOutputWithContext(ctx context.Context) SubjectRulesReviewStatusOutput

func (SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusPtrOutput

func (i SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusPtrOutput() SubjectRulesReviewStatusPtrOutput

func (SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusPtrOutputWithContext

func (i SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPtrOutput

type SubjectRulesReviewStatusInput

type SubjectRulesReviewStatusInput interface {
	pulumi.Input

	ToSubjectRulesReviewStatusOutput() SubjectRulesReviewStatusOutput
	ToSubjectRulesReviewStatusOutputWithContext(context.Context) SubjectRulesReviewStatusOutput
}

SubjectRulesReviewStatusInput is an input type that accepts SubjectRulesReviewStatusArgs and SubjectRulesReviewStatusOutput values. You can construct a concrete instance of `SubjectRulesReviewStatusInput` via:

SubjectRulesReviewStatusArgs{...}

type SubjectRulesReviewStatusOutput

type SubjectRulesReviewStatusOutput struct{ *pulumi.OutputState }

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

func (SubjectRulesReviewStatusOutput) ElementType

func (SubjectRulesReviewStatusOutput) EvaluationError

EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.

func (SubjectRulesReviewStatusOutput) Incomplete

Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.

func (SubjectRulesReviewStatusOutput) NonResourceRules

NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusOutput) ResourceRules

ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusOutput

func (o SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusOutput() SubjectRulesReviewStatusOutput

func (SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusOutputWithContext

func (o SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusOutputWithContext(ctx context.Context) SubjectRulesReviewStatusOutput

func (SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusPtrOutput

func (o SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusPtrOutput() SubjectRulesReviewStatusPtrOutput

func (SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusPtrOutputWithContext

func (o SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPtrOutput

type SubjectRulesReviewStatusPatch added in v3.20.0

type SubjectRulesReviewStatusPatch struct {
	// EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
	EvaluationError *string `pulumi:"evaluationError"`
	// Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
	Incomplete *bool `pulumi:"incomplete"`
	// NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	NonResourceRules []NonResourceRulePatch `pulumi:"nonResourceRules"`
	// ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	ResourceRules []ResourceRulePatch `pulumi:"resourceRules"`
}

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

type SubjectRulesReviewStatusPatchArgs added in v3.20.0

type SubjectRulesReviewStatusPatchArgs struct {
	// EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
	EvaluationError pulumi.StringPtrInput `pulumi:"evaluationError"`
	// Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
	Incomplete pulumi.BoolPtrInput `pulumi:"incomplete"`
	// NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	NonResourceRules NonResourceRulePatchArrayInput `pulumi:"nonResourceRules"`
	// ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	ResourceRules ResourceRulePatchArrayInput `pulumi:"resourceRules"`
}

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

func (SubjectRulesReviewStatusPatchArgs) ElementType added in v3.20.0

func (SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchOutput added in v3.20.0

func (i SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchOutput() SubjectRulesReviewStatusPatchOutput

func (SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchOutputWithContext added in v3.20.0

func (i SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchOutput

func (SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchPtrOutput added in v3.20.0

func (i SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchPtrOutput() SubjectRulesReviewStatusPatchPtrOutput

func (SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (i SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchPtrOutput

type SubjectRulesReviewStatusPatchInput added in v3.20.0

type SubjectRulesReviewStatusPatchInput interface {
	pulumi.Input

	ToSubjectRulesReviewStatusPatchOutput() SubjectRulesReviewStatusPatchOutput
	ToSubjectRulesReviewStatusPatchOutputWithContext(context.Context) SubjectRulesReviewStatusPatchOutput
}

SubjectRulesReviewStatusPatchInput is an input type that accepts SubjectRulesReviewStatusPatchArgs and SubjectRulesReviewStatusPatchOutput values. You can construct a concrete instance of `SubjectRulesReviewStatusPatchInput` via:

SubjectRulesReviewStatusPatchArgs{...}

type SubjectRulesReviewStatusPatchOutput added in v3.20.0

type SubjectRulesReviewStatusPatchOutput struct{ *pulumi.OutputState }

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

func (SubjectRulesReviewStatusPatchOutput) ElementType added in v3.20.0

func (SubjectRulesReviewStatusPatchOutput) EvaluationError added in v3.20.0

EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.

func (SubjectRulesReviewStatusPatchOutput) Incomplete added in v3.20.0

Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.

func (SubjectRulesReviewStatusPatchOutput) NonResourceRules added in v3.20.0

NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPatchOutput) ResourceRules added in v3.20.0

ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchOutput added in v3.20.0

func (o SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchOutput() SubjectRulesReviewStatusPatchOutput

func (SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchOutputWithContext added in v3.20.0

func (o SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchOutput

func (SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchPtrOutput added in v3.20.0

func (o SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchPtrOutput() SubjectRulesReviewStatusPatchPtrOutput

func (SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (o SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchPtrOutput

type SubjectRulesReviewStatusPatchPtrInput added in v3.20.0

type SubjectRulesReviewStatusPatchPtrInput interface {
	pulumi.Input

	ToSubjectRulesReviewStatusPatchPtrOutput() SubjectRulesReviewStatusPatchPtrOutput
	ToSubjectRulesReviewStatusPatchPtrOutputWithContext(context.Context) SubjectRulesReviewStatusPatchPtrOutput
}

SubjectRulesReviewStatusPatchPtrInput is an input type that accepts SubjectRulesReviewStatusPatchArgs, SubjectRulesReviewStatusPatchPtr and SubjectRulesReviewStatusPatchPtrOutput values. You can construct a concrete instance of `SubjectRulesReviewStatusPatchPtrInput` via:

        SubjectRulesReviewStatusPatchArgs{...}

or:

        nil

type SubjectRulesReviewStatusPatchPtrOutput added in v3.20.0

type SubjectRulesReviewStatusPatchPtrOutput struct{ *pulumi.OutputState }

func (SubjectRulesReviewStatusPatchPtrOutput) Elem added in v3.20.0

func (SubjectRulesReviewStatusPatchPtrOutput) ElementType added in v3.20.0

func (SubjectRulesReviewStatusPatchPtrOutput) EvaluationError added in v3.20.0

EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.

func (SubjectRulesReviewStatusPatchPtrOutput) Incomplete added in v3.20.0

Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.

func (SubjectRulesReviewStatusPatchPtrOutput) NonResourceRules added in v3.20.0

NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPatchPtrOutput) ResourceRules added in v3.20.0

ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPatchPtrOutput) ToSubjectRulesReviewStatusPatchPtrOutput added in v3.20.0

func (o SubjectRulesReviewStatusPatchPtrOutput) ToSubjectRulesReviewStatusPatchPtrOutput() SubjectRulesReviewStatusPatchPtrOutput

func (SubjectRulesReviewStatusPatchPtrOutput) ToSubjectRulesReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (o SubjectRulesReviewStatusPatchPtrOutput) ToSubjectRulesReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchPtrOutput

type SubjectRulesReviewStatusPtrInput

type SubjectRulesReviewStatusPtrInput interface {
	pulumi.Input

	ToSubjectRulesReviewStatusPtrOutput() SubjectRulesReviewStatusPtrOutput
	ToSubjectRulesReviewStatusPtrOutputWithContext(context.Context) SubjectRulesReviewStatusPtrOutput
}

SubjectRulesReviewStatusPtrInput is an input type that accepts SubjectRulesReviewStatusArgs, SubjectRulesReviewStatusPtr and SubjectRulesReviewStatusPtrOutput values. You can construct a concrete instance of `SubjectRulesReviewStatusPtrInput` via:

        SubjectRulesReviewStatusArgs{...}

or:

        nil

type SubjectRulesReviewStatusPtrOutput

type SubjectRulesReviewStatusPtrOutput struct{ *pulumi.OutputState }

func (SubjectRulesReviewStatusPtrOutput) Elem

func (SubjectRulesReviewStatusPtrOutput) ElementType

func (SubjectRulesReviewStatusPtrOutput) EvaluationError

EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.

func (SubjectRulesReviewStatusPtrOutput) Incomplete

Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.

func (SubjectRulesReviewStatusPtrOutput) NonResourceRules

NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPtrOutput) ResourceRules

ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPtrOutput) ToSubjectRulesReviewStatusPtrOutput

func (o SubjectRulesReviewStatusPtrOutput) ToSubjectRulesReviewStatusPtrOutput() SubjectRulesReviewStatusPtrOutput

func (SubjectRulesReviewStatusPtrOutput) ToSubjectRulesReviewStatusPtrOutputWithContext

func (o SubjectRulesReviewStatusPtrOutput) ToSubjectRulesReviewStatusPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPtrOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL