policybased

Documentation

Overview

Package policybased implements a standard storage for ClusterRole that prevents privilege escalation.

Index

• type Storage
  • func NewStorage(s rest.StandardStorage, ...) *Storage
  • func (s *Storage) Create(ctx genericapirequest.Context, obj runtime.Object, ...) (runtime.Object, error)
  • func (s *Storage) Update(ctx genericapirequest.Context, name string, obj rest.UpdatedObjectInfo, ...) (runtime.Object, bool, error)

Types

type Storage

type Storage struct {
	rest.StandardStorage
	// contains filtered or unexported fields
}

func NewStorage

func NewStorage(s rest.StandardStorage, ruleResolver rbacregistryvalidation.AuthorizationRuleResolver) *Storage

func (*Storage) Create

func (s *Storage) Create(ctx genericapirequest.Context, obj runtime.Object, createValidatingAdmission rest.ValidateObjectFunc, includeUninitialized bool) (runtime.Object, error)

func (*Storage) Update

func (s *Storage) Update(ctx genericapirequest.Context, name string, obj rest.UpdatedObjectInfo, createValidation rest.ValidateObjectFunc, updateValidation rest.ValidateObjectUpdateFunc) (runtime.Object, bool, error)