Documentation
¶
Index ¶
- func ValidateClusterRole(role *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList
- func ValidateClusterRoleBinding(roleBinding *rbac.ClusterRoleBinding) field.ErrorList
- func ValidateClusterRoleBindingUpdate(roleBinding *rbac.ClusterRoleBinding, oldRoleBinding *rbac.ClusterRoleBinding) field.ErrorList
- func ValidateClusterRoleUpdate(role *rbac.ClusterRole, oldRole *rbac.ClusterRole, ...) field.ErrorList
- func ValidatePolicyRule(rule rbac.PolicyRule, isNamespaced bool, fldPath *field.Path) field.ErrorList
- func ValidateRBACName(name string, prefix bool) []string
- func ValidateRole(role *rbac.Role) field.ErrorList
- func ValidateRoleBinding(roleBinding *rbac.RoleBinding) field.ErrorList
- func ValidateRoleBindingSubject(subject rbac.Subject, isNamespaced bool, fldPath *field.Path) field.ErrorList
- func ValidateRoleBindingUpdate(roleBinding *rbac.RoleBinding, oldRoleBinding *rbac.RoleBinding) field.ErrorList
- func ValidateRoleUpdate(role *rbac.Role, oldRole *rbac.Role) field.ErrorList
- type ClusterRoleValidationOptions
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ValidateClusterRole ¶
func ValidateClusterRole(role *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList
func ValidateClusterRoleBinding ¶
func ValidateClusterRoleBinding(roleBinding *rbac.ClusterRoleBinding) field.ErrorList
func ValidateClusterRoleBindingUpdate ¶
func ValidateClusterRoleBindingUpdate(roleBinding *rbac.ClusterRoleBinding, oldRoleBinding *rbac.ClusterRoleBinding) field.ErrorList
func ValidateClusterRoleUpdate ¶
func ValidateClusterRoleUpdate(role *rbac.ClusterRole, oldRole *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList
func ValidatePolicyRule ¶
func ValidatePolicyRule(rule rbac.PolicyRule, isNamespaced bool, fldPath *field.Path) field.ErrorList
ValidatePolicyRule is exported to allow types outside of the RBAC API group to embed a rbac.PolicyRule and reuse this validation logic
func ValidateRBACName ¶
ValidateRBACName is exported to allow types outside of the RBAC API group to reuse this validation logic Minimal validation of names for roles and bindings. Identical to the validation for Openshift. See: * https://github.com/kubernetes/kubernetes/blob/60db507b279ce45bd16ea3db49bf181f2aeb3c3d/pkg/api/validation/name.go * https://github.com/openshift/origin/blob/388478c40e751c4295dcb9a44dd69e5ac65d0e3b/pkg/api/helpers.go
func ValidateRoleBinding ¶
func ValidateRoleBinding(roleBinding *rbac.RoleBinding) field.ErrorList
func ValidateRoleBindingSubject ¶
func ValidateRoleBindingSubject(subject rbac.Subject, isNamespaced bool, fldPath *field.Path) field.ErrorList
ValidateRoleBindingSubject is exported to allow types outside of the RBAC API group to embed a rbac.Subject and reuse this validation logic
func ValidateRoleBindingUpdate ¶
func ValidateRoleBindingUpdate(roleBinding *rbac.RoleBinding, oldRoleBinding *rbac.RoleBinding) field.ErrorList
Types ¶
type ClusterRoleValidationOptions ¶
type ClusterRoleValidationOptions struct {
AllowInvalidLabelValueInSelector bool
}