authorizer

Documentation

Index

• type Authorizer
• type HubOfHubsAuthorizer
  • func NewHubOfHubsAuthorizer(statusDB db.StatusDB) (*HubOfHubsAuthorizer, error)
  • func (auth *HubOfHubsAuthorizer) FilterManagedClustersForUser(ctx context.Context, user string, groups []string, ...) (map[string]set.Set, error)

Types

type Authorizer

type Authorizer interface {
	// FilterManagedClustersForUser receives a map of leaf-hub -> set(managed clusters) and returns a map of
	// unauthorized entries.
	FilterManagedClustersForUser(ctx context.Context, user string, groups []string,
		hubToManagedClustersMap map[string]set.Set) (map[string]set.Set, error)
}

Authorizer abstracts the functionality required to authorize DB ops through RBAC.

type HubOfHubsAuthorizer

type HubOfHubsAuthorizer struct {
	// contains filtered or unexported fields
}

HubOfHubsAuthorizer handles authorization through Hub of Hubs RBAC.

func NewHubOfHubsAuthorizer

func NewHubOfHubsAuthorizer(statusDB db.StatusDB) (*HubOfHubsAuthorizer, error)

NewHubOfHubsAuthorizer returns a new instance of HubOfHubsAuthorizer.

func (*HubOfHubsAuthorizer) FilterManagedClustersForUser

func (auth *HubOfHubsAuthorizer) FilterManagedClustersForUser(ctx context.Context, user string, groups []string,
	hubToManagedClustersMap map[string]set.Set,
) (map[string]set.Set, error)

FilterManagedClustersForUser receives a map of leaf-hub -> set(managed clusters) and returns a map of unauthorized entries.