rbac

Documentation

Index

• Constants
• func BuildSubjectFromRTB(object interface{}) (rbacv1.Subject, error)
• func ObjFromContext(apiContext *types.APIContext, resource *types.RawResource) map[string]interface{}
• type AccessControl
  • func NewAccessControl(rbacClient v1.Interface) *AccessControl
  • func (a *AccessControl) CanDo(apiGroup, resource, verb string, apiContext *types.APIContext, ...) error
  • func (a *AccessControl) Filter(apiContext *types.APIContext, schema *types.Schema, obj map[string]interface{}, ...) map[string]interface{}
  • func (a *AccessControl) FilterList(apiContext *types.APIContext, schema *types.Schema, ...) []map[string]interface{}
• type ListPermission
• type ListPermissionSet
  • func (l ListPermissionSet) HasAccess(namespace, name string) bool
• type ListPermissionStore
  • func NewListPermissionStore(client v1.Interface) *ListPermissionStore
  • func (l *ListPermissionStore) GroupPermissions(subjectName, apiGroup, resource, verb string) ListPermissionSet
  • func (l *ListPermissionStore) UserPermissions(subjectName, apiGroup, resource, verb string) ListPermissionSet

Constants

const (
	NamespaceID = "namespaceId"
	ProjectID   = "projectId"
	ClusterID   = "clusterId"
)

Functions

func BuildSubjectFromRTB

func BuildSubjectFromRTB(object interface{}) (rbacv1.Subject, error)

BuildSubjectFromRTB This function will generate PRTB and CRTB to the subject with user, group or service account

func ObjFromContext

func ObjFromContext(apiContext *types.APIContext, resource *types.RawResource) map[string]interface{}

ObjFromContext returns object with available information to check against users permissions, used in combination with CanDo

Types

type AccessControl

type AccessControl struct {
	authorization.AllAccess
	// contains filtered or unexported fields
}

func NewAccessControl

func NewAccessControl(rbacClient v1.Interface) *AccessControl

func (*AccessControl) CanDo

func (a *AccessControl) CanDo(apiGroup, resource, verb string, apiContext *types.APIContext, obj map[string]interface{}, schema *types.Schema) error

func (*AccessControl) Filter

func (a *AccessControl) Filter(apiContext *types.APIContext, schema *types.Schema, obj map[string]interface{}, context map[string]string) map[string]interface{}

func (*AccessControl) FilterList

func (a *AccessControl) FilterList(apiContext *types.APIContext, schema *types.Schema, objs []map[string]interface{}, context map[string]string) []map[string]interface{}

type ListPermission

type ListPermission struct {
	Namespace string
	Name      string
}

type ListPermissionSet

type ListPermissionSet map[ListPermission]bool

func (ListPermissionSet) HasAccess

func (l ListPermissionSet) HasAccess(namespace, name string) bool

type ListPermissionStore

type ListPermissionStore struct {
	// contains filtered or unexported fields
}

func NewListPermissionStore

func NewListPermissionStore(client v1.Interface) *ListPermissionStore

func (*ListPermissionStore) GroupPermissions

func (l *ListPermissionStore) GroupPermissions(subjectName, apiGroup, resource, verb string) ListPermissionSet

func (*ListPermissionStore) UserPermissions

func (l *ListPermissionStore) UserPermissions(subjectName, apiGroup, resource, verb string) ListPermissionSet