impersonation

Documentation

Index

• Variables
• func HeaderMatcher(key string) (string, bool)
• type Impersonation
  • func NewImpersonation(md metadata.MD) (*Impersonation, error)
  • func (i *Impersonation) Check(ctx context.Context, authorizer authorizationclient.AuthorizationV1Interface, ...) error
  • func (i *Impersonation) GetUserInfo() *user.DefaultInfo

Variables

var (
	// ErrNoImpersonationData is an error message for no impersonation data case
	ErrNoImpersonationData = errors.New("no impersonation data found")
	// ErrImpersonateUserRequired is an error message about required impersonate user to impersonate another info.
	ErrImpersonateUserRequired = errors.New("impersonate user is required to impersonate groups, UID, extra")
)

Functions

func HeaderMatcher

func HeaderMatcher(key string) (string, bool)

HeaderMatcher matches the impersonation header for adding to GRPC metadata.

Types

type Impersonation

type Impersonation struct {
	// contains filtered or unexported fields
}

Impersonation represents component to add Kubernetes impersonation header processing, make impersonation access check and RBAC for Tekton results resources with impersonated user data

func NewImpersonation

func NewImpersonation(md metadata.MD) (*Impersonation, error)

NewImpersonation returns an impersonation request if any impersonation data is found, returns error otherwise.

func (*Impersonation) Check

func (i *Impersonation) Check(ctx context.Context, authorizer authorizationclient.AuthorizationV1Interface, requester string) error

Check checks if the requester has permission to impersonate every resource.

func (*Impersonation) GetUserInfo

func (i *Impersonation) GetUserInfo() *user.DefaultInfo

GetUserInfo returns the impersonated user information.