Documentation ¶
Overview ¶
+groupName=authorization.k8s.io
Package v1 is a generated protocol buffer package. It is generated from these files: k8s.io/kubernetes/pkg/apis/authorization/v1/generated.proto It has these top-level messages: ExtraValue LocalSubjectAccessReview NonResourceAttributes ResourceAttributes SelfSubjectAccessReview SelfSubjectAccessReviewSpec SubjectAccessReview SubjectAccessReviewSpec SubjectAccessReviewStatus
Index ¶
- Constants
- Variables
- func Convert_authorization_LocalSubjectAccessReview_To_v1_LocalSubjectAccessReview(in *authorization.LocalSubjectAccessReview, out *LocalSubjectAccessReview, ...) error
- func Convert_authorization_NonResourceAttributes_To_v1_NonResourceAttributes(in *authorization.NonResourceAttributes, out *NonResourceAttributes, ...) error
- func Convert_authorization_ResourceAttributes_To_v1_ResourceAttributes(in *authorization.ResourceAttributes, out *ResourceAttributes, ...) error
- func Convert_authorization_SelfSubjectAccessReviewSpec_To_v1_SelfSubjectAccessReviewSpec(in *authorization.SelfSubjectAccessReviewSpec, ...) error
- func Convert_authorization_SelfSubjectAccessReview_To_v1_SelfSubjectAccessReview(in *authorization.SelfSubjectAccessReview, out *SelfSubjectAccessReview, ...) error
- func Convert_authorization_SubjectAccessReviewSpec_To_v1_SubjectAccessReviewSpec(in *authorization.SubjectAccessReviewSpec, out *SubjectAccessReviewSpec, ...) error
- func Convert_authorization_SubjectAccessReviewStatus_To_v1_SubjectAccessReviewStatus(in *authorization.SubjectAccessReviewStatus, out *SubjectAccessReviewStatus, ...) error
- func Convert_authorization_SubjectAccessReview_To_v1_SubjectAccessReview(in *authorization.SubjectAccessReview, out *SubjectAccessReview, ...) error
- func Convert_v1_LocalSubjectAccessReview_To_authorization_LocalSubjectAccessReview(in *LocalSubjectAccessReview, out *authorization.LocalSubjectAccessReview, ...) error
- func Convert_v1_NonResourceAttributes_To_authorization_NonResourceAttributes(in *NonResourceAttributes, out *authorization.NonResourceAttributes, ...) error
- func Convert_v1_ResourceAttributes_To_authorization_ResourceAttributes(in *ResourceAttributes, out *authorization.ResourceAttributes, ...) error
- func Convert_v1_SelfSubjectAccessReviewSpec_To_authorization_SelfSubjectAccessReviewSpec(in *SelfSubjectAccessReviewSpec, ...) error
- func Convert_v1_SelfSubjectAccessReview_To_authorization_SelfSubjectAccessReview(in *SelfSubjectAccessReview, out *authorization.SelfSubjectAccessReview, ...) error
- func Convert_v1_SubjectAccessReviewSpec_To_authorization_SubjectAccessReviewSpec(in *SubjectAccessReviewSpec, out *authorization.SubjectAccessReviewSpec, ...) error
- func Convert_v1_SubjectAccessReviewStatus_To_authorization_SubjectAccessReviewStatus(in *SubjectAccessReviewStatus, out *authorization.SubjectAccessReviewStatus, ...) error
- func Convert_v1_SubjectAccessReview_To_authorization_SubjectAccessReview(in *SubjectAccessReview, out *authorization.SubjectAccessReview, ...) error
- func DeepCopy_v1_LocalSubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error
- func DeepCopy_v1_NonResourceAttributes(in interface{}, out interface{}, c *conversion.Cloner) error
- func DeepCopy_v1_ResourceAttributes(in interface{}, out interface{}, c *conversion.Cloner) error
- func DeepCopy_v1_SelfSubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error
- func DeepCopy_v1_SelfSubjectAccessReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error
- func DeepCopy_v1_SubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error
- func DeepCopy_v1_SubjectAccessReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error
- func DeepCopy_v1_SubjectAccessReviewStatus(in interface{}, out interface{}, c *conversion.Cloner) error
- func RegisterConversions(scheme *runtime.Scheme) error
- func RegisterDeepCopies(scheme *runtime.Scheme) error
- func RegisterDefaults(scheme *runtime.Scheme) error
- func Resource(resource string) schema.GroupResource
- type ExtraValue
- func (*ExtraValue) Descriptor() ([]byte, []int)
- func (m ExtraValue) Marshal() (data []byte, err error)
- func (m ExtraValue) MarshalTo(data []byte) (int, error)
- func (*ExtraValue) ProtoMessage()
- func (m *ExtraValue) Reset()
- func (m ExtraValue) Size() (n int)
- func (t ExtraValue) String() string
- func (m *ExtraValue) Unmarshal(data []byte) error
- type LocalSubjectAccessReview
- func (*LocalSubjectAccessReview) Descriptor() ([]byte, []int)
- func (obj *LocalSubjectAccessReview) GetObjectKind() schema.ObjectKind
- func (m *LocalSubjectAccessReview) Marshal() (data []byte, err error)
- func (m *LocalSubjectAccessReview) MarshalTo(data []byte) (int, error)
- func (*LocalSubjectAccessReview) ProtoMessage()
- func (m *LocalSubjectAccessReview) Reset()
- func (m *LocalSubjectAccessReview) Size() (n int)
- func (this *LocalSubjectAccessReview) String() string
- func (LocalSubjectAccessReview) SwaggerDoc() map[string]string
- func (m *LocalSubjectAccessReview) Unmarshal(data []byte) error
- type NonResourceAttributes
- func (*NonResourceAttributes) Descriptor() ([]byte, []int)
- func (m *NonResourceAttributes) Marshal() (data []byte, err error)
- func (m *NonResourceAttributes) MarshalTo(data []byte) (int, error)
- func (*NonResourceAttributes) ProtoMessage()
- func (m *NonResourceAttributes) Reset()
- func (m *NonResourceAttributes) Size() (n int)
- func (this *NonResourceAttributes) String() string
- func (NonResourceAttributes) SwaggerDoc() map[string]string
- func (m *NonResourceAttributes) Unmarshal(data []byte) error
- type ResourceAttributes
- func (*ResourceAttributes) Descriptor() ([]byte, []int)
- func (m *ResourceAttributes) Marshal() (data []byte, err error)
- func (m *ResourceAttributes) MarshalTo(data []byte) (int, error)
- func (*ResourceAttributes) ProtoMessage()
- func (m *ResourceAttributes) Reset()
- func (m *ResourceAttributes) Size() (n int)
- func (this *ResourceAttributes) String() string
- func (ResourceAttributes) SwaggerDoc() map[string]string
- func (m *ResourceAttributes) Unmarshal(data []byte) error
- type SelfSubjectAccessReview
- func (*SelfSubjectAccessReview) Descriptor() ([]byte, []int)
- func (obj *SelfSubjectAccessReview) GetObjectKind() schema.ObjectKind
- func (m *SelfSubjectAccessReview) Marshal() (data []byte, err error)
- func (m *SelfSubjectAccessReview) MarshalTo(data []byte) (int, error)
- func (*SelfSubjectAccessReview) ProtoMessage()
- func (m *SelfSubjectAccessReview) Reset()
- func (m *SelfSubjectAccessReview) Size() (n int)
- func (this *SelfSubjectAccessReview) String() string
- func (SelfSubjectAccessReview) SwaggerDoc() map[string]string
- func (m *SelfSubjectAccessReview) Unmarshal(data []byte) error
- type SelfSubjectAccessReviewSpec
- func (*SelfSubjectAccessReviewSpec) Descriptor() ([]byte, []int)
- func (m *SelfSubjectAccessReviewSpec) Marshal() (data []byte, err error)
- func (m *SelfSubjectAccessReviewSpec) MarshalTo(data []byte) (int, error)
- func (*SelfSubjectAccessReviewSpec) ProtoMessage()
- func (m *SelfSubjectAccessReviewSpec) Reset()
- func (m *SelfSubjectAccessReviewSpec) Size() (n int)
- func (this *SelfSubjectAccessReviewSpec) String() string
- func (SelfSubjectAccessReviewSpec) SwaggerDoc() map[string]string
- func (m *SelfSubjectAccessReviewSpec) Unmarshal(data []byte) error
- type SubjectAccessReview
- func (*SubjectAccessReview) Descriptor() ([]byte, []int)
- func (obj *SubjectAccessReview) GetObjectKind() schema.ObjectKind
- func (m *SubjectAccessReview) Marshal() (data []byte, err error)
- func (m *SubjectAccessReview) MarshalTo(data []byte) (int, error)
- func (*SubjectAccessReview) ProtoMessage()
- func (m *SubjectAccessReview) Reset()
- func (m *SubjectAccessReview) Size() (n int)
- func (this *SubjectAccessReview) String() string
- func (SubjectAccessReview) SwaggerDoc() map[string]string
- func (m *SubjectAccessReview) Unmarshal(data []byte) error
- type SubjectAccessReviewSpec
- func (*SubjectAccessReviewSpec) Descriptor() ([]byte, []int)
- func (m *SubjectAccessReviewSpec) Marshal() (data []byte, err error)
- func (m *SubjectAccessReviewSpec) MarshalTo(data []byte) (int, error)
- func (*SubjectAccessReviewSpec) ProtoMessage()
- func (m *SubjectAccessReviewSpec) Reset()
- func (m *SubjectAccessReviewSpec) Size() (n int)
- func (this *SubjectAccessReviewSpec) String() string
- func (SubjectAccessReviewSpec) SwaggerDoc() map[string]string
- func (m *SubjectAccessReviewSpec) Unmarshal(data []byte) error
- type SubjectAccessReviewStatus
- func (*SubjectAccessReviewStatus) Descriptor() ([]byte, []int)
- func (m *SubjectAccessReviewStatus) Marshal() (data []byte, err error)
- func (m *SubjectAccessReviewStatus) MarshalTo(data []byte) (int, error)
- func (*SubjectAccessReviewStatus) ProtoMessage()
- func (m *SubjectAccessReviewStatus) Reset()
- func (m *SubjectAccessReviewStatus) Size() (n int)
- func (this *SubjectAccessReviewStatus) String() string
- func (SubjectAccessReviewStatus) SwaggerDoc() map[string]string
- func (m *SubjectAccessReviewStatus) Unmarshal(data []byte) error
Constants ¶
const GroupName = "authorization.k8s.io"
GroupName is the group name use in this package
Variables ¶
var ( ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling") ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow") )
var ( SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes, addDefaultingFuncs, addConversionFuncs) AddToScheme = SchemeBuilder.AddToScheme )
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1"}
SchemeGroupVersion is group version used to register these objects
Functions ¶
func Convert_authorization_LocalSubjectAccessReview_To_v1_LocalSubjectAccessReview ¶
func Convert_authorization_LocalSubjectAccessReview_To_v1_LocalSubjectAccessReview(in *authorization.LocalSubjectAccessReview, out *LocalSubjectAccessReview, s conversion.Scope) error
func Convert_authorization_NonResourceAttributes_To_v1_NonResourceAttributes ¶
func Convert_authorization_NonResourceAttributes_To_v1_NonResourceAttributes(in *authorization.NonResourceAttributes, out *NonResourceAttributes, s conversion.Scope) error
func Convert_authorization_ResourceAttributes_To_v1_ResourceAttributes ¶
func Convert_authorization_ResourceAttributes_To_v1_ResourceAttributes(in *authorization.ResourceAttributes, out *ResourceAttributes, s conversion.Scope) error
func Convert_authorization_SelfSubjectAccessReviewSpec_To_v1_SelfSubjectAccessReviewSpec ¶
func Convert_authorization_SelfSubjectAccessReviewSpec_To_v1_SelfSubjectAccessReviewSpec(in *authorization.SelfSubjectAccessReviewSpec, out *SelfSubjectAccessReviewSpec, s conversion.Scope) error
func Convert_authorization_SelfSubjectAccessReview_To_v1_SelfSubjectAccessReview ¶
func Convert_authorization_SelfSubjectAccessReview_To_v1_SelfSubjectAccessReview(in *authorization.SelfSubjectAccessReview, out *SelfSubjectAccessReview, s conversion.Scope) error
func Convert_authorization_SubjectAccessReviewSpec_To_v1_SubjectAccessReviewSpec ¶
func Convert_authorization_SubjectAccessReviewSpec_To_v1_SubjectAccessReviewSpec(in *authorization.SubjectAccessReviewSpec, out *SubjectAccessReviewSpec, s conversion.Scope) error
func Convert_authorization_SubjectAccessReviewStatus_To_v1_SubjectAccessReviewStatus ¶
func Convert_authorization_SubjectAccessReviewStatus_To_v1_SubjectAccessReviewStatus(in *authorization.SubjectAccessReviewStatus, out *SubjectAccessReviewStatus, s conversion.Scope) error
func Convert_authorization_SubjectAccessReview_To_v1_SubjectAccessReview ¶
func Convert_authorization_SubjectAccessReview_To_v1_SubjectAccessReview(in *authorization.SubjectAccessReview, out *SubjectAccessReview, s conversion.Scope) error
func Convert_v1_LocalSubjectAccessReview_To_authorization_LocalSubjectAccessReview ¶
func Convert_v1_LocalSubjectAccessReview_To_authorization_LocalSubjectAccessReview(in *LocalSubjectAccessReview, out *authorization.LocalSubjectAccessReview, s conversion.Scope) error
func Convert_v1_NonResourceAttributes_To_authorization_NonResourceAttributes ¶
func Convert_v1_NonResourceAttributes_To_authorization_NonResourceAttributes(in *NonResourceAttributes, out *authorization.NonResourceAttributes, s conversion.Scope) error
func Convert_v1_ResourceAttributes_To_authorization_ResourceAttributes ¶
func Convert_v1_ResourceAttributes_To_authorization_ResourceAttributes(in *ResourceAttributes, out *authorization.ResourceAttributes, s conversion.Scope) error
func Convert_v1_SelfSubjectAccessReviewSpec_To_authorization_SelfSubjectAccessReviewSpec ¶
func Convert_v1_SelfSubjectAccessReviewSpec_To_authorization_SelfSubjectAccessReviewSpec(in *SelfSubjectAccessReviewSpec, out *authorization.SelfSubjectAccessReviewSpec, s conversion.Scope) error
func Convert_v1_SelfSubjectAccessReview_To_authorization_SelfSubjectAccessReview ¶
func Convert_v1_SelfSubjectAccessReview_To_authorization_SelfSubjectAccessReview(in *SelfSubjectAccessReview, out *authorization.SelfSubjectAccessReview, s conversion.Scope) error
func Convert_v1_SubjectAccessReviewSpec_To_authorization_SubjectAccessReviewSpec ¶
func Convert_v1_SubjectAccessReviewSpec_To_authorization_SubjectAccessReviewSpec(in *SubjectAccessReviewSpec, out *authorization.SubjectAccessReviewSpec, s conversion.Scope) error
func Convert_v1_SubjectAccessReviewStatus_To_authorization_SubjectAccessReviewStatus ¶
func Convert_v1_SubjectAccessReviewStatus_To_authorization_SubjectAccessReviewStatus(in *SubjectAccessReviewStatus, out *authorization.SubjectAccessReviewStatus, s conversion.Scope) error
func Convert_v1_SubjectAccessReview_To_authorization_SubjectAccessReview ¶
func Convert_v1_SubjectAccessReview_To_authorization_SubjectAccessReview(in *SubjectAccessReview, out *authorization.SubjectAccessReview, s conversion.Scope) error
func DeepCopy_v1_LocalSubjectAccessReview ¶
func DeepCopy_v1_LocalSubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error
func DeepCopy_v1_NonResourceAttributes ¶
func DeepCopy_v1_NonResourceAttributes(in interface{}, out interface{}, c *conversion.Cloner) error
func DeepCopy_v1_ResourceAttributes ¶
func DeepCopy_v1_ResourceAttributes(in interface{}, out interface{}, c *conversion.Cloner) error
func DeepCopy_v1_SelfSubjectAccessReview ¶
func DeepCopy_v1_SelfSubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error
func DeepCopy_v1_SelfSubjectAccessReviewSpec ¶
func DeepCopy_v1_SelfSubjectAccessReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error
func DeepCopy_v1_SubjectAccessReview ¶
func DeepCopy_v1_SubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error
func DeepCopy_v1_SubjectAccessReviewSpec ¶
func DeepCopy_v1_SubjectAccessReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error
func DeepCopy_v1_SubjectAccessReviewStatus ¶
func DeepCopy_v1_SubjectAccessReviewStatus(in interface{}, out interface{}, c *conversion.Cloner) error
func RegisterConversions ¶
RegisterConversions adds conversion functions to the given scheme. Public to allow building arbitrary schemes.
func RegisterDeepCopies ¶
RegisterDeepCopies adds deep-copy functions to the given scheme. Public to allow building arbitrary schemes.
func RegisterDefaults ¶
RegisterDefaults adds defaulters functions to the given scheme. Public to allow building arbitrary schemes. All generated defaulters are covering - they call all nested defaulters.
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
Types ¶
type ExtraValue ¶
type ExtraValue []string
ExtraValue masks the value so protobuf can generate +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false
func (*ExtraValue) Descriptor ¶
func (*ExtraValue) Descriptor() ([]byte, []int)
func (ExtraValue) Marshal ¶
func (m ExtraValue) Marshal() (data []byte, err error)
func (*ExtraValue) ProtoMessage ¶
func (*ExtraValue) ProtoMessage()
func (*ExtraValue) Reset ¶
func (m *ExtraValue) Reset()
func (ExtraValue) Size ¶
func (m ExtraValue) Size() (n int)
func (ExtraValue) String ¶
func (t ExtraValue) String() string
func (*ExtraValue) Unmarshal ¶
func (m *ExtraValue) Unmarshal(data []byte) error
type LocalSubjectAccessReview ¶
type LocalSubjectAccessReview struct { metav1.TypeMeta `json:",inline"` // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace // you made the request against. If empty, it is defaulted. Spec SubjectAccessReviewSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"` // Status is filled in by the server and indicates whether the request is allowed or not // +optional Status SubjectAccessReviewStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"` }
LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
func (*LocalSubjectAccessReview) Descriptor ¶
func (*LocalSubjectAccessReview) Descriptor() ([]byte, []int)
func (*LocalSubjectAccessReview) GetObjectKind ¶
func (obj *LocalSubjectAccessReview) GetObjectKind() schema.ObjectKind
func (*LocalSubjectAccessReview) Marshal ¶
func (m *LocalSubjectAccessReview) Marshal() (data []byte, err error)
func (*LocalSubjectAccessReview) MarshalTo ¶
func (m *LocalSubjectAccessReview) MarshalTo(data []byte) (int, error)
func (*LocalSubjectAccessReview) ProtoMessage ¶
func (*LocalSubjectAccessReview) ProtoMessage()
func (*LocalSubjectAccessReview) Reset ¶
func (m *LocalSubjectAccessReview) Reset()
func (*LocalSubjectAccessReview) Size ¶
func (m *LocalSubjectAccessReview) Size() (n int)
func (*LocalSubjectAccessReview) String ¶
func (this *LocalSubjectAccessReview) String() string
func (LocalSubjectAccessReview) SwaggerDoc ¶
func (LocalSubjectAccessReview) SwaggerDoc() map[string]string
func (*LocalSubjectAccessReview) Unmarshal ¶
func (m *LocalSubjectAccessReview) Unmarshal(data []byte) error
type NonResourceAttributes ¶
type NonResourceAttributes struct { // Path is the URL path of the request // +optional Path string `json:"path,omitempty" protobuf:"bytes,1,opt,name=path"` // Verb is the standard HTTP verb // +optional Verb string `json:"verb,omitempty" protobuf:"bytes,2,opt,name=verb"` }
NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface
func (*NonResourceAttributes) Descriptor ¶
func (*NonResourceAttributes) Descriptor() ([]byte, []int)
func (*NonResourceAttributes) Marshal ¶
func (m *NonResourceAttributes) Marshal() (data []byte, err error)
func (*NonResourceAttributes) MarshalTo ¶
func (m *NonResourceAttributes) MarshalTo(data []byte) (int, error)
func (*NonResourceAttributes) ProtoMessage ¶
func (*NonResourceAttributes) ProtoMessage()
func (*NonResourceAttributes) Reset ¶
func (m *NonResourceAttributes) Reset()
func (*NonResourceAttributes) Size ¶
func (m *NonResourceAttributes) Size() (n int)
func (*NonResourceAttributes) String ¶
func (this *NonResourceAttributes) String() string
func (NonResourceAttributes) SwaggerDoc ¶
func (NonResourceAttributes) SwaggerDoc() map[string]string
func (*NonResourceAttributes) Unmarshal ¶
func (m *NonResourceAttributes) Unmarshal(data []byte) error
type ResourceAttributes ¶
type ResourceAttributes struct { // Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces // "" (empty) is defaulted for LocalSubjectAccessReviews // "" (empty) is empty for cluster-scoped resources // "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview // +optional Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"` // Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all. // +optional Verb string `json:"verb,omitempty" protobuf:"bytes,2,opt,name=verb"` // Group is the API Group of the Resource. "*" means all. // +optional Group string `json:"group,omitempty" protobuf:"bytes,3,opt,name=group"` // Version is the API Version of the Resource. "*" means all. // +optional Version string `json:"version,omitempty" protobuf:"bytes,4,opt,name=version"` // Resource is one of the existing resource types. "*" means all. // +optional Resource string `json:"resource,omitempty" protobuf:"bytes,5,opt,name=resource"` // Subresource is one of the existing resource types. "" means none. // +optional Subresource string `json:"subresource,omitempty" protobuf:"bytes,6,opt,name=subresource"` // Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all. // +optional Name string `json:"name,omitempty" protobuf:"bytes,7,opt,name=name"` }
ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface
func (*ResourceAttributes) Descriptor ¶
func (*ResourceAttributes) Descriptor() ([]byte, []int)
func (*ResourceAttributes) Marshal ¶
func (m *ResourceAttributes) Marshal() (data []byte, err error)
func (*ResourceAttributes) MarshalTo ¶
func (m *ResourceAttributes) MarshalTo(data []byte) (int, error)
func (*ResourceAttributes) ProtoMessage ¶
func (*ResourceAttributes) ProtoMessage()
func (*ResourceAttributes) Reset ¶
func (m *ResourceAttributes) Reset()
func (*ResourceAttributes) Size ¶
func (m *ResourceAttributes) Size() (n int)
func (*ResourceAttributes) String ¶
func (this *ResourceAttributes) String() string
func (ResourceAttributes) SwaggerDoc ¶
func (ResourceAttributes) SwaggerDoc() map[string]string
func (*ResourceAttributes) Unmarshal ¶
func (m *ResourceAttributes) Unmarshal(data []byte) error
type SelfSubjectAccessReview ¶
type SelfSubjectAccessReview struct { metav1.TypeMeta `json:",inline"` // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Spec holds information about the request being evaluated. user and groups must be empty Spec SelfSubjectAccessReviewSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"` // Status is filled in by the server and indicates whether the request is allowed or not // +optional Status SubjectAccessReviewStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"` }
SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action
func (*SelfSubjectAccessReview) Descriptor ¶
func (*SelfSubjectAccessReview) Descriptor() ([]byte, []int)
func (*SelfSubjectAccessReview) GetObjectKind ¶
func (obj *SelfSubjectAccessReview) GetObjectKind() schema.ObjectKind
func (*SelfSubjectAccessReview) Marshal ¶
func (m *SelfSubjectAccessReview) Marshal() (data []byte, err error)
func (*SelfSubjectAccessReview) MarshalTo ¶
func (m *SelfSubjectAccessReview) MarshalTo(data []byte) (int, error)
func (*SelfSubjectAccessReview) ProtoMessage ¶
func (*SelfSubjectAccessReview) ProtoMessage()
func (*SelfSubjectAccessReview) Reset ¶
func (m *SelfSubjectAccessReview) Reset()
func (*SelfSubjectAccessReview) Size ¶
func (m *SelfSubjectAccessReview) Size() (n int)
func (*SelfSubjectAccessReview) String ¶
func (this *SelfSubjectAccessReview) String() string
func (SelfSubjectAccessReview) SwaggerDoc ¶
func (SelfSubjectAccessReview) SwaggerDoc() map[string]string
func (*SelfSubjectAccessReview) Unmarshal ¶
func (m *SelfSubjectAccessReview) Unmarshal(data []byte) error
type SelfSubjectAccessReviewSpec ¶
type SelfSubjectAccessReviewSpec struct { // ResourceAuthorizationAttributes describes information for a resource access request // +optional ResourceAttributes *ResourceAttributes `json:"resourceAttributes,omitempty" protobuf:"bytes,1,opt,name=resourceAttributes"` // NonResourceAttributes describes information for a non-resource access request // +optional NonResourceAttributes *NonResourceAttributes `json:"nonResourceAttributes,omitempty" protobuf:"bytes,2,opt,name=nonResourceAttributes"` }
SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set
func (*SelfSubjectAccessReviewSpec) Descriptor ¶
func (*SelfSubjectAccessReviewSpec) Descriptor() ([]byte, []int)
func (*SelfSubjectAccessReviewSpec) Marshal ¶
func (m *SelfSubjectAccessReviewSpec) Marshal() (data []byte, err error)
func (*SelfSubjectAccessReviewSpec) MarshalTo ¶
func (m *SelfSubjectAccessReviewSpec) MarshalTo(data []byte) (int, error)
func (*SelfSubjectAccessReviewSpec) ProtoMessage ¶
func (*SelfSubjectAccessReviewSpec) ProtoMessage()
func (*SelfSubjectAccessReviewSpec) Reset ¶
func (m *SelfSubjectAccessReviewSpec) Reset()
func (*SelfSubjectAccessReviewSpec) Size ¶
func (m *SelfSubjectAccessReviewSpec) Size() (n int)
func (*SelfSubjectAccessReviewSpec) String ¶
func (this *SelfSubjectAccessReviewSpec) String() string
func (SelfSubjectAccessReviewSpec) SwaggerDoc ¶
func (SelfSubjectAccessReviewSpec) SwaggerDoc() map[string]string
func (*SelfSubjectAccessReviewSpec) Unmarshal ¶
func (m *SelfSubjectAccessReviewSpec) Unmarshal(data []byte) error
type SubjectAccessReview ¶
type SubjectAccessReview struct { metav1.TypeMeta `json:",inline"` // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Spec holds information about the request being evaluated Spec SubjectAccessReviewSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"` // Status is filled in by the server and indicates whether the request is allowed or not // +optional Status SubjectAccessReviewStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"` }
SubjectAccessReview checks whether or not a user or group can perform an action.
func (*SubjectAccessReview) Descriptor ¶
func (*SubjectAccessReview) Descriptor() ([]byte, []int)
func (*SubjectAccessReview) GetObjectKind ¶
func (obj *SubjectAccessReview) GetObjectKind() schema.ObjectKind
func (*SubjectAccessReview) Marshal ¶
func (m *SubjectAccessReview) Marshal() (data []byte, err error)
func (*SubjectAccessReview) MarshalTo ¶
func (m *SubjectAccessReview) MarshalTo(data []byte) (int, error)
func (*SubjectAccessReview) ProtoMessage ¶
func (*SubjectAccessReview) ProtoMessage()
func (*SubjectAccessReview) Reset ¶
func (m *SubjectAccessReview) Reset()
func (*SubjectAccessReview) Size ¶
func (m *SubjectAccessReview) Size() (n int)
func (*SubjectAccessReview) String ¶
func (this *SubjectAccessReview) String() string
func (SubjectAccessReview) SwaggerDoc ¶
func (SubjectAccessReview) SwaggerDoc() map[string]string
func (*SubjectAccessReview) Unmarshal ¶
func (m *SubjectAccessReview) Unmarshal(data []byte) error
type SubjectAccessReviewSpec ¶
type SubjectAccessReviewSpec struct { // ResourceAuthorizationAttributes describes information for a resource access request // +optional ResourceAttributes *ResourceAttributes `json:"resourceAttributes,omitempty" protobuf:"bytes,1,opt,name=resourceAttributes"` // NonResourceAttributes describes information for a non-resource access request // +optional NonResourceAttributes *NonResourceAttributes `json:"nonResourceAttributes,omitempty" protobuf:"bytes,2,opt,name=nonResourceAttributes"` // User is the user you're testing for. // If you specify "User" but not "Groups", then is it interpreted as "What if User were not a member of any groups // +optional User string `json:"user,omitempty" protobuf:"bytes,3,opt,name=verb"` // Groups is the groups you're testing for. // +optional Groups []string `json:"groups,omitempty" protobuf:"bytes,4,rep,name=groups"` // Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer // it needs a reflection here. // +optional Extra map[string]ExtraValue `json:"extra,omitempty" protobuf:"bytes,5,rep,name=extra"` }
SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set
func (*SubjectAccessReviewSpec) Descriptor ¶
func (*SubjectAccessReviewSpec) Descriptor() ([]byte, []int)
func (*SubjectAccessReviewSpec) Marshal ¶
func (m *SubjectAccessReviewSpec) Marshal() (data []byte, err error)
func (*SubjectAccessReviewSpec) MarshalTo ¶
func (m *SubjectAccessReviewSpec) MarshalTo(data []byte) (int, error)
func (*SubjectAccessReviewSpec) ProtoMessage ¶
func (*SubjectAccessReviewSpec) ProtoMessage()
func (*SubjectAccessReviewSpec) Reset ¶
func (m *SubjectAccessReviewSpec) Reset()
func (*SubjectAccessReviewSpec) Size ¶
func (m *SubjectAccessReviewSpec) Size() (n int)
func (*SubjectAccessReviewSpec) String ¶
func (this *SubjectAccessReviewSpec) String() string
func (SubjectAccessReviewSpec) SwaggerDoc ¶
func (SubjectAccessReviewSpec) SwaggerDoc() map[string]string
func (*SubjectAccessReviewSpec) Unmarshal ¶
func (m *SubjectAccessReviewSpec) Unmarshal(data []byte) error
type SubjectAccessReviewStatus ¶
type SubjectAccessReviewStatus struct { // Allowed is required. True if the action would be allowed, false otherwise. Allowed bool `json:"allowed" protobuf:"varint,1,opt,name=allowed"` // Reason is optional. It indicates why a request was allowed or denied. // +optional Reason string `json:"reason,omitempty" protobuf:"bytes,2,opt,name=reason"` // EvaluationError is an indication that some error occurred during the authorization check. // It is entirely possible to get an error and be able to continue determine authorization status in spite of it. // For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request. // +optional EvaluationError string `json:"evaluationError,omitempty" protobuf:"bytes,3,opt,name=evaluationError"` }
SubjectAccessReviewStatus
func (*SubjectAccessReviewStatus) Descriptor ¶
func (*SubjectAccessReviewStatus) Descriptor() ([]byte, []int)
func (*SubjectAccessReviewStatus) Marshal ¶
func (m *SubjectAccessReviewStatus) Marshal() (data []byte, err error)
func (*SubjectAccessReviewStatus) MarshalTo ¶
func (m *SubjectAccessReviewStatus) MarshalTo(data []byte) (int, error)
func (*SubjectAccessReviewStatus) ProtoMessage ¶
func (*SubjectAccessReviewStatus) ProtoMessage()
func (*SubjectAccessReviewStatus) Reset ¶
func (m *SubjectAccessReviewStatus) Reset()
func (*SubjectAccessReviewStatus) Size ¶
func (m *SubjectAccessReviewStatus) Size() (n int)
func (*SubjectAccessReviewStatus) String ¶
func (this *SubjectAccessReviewStatus) String() string
func (SubjectAccessReviewStatus) SwaggerDoc ¶
func (SubjectAccessReviewStatus) SwaggerDoc() map[string]string
func (*SubjectAccessReviewStatus) Unmarshal ¶
func (m *SubjectAccessReviewStatus) Unmarshal(data []byte) error