Versions in this module Expand all Collapse all v1 v1.16.3 Nov 9, 2022 Changes in this version + func BreakdownRule(rule rbacv1.PolicyRule) []rbacv1.PolicyRule + func CompactRules(rules []rbacv1.PolicyRule) ([]rbacv1.PolicyRule, error) + func ConfirmNoEscalation(ctx context.Context, ruleResolver AuthorizationRuleResolver, ...) error + func ConfirmNoEscalationInternal(ctx context.Context, ruleResolver AuthorizationRuleResolver, ...) error + func Covers(ownerRules, servantRules []rbacv1.PolicyRule) (bool, []rbacv1.PolicyRule) + func NewTestRuleResolver(roles []*rbacv1.Role, roleBindings []*rbacv1.RoleBinding, ...) (AuthorizationRuleResolver, *StaticRoles) + type AuthorizationRuleResolver interface + GetRoleReferenceRules func(roleRef rbacv1.RoleRef, namespace string) ([]rbacv1.PolicyRule, error) + RulesFor func(user user.Info, namespace string) ([]rbacv1.PolicyRule, error) + VisitRulesFor func(user user.Info, namespace string, ...) + type ClusterRoleBindingLister interface + ListClusterRoleBindings func() ([]*rbacv1.ClusterRoleBinding, error) + type ClusterRoleGetter interface + GetClusterRole func(name string) (*rbacv1.ClusterRole, error) + type DefaultRuleResolver struct + func NewDefaultRuleResolver(roleGetter RoleGetter, roleBindingLister RoleBindingLister, ...) *DefaultRuleResolver + func (r *DefaultRuleResolver) GetRoleReferenceRules(roleRef rbacv1.RoleRef, bindingNamespace string) ([]rbacv1.PolicyRule, error) + func (r *DefaultRuleResolver) RulesFor(user user.Info, namespace string) ([]rbacv1.PolicyRule, error) + func (r *DefaultRuleResolver) VisitRulesFor(user user.Info, namespace string, ...) + type RoleBindingLister interface + ListRoleBindings func(namespace string) ([]*rbacv1.RoleBinding, error) + type RoleGetter interface + GetRole func(namespace, name string) (*rbacv1.Role, error) + type StaticRoles struct + func (r *StaticRoles) GetClusterRole(name string) (*rbacv1.ClusterRole, error) + func (r *StaticRoles) GetRole(namespace, name string) (*rbacv1.Role, error) + func (r *StaticRoles) ListClusterRoleBindings() ([]*rbacv1.ClusterRoleBinding, error) + func (r *StaticRoles) ListRoleBindings(namespace string) ([]*rbacv1.RoleBinding, error)