v1alpha1

package
v0.30.0-alpha.2 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Feb 14, 2024 License: Apache-2.0 Imports: 10 Imported by: 1,186

Documentation

Index

Constants

View Source 
const (
	APIGroupAll    = "*"
	ResourceAll    = "*"
	VerbAll        = "*"
	NonResourceAll = "*"

	GroupKind          = "Group"
	ServiceAccountKind = "ServiceAccount"
	UserKind           = "User"

	// AutoUpdateAnnotationKey is the name of an annotation which prevents reconciliation if set to "false"
	AutoUpdateAnnotationKey = "rbac.authorization.kubernetes.io/autoupdate"
)
View Source 
const GroupName = "rbac.authorization.k8s.io"

Variables

View Source 
var (
	ErrInvalidLengthGenerated        = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated          = fmt.Errorf("proto: integer overflow")
	ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
View Source 
var (
	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)

	AddToScheme = localSchemeBuilder.AddToScheme
)
View Source 
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1alpha1"}

SchemeGroupVersion is group version used to register these objects

Functions

func Resource 

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type AggregationRule 

type AggregationRule struct {
	// ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules.
	// If any of the selectors match, then the ClusterRole's permissions will be added
	// +optional
	// +listType=atomic
	ClusterRoleSelectors []metav1.LabelSelector `json:"clusterRoleSelectors,omitempty" protobuf:"bytes,1,rep,name=clusterRoleSelectors"`
}

AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

func (*AggregationRule) DeepCopy 

func (in *AggregationRule) DeepCopy() *AggregationRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AggregationRule.

func (*AggregationRule) DeepCopyInto 

func (in *AggregationRule) DeepCopyInto(out *AggregationRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AggregationRule) Descriptor 

func (*AggregationRule) Descriptor() ([]byte, []int)

func (*AggregationRule) Marshal 

func (m *AggregationRule) Marshal() (dAtA []byte, err error)

func (*AggregationRule) MarshalTo 

func (m *AggregationRule) MarshalTo(dAtA []byte) (int, error)

func (*AggregationRule) MarshalToSizedBuffer added in v0.16.4 

func (m *AggregationRule) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AggregationRule) ProtoMessage 

func (*AggregationRule) ProtoMessage()

func (*AggregationRule) Reset 

func (m *AggregationRule) Reset()

func (*AggregationRule) Size 

func (m *AggregationRule) Size() (n int)

func (*AggregationRule) String 

func (this *AggregationRule) String() string

func (AggregationRule) SwaggerDoc 

func (AggregationRule) SwaggerDoc() map[string]string

func (*AggregationRule) Unmarshal 

func (m *AggregationRule) Unmarshal(dAtA []byte) error

func (*AggregationRule) XXX_DiscardUnknown added in v0.16.4 

func (m *AggregationRule) XXX_DiscardUnknown()

func (*AggregationRule) XXX_Marshal added in v0.16.4 

func (m *AggregationRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AggregationRule) XXX_Merge added in v0.16.4 

func (m *AggregationRule) XXX_Merge(src proto.Message)

func (*AggregationRule) XXX_Size added in v0.16.4 

func (m *AggregationRule) XXX_Size() int

func (*AggregationRule) XXX_Unmarshal added in v0.16.4 

func (m *AggregationRule) XXX_Unmarshal(b []byte) error

type ClusterRole 

type ClusterRole struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Rules holds all the PolicyRules for this ClusterRole
	// +optional
	// +listType=atomic
	Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`

	// AggregationRule is an optional field that describes how to build the Rules for this ClusterRole.
	// If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be
	// stomped by the controller.
	// +optional
	AggregationRule *AggregationRule `json:"aggregationRule,omitempty" protobuf:"bytes,3,opt,name=aggregationRule"`
}

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.

func (*ClusterRole) DeepCopy 

func (in *ClusterRole) DeepCopy() *ClusterRole

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRole.

func (*ClusterRole) DeepCopyInto 

func (in *ClusterRole) DeepCopyInto(out *ClusterRole)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterRole) DeepCopyObject 

func (in *ClusterRole) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterRole) Descriptor 

func (*ClusterRole) Descriptor() ([]byte, []int)

func (*ClusterRole) Marshal 

func (m *ClusterRole) Marshal() (dAtA []byte, err error)

func (*ClusterRole) MarshalTo 

func (m *ClusterRole) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRole) MarshalToSizedBuffer added in v0.16.4 

func (m *ClusterRole) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterRole) ProtoMessage 

func (*ClusterRole) ProtoMessage()

func (*ClusterRole) Reset 

func (m *ClusterRole) Reset()

func (*ClusterRole) Size 

func (m *ClusterRole) Size() (n int)

func (*ClusterRole) String 

func (this *ClusterRole) String() string

func (ClusterRole) SwaggerDoc 

func (ClusterRole) SwaggerDoc() map[string]string

func (*ClusterRole) Unmarshal 

func (m *ClusterRole) Unmarshal(dAtA []byte) error

func (*ClusterRole) XXX_DiscardUnknown added in v0.16.4 

func (m *ClusterRole) XXX_DiscardUnknown()

func (*ClusterRole) XXX_Marshal added in v0.16.4 

func (m *ClusterRole) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterRole) XXX_Merge added in v0.16.4 

func (m *ClusterRole) XXX_Merge(src proto.Message)

func (*ClusterRole) XXX_Size added in v0.16.4 

func (m *ClusterRole) XXX_Size() int

func (*ClusterRole) XXX_Unmarshal added in v0.16.4 

func (m *ClusterRole) XXX_Unmarshal(b []byte) error

type ClusterRoleBinding 

type ClusterRoleBinding struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Subjects holds references to the objects the role applies to.
	// +optional
	// +listType=atomic
	Subjects []Subject `json:"subjects,omitempty" protobuf:"bytes,2,rep,name=subjects"`

	// RoleRef can only reference a ClusterRole in the global namespace.
	// If the RoleRef cannot be resolved, the Authorizer must return an error.
	RoleRef RoleRef `json:"roleRef" protobuf:"bytes,3,opt,name=roleRef"`
}

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.

func (*ClusterRoleBinding) DeepCopy 

func (in *ClusterRoleBinding) DeepCopy() *ClusterRoleBinding

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleBinding.

func (*ClusterRoleBinding) DeepCopyInto 

func (in *ClusterRoleBinding) DeepCopyInto(out *ClusterRoleBinding)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterRoleBinding) DeepCopyObject 

func (in *ClusterRoleBinding) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterRoleBinding) Descriptor 

func (*ClusterRoleBinding) Descriptor() ([]byte, []int)

func (*ClusterRoleBinding) Marshal 

func (m *ClusterRoleBinding) Marshal() (dAtA []byte, err error)

func (*ClusterRoleBinding) MarshalTo 

func (m *ClusterRoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleBinding) MarshalToSizedBuffer added in v0.16.4 

func (m *ClusterRoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterRoleBinding) ProtoMessage 

func (*ClusterRoleBinding) ProtoMessage()

func (*ClusterRoleBinding) Reset 

func (m *ClusterRoleBinding) Reset()

func (*ClusterRoleBinding) Size 

func (m *ClusterRoleBinding) Size() (n int)

func (*ClusterRoleBinding) String 

func (this *ClusterRoleBinding) String() string

func (ClusterRoleBinding) SwaggerDoc 

func (ClusterRoleBinding) SwaggerDoc() map[string]string

func (*ClusterRoleBinding) Unmarshal 

func (m *ClusterRoleBinding) Unmarshal(dAtA []byte) error

func (*ClusterRoleBinding) XXX_DiscardUnknown added in v0.16.4 

func (m *ClusterRoleBinding) XXX_DiscardUnknown()

func (*ClusterRoleBinding) XXX_Marshal added in v0.16.4 

func (m *ClusterRoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterRoleBinding) XXX_Merge added in v0.16.4 

func (m *ClusterRoleBinding) XXX_Merge(src proto.Message)

func (*ClusterRoleBinding) XXX_Size added in v0.16.4 

func (m *ClusterRoleBinding) XXX_Size() int

func (*ClusterRoleBinding) XXX_Unmarshal added in v0.16.4 

func (m *ClusterRoleBinding) XXX_Unmarshal(b []byte) error

type ClusterRoleBindingList 

type ClusterRoleBindingList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of ClusterRoleBindings
	Items []ClusterRoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindings, and will no longer be served in v1.22.

func (*ClusterRoleBindingList) DeepCopy 

func (in *ClusterRoleBindingList) DeepCopy() *ClusterRoleBindingList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleBindingList.

func (*ClusterRoleBindingList) DeepCopyInto 

func (in *ClusterRoleBindingList) DeepCopyInto(out *ClusterRoleBindingList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterRoleBindingList) DeepCopyObject 

func (in *ClusterRoleBindingList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterRoleBindingList) Descriptor 

func (*ClusterRoleBindingList) Descriptor() ([]byte, []int)

func (*ClusterRoleBindingList) Marshal 

func (m *ClusterRoleBindingList) Marshal() (dAtA []byte, err error)

func (*ClusterRoleBindingList) MarshalTo 

func (m *ClusterRoleBindingList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleBindingList) MarshalToSizedBuffer added in v0.16.4 

func (m *ClusterRoleBindingList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterRoleBindingList) ProtoMessage 

func (*ClusterRoleBindingList) ProtoMessage()

func (*ClusterRoleBindingList) Reset 

func (m *ClusterRoleBindingList) Reset()

func (*ClusterRoleBindingList) Size 

func (m *ClusterRoleBindingList) Size() (n int)

func (*ClusterRoleBindingList) String 

func (this *ClusterRoleBindingList) String() string

func (ClusterRoleBindingList) SwaggerDoc 

func (ClusterRoleBindingList) SwaggerDoc() map[string]string

func (*ClusterRoleBindingList) Unmarshal 

func (m *ClusterRoleBindingList) Unmarshal(dAtA []byte) error

func (*ClusterRoleBindingList) XXX_DiscardUnknown added in v0.16.4 

func (m *ClusterRoleBindingList) XXX_DiscardUnknown()

func (*ClusterRoleBindingList) XXX_Marshal added in v0.16.4 

func (m *ClusterRoleBindingList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterRoleBindingList) XXX_Merge added in v0.16.4 

func (m *ClusterRoleBindingList) XXX_Merge(src proto.Message)

func (*ClusterRoleBindingList) XXX_Size added in v0.16.4 

func (m *ClusterRoleBindingList) XXX_Size() int

func (*ClusterRoleBindingList) XXX_Unmarshal added in v0.16.4 

func (m *ClusterRoleBindingList) XXX_Unmarshal(b []byte) error

type ClusterRoleList 

type ClusterRoleList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of ClusterRoles
	Items []ClusterRole `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.

func (*ClusterRoleList) DeepCopy 

func (in *ClusterRoleList) DeepCopy() *ClusterRoleList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleList.

func (*ClusterRoleList) DeepCopyInto 

func (in *ClusterRoleList) DeepCopyInto(out *ClusterRoleList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterRoleList) DeepCopyObject 

func (in *ClusterRoleList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterRoleList) Descriptor 

func (*ClusterRoleList) Descriptor() ([]byte, []int)

func (*ClusterRoleList) Marshal 

func (m *ClusterRoleList) Marshal() (dAtA []byte, err error)

func (*ClusterRoleList) MarshalTo 

func (m *ClusterRoleList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleList) MarshalToSizedBuffer added in v0.16.4 

func (m *ClusterRoleList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterRoleList) ProtoMessage 

func (*ClusterRoleList) ProtoMessage()

func (*ClusterRoleList) Reset 

func (m *ClusterRoleList) Reset()

func (*ClusterRoleList) Size 

func (m *ClusterRoleList) Size() (n int)

func (*ClusterRoleList) String 

func (this *ClusterRoleList) String() string

func (ClusterRoleList) SwaggerDoc 

func (ClusterRoleList) SwaggerDoc() map[string]string

func (*ClusterRoleList) Unmarshal 

func (m *ClusterRoleList) Unmarshal(dAtA []byte) error

func (*ClusterRoleList) XXX_DiscardUnknown added in v0.16.4 

func (m *ClusterRoleList) XXX_DiscardUnknown()

func (*ClusterRoleList) XXX_Marshal added in v0.16.4 

func (m *ClusterRoleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterRoleList) XXX_Merge added in v0.16.4 

func (m *ClusterRoleList) XXX_Merge(src proto.Message)

func (*ClusterRoleList) XXX_Size added in v0.16.4 

func (m *ClusterRoleList) XXX_Size() int

func (*ClusterRoleList) XXX_Unmarshal added in v0.16.4 

func (m *ClusterRoleList) XXX_Unmarshal(b []byte) error

type PolicyRule 

type PolicyRule struct {
	// Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
	// +listType=atomic
	Verbs []string `json:"verbs" protobuf:"bytes,1,rep,name=verbs"`

	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of
	// the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
	// +optional
	// +listType=atomic
	APIGroups []string `json:"apiGroups,omitempty" protobuf:"bytes,3,rep,name=apiGroups"`
	// Resources is a list of resources this rule applies to. '*' represents all resources.
	// +optional
	// +listType=atomic
	Resources []string `json:"resources,omitempty" protobuf:"bytes,4,rep,name=resources"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
	// +optional
	// +listType=atomic
	ResourceNames []string `json:"resourceNames,omitempty" protobuf:"bytes,5,rep,name=resourceNames"`

	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path
	// Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding.
	// Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
	// +optional
	// +listType=atomic
	NonResourceURLs []string `json:"nonResourceURLs,omitempty" protobuf:"bytes,6,rep,name=nonResourceURLs"`
}

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

func (*PolicyRule) DeepCopy 

func (in *PolicyRule) DeepCopy() *PolicyRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRule.

func (*PolicyRule) DeepCopyInto 

func (in *PolicyRule) DeepCopyInto(out *PolicyRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PolicyRule) Descriptor 

func (*PolicyRule) Descriptor() ([]byte, []int)

func (*PolicyRule) Marshal 

func (m *PolicyRule) Marshal() (dAtA []byte, err error)

func (*PolicyRule) MarshalTo 

func (m *PolicyRule) MarshalTo(dAtA []byte) (int, error)

func (*PolicyRule) MarshalToSizedBuffer added in v0.16.4 

func (m *PolicyRule) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*PolicyRule) ProtoMessage 

func (*PolicyRule) ProtoMessage()

func (*PolicyRule) Reset 

func (m *PolicyRule) Reset()

func (*PolicyRule) Size 

func (m *PolicyRule) Size() (n int)

func (*PolicyRule) String 

func (this *PolicyRule) String() string

func (PolicyRule) SwaggerDoc 

func (PolicyRule) SwaggerDoc() map[string]string

func (*PolicyRule) Unmarshal 

func (m *PolicyRule) Unmarshal(dAtA []byte) error

func (*PolicyRule) XXX_DiscardUnknown added in v0.16.4 

func (m *PolicyRule) XXX_DiscardUnknown()

func (*PolicyRule) XXX_Marshal added in v0.16.4 

func (m *PolicyRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*PolicyRule) XXX_Merge added in v0.16.4 

func (m *PolicyRule) XXX_Merge(src proto.Message)

func (*PolicyRule) XXX_Size added in v0.16.4 

func (m *PolicyRule) XXX_Size() int

func (*PolicyRule) XXX_Unmarshal added in v0.16.4 

func (m *PolicyRule) XXX_Unmarshal(b []byte) error

type Role 

type Role struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Rules holds all the PolicyRules for this Role
	// +optional
	// +listType=atomic
	Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
}

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.

func (*Role) DeepCopy 

func (in *Role) DeepCopy() *Role

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Role.

func (*Role) DeepCopyInto 

func (in *Role) DeepCopyInto(out *Role)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Role) DeepCopyObject 

func (in *Role) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Role) Descriptor 

func (*Role) Descriptor() ([]byte, []int)

func (*Role) Marshal 

func (m *Role) Marshal() (dAtA []byte, err error)

func (*Role) MarshalTo 

func (m *Role) MarshalTo(dAtA []byte) (int, error)

func (*Role) MarshalToSizedBuffer added in v0.16.4 

func (m *Role) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Role) ProtoMessage 

func (*Role) ProtoMessage()

func (*Role) Reset 

func (m *Role) Reset()

func (*Role) Size 

func (m *Role) Size() (n int)

func (*Role) String 

func (this *Role) String() string

func (Role) SwaggerDoc 

func (Role) SwaggerDoc() map[string]string

func (*Role) Unmarshal 

func (m *Role) Unmarshal(dAtA []byte) error

func (*Role) XXX_DiscardUnknown added in v0.16.4 

func (m *Role) XXX_DiscardUnknown()

func (*Role) XXX_Marshal added in v0.16.4 

func (m *Role) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Role) XXX_Merge added in v0.16.4 

func (m *Role) XXX_Merge(src proto.Message)

func (*Role) XXX_Size added in v0.16.4 

func (m *Role) XXX_Size() int

func (*Role) XXX_Unmarshal added in v0.16.4 

func (m *Role) XXX_Unmarshal(b []byte) error

type RoleBinding 

type RoleBinding struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Subjects holds references to the objects the role applies to.
	// +optional
	// +listType=atomic
	Subjects []Subject `json:"subjects,omitempty" protobuf:"bytes,2,rep,name=subjects"`

	// RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace.
	// If the RoleRef cannot be resolved, the Authorizer must return an error.
	RoleRef RoleRef `json:"roleRef" protobuf:"bytes,3,opt,name=roleRef"`
}

RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.

func (*RoleBinding) DeepCopy 

func (in *RoleBinding) DeepCopy() *RoleBinding

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBinding.

func (*RoleBinding) DeepCopyInto 

func (in *RoleBinding) DeepCopyInto(out *RoleBinding)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RoleBinding) DeepCopyObject 

func (in *RoleBinding) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*RoleBinding) Descriptor 

func (*RoleBinding) Descriptor() ([]byte, []int)

func (*RoleBinding) Marshal 

func (m *RoleBinding) Marshal() (dAtA []byte, err error)

func (*RoleBinding) MarshalTo 

func (m *RoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*RoleBinding) MarshalToSizedBuffer added in v0.16.4 

func (m *RoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleBinding) ProtoMessage 

func (*RoleBinding) ProtoMessage()

func (*RoleBinding) Reset 

func (m *RoleBinding) Reset()

func (*RoleBinding) Size 

func (m *RoleBinding) Size() (n int)

func (*RoleBinding) String 

func (this *RoleBinding) String() string

func (RoleBinding) SwaggerDoc 

func (RoleBinding) SwaggerDoc() map[string]string

func (*RoleBinding) Unmarshal 

func (m *RoleBinding) Unmarshal(dAtA []byte) error

func (*RoleBinding) XXX_DiscardUnknown added in v0.16.4 

func (m *RoleBinding) XXX_DiscardUnknown()

func (*RoleBinding) XXX_Marshal added in v0.16.4 

func (m *RoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleBinding) XXX_Merge added in v0.16.4 

func (m *RoleBinding) XXX_Merge(src proto.Message)

func (*RoleBinding) XXX_Size added in v0.16.4 

func (m *RoleBinding) XXX_Size() int

func (*RoleBinding) XXX_Unmarshal added in v0.16.4 

func (m *RoleBinding) XXX_Unmarshal(b []byte) error

type RoleBindingList 

type RoleBindingList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of RoleBindings
	Items []RoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}

RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.

func (*RoleBindingList) DeepCopy 

func (in *RoleBindingList) DeepCopy() *RoleBindingList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBindingList.

func (*RoleBindingList) DeepCopyInto 

func (in *RoleBindingList) DeepCopyInto(out *RoleBindingList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RoleBindingList) DeepCopyObject 

func (in *RoleBindingList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*RoleBindingList) Descriptor 

func (*RoleBindingList) Descriptor() ([]byte, []int)

func (*RoleBindingList) Marshal 

func (m *RoleBindingList) Marshal() (dAtA []byte, err error)

func (*RoleBindingList) MarshalTo 

func (m *RoleBindingList) MarshalTo(dAtA []byte) (int, error)

func (*RoleBindingList) MarshalToSizedBuffer added in v0.16.4 

func (m *RoleBindingList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleBindingList) ProtoMessage 

func (*RoleBindingList) ProtoMessage()

func (*RoleBindingList) Reset 

func (m *RoleBindingList) Reset()

func (*RoleBindingList) Size 

func (m *RoleBindingList) Size() (n int)

func (*RoleBindingList) String 

func (this *RoleBindingList) String() string

func (RoleBindingList) SwaggerDoc 

func (RoleBindingList) SwaggerDoc() map[string]string

func (*RoleBindingList) Unmarshal 

func (m *RoleBindingList) Unmarshal(dAtA []byte) error

func (*RoleBindingList) XXX_DiscardUnknown added in v0.16.4 

func (m *RoleBindingList) XXX_DiscardUnknown()

func (*RoleBindingList) XXX_Marshal added in v0.16.4 

func (m *RoleBindingList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleBindingList) XXX_Merge added in v0.16.4 

func (m *RoleBindingList) XXX_Merge(src proto.Message)

func (*RoleBindingList) XXX_Size added in v0.16.4 

func (m *RoleBindingList) XXX_Size() int

func (*RoleBindingList) XXX_Unmarshal added in v0.16.4 

func (m *RoleBindingList) XXX_Unmarshal(b []byte) error

type RoleList 

type RoleList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of Roles
	Items []Role `json:"items" protobuf:"bytes,2,rep,name=items"`
}

RoleList is a collection of Roles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.

func (*RoleList) DeepCopy 

func (in *RoleList) DeepCopy() *RoleList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleList.

func (*RoleList) DeepCopyInto 

func (in *RoleList) DeepCopyInto(out *RoleList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RoleList) DeepCopyObject 

func (in *RoleList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*RoleList) Descriptor 

func (*RoleList) Descriptor() ([]byte, []int)

func (*RoleList) Marshal 

func (m *RoleList) Marshal() (dAtA []byte, err error)

func (*RoleList) MarshalTo 

func (m *RoleList) MarshalTo(dAtA []byte) (int, error)

func (*RoleList) MarshalToSizedBuffer added in v0.16.4 

func (m *RoleList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleList) ProtoMessage 

func (*RoleList) ProtoMessage()

func (*RoleList) Reset 

func (m *RoleList) Reset()

func (*RoleList) Size 

func (m *RoleList) Size() (n int)

func (*RoleList) String 

func (this *RoleList) String() string

func (RoleList) SwaggerDoc 

func (RoleList) SwaggerDoc() map[string]string

func (*RoleList) Unmarshal 

func (m *RoleList) Unmarshal(dAtA []byte) error

func (*RoleList) XXX_DiscardUnknown added in v0.16.4 

func (m *RoleList) XXX_DiscardUnknown()

func (*RoleList) XXX_Marshal added in v0.16.4 

func (m *RoleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleList) XXX_Merge added in v0.16.4 

func (m *RoleList) XXX_Merge(src proto.Message)

func (*RoleList) XXX_Size added in v0.16.4 

func (m *RoleList) XXX_Size() int

func (*RoleList) XXX_Unmarshal added in v0.16.4 

func (m *RoleList) XXX_Unmarshal(b []byte) error

type RoleRef 

type RoleRef struct {
	// APIGroup is the group for the resource being referenced
	APIGroup string `json:"apiGroup" protobuf:"bytes,1,opt,name=apiGroup"`
	// Kind is the type of resource being referenced
	Kind string `json:"kind" protobuf:"bytes,2,opt,name=kind"`
	// Name is the name of resource being referenced
	Name string `json:"name" protobuf:"bytes,3,opt,name=name"`
}

RoleRef contains information that points to the role being used

func (*RoleRef) DeepCopy 

func (in *RoleRef) DeepCopy() *RoleRef

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleRef.

func (*RoleRef) DeepCopyInto 

func (in *RoleRef) DeepCopyInto(out *RoleRef)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RoleRef) Descriptor 

func (*RoleRef) Descriptor() ([]byte, []int)

func (*RoleRef) Marshal 

func (m *RoleRef) Marshal() (dAtA []byte, err error)

func (*RoleRef) MarshalTo 

func (m *RoleRef) MarshalTo(dAtA []byte) (int, error)

func (*RoleRef) MarshalToSizedBuffer added in v0.16.4 

func (m *RoleRef) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleRef) ProtoMessage 

func (*RoleRef) ProtoMessage()

func (*RoleRef) Reset 

func (m *RoleRef) Reset()

func (*RoleRef) Size 

func (m *RoleRef) Size() (n int)

func (*RoleRef) String 

func (this *RoleRef) String() string

func (RoleRef) SwaggerDoc 

func (RoleRef) SwaggerDoc() map[string]string

func (*RoleRef) Unmarshal 

func (m *RoleRef) Unmarshal(dAtA []byte) error

func (*RoleRef) XXX_DiscardUnknown added in v0.16.4 

func (m *RoleRef) XXX_DiscardUnknown()

func (*RoleRef) XXX_Marshal added in v0.16.4 

func (m *RoleRef) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleRef) XXX_Merge added in v0.16.4 

func (m *RoleRef) XXX_Merge(src proto.Message)

func (*RoleRef) XXX_Size added in v0.16.4 

func (m *RoleRef) XXX_Size() int

func (*RoleRef) XXX_Unmarshal added in v0.16.4 

func (m *RoleRef) XXX_Unmarshal(b []byte) error

type Subject 

type Subject struct {
	// Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
	// If the Authorizer does not recognized the kind value, the Authorizer should report an error.
	Kind string `json:"kind" protobuf:"bytes,1,opt,name=kind"`
	// APIVersion holds the API group and version of the referenced subject.
	// Defaults to "v1" for ServiceAccount subjects.
	// Defaults to "rbac.authorization.k8s.io/v1alpha1" for User and Group subjects.
	// +k8s:conversion-gen=false
	// +optional
	APIVersion string `json:"apiVersion,omitempty" protobuf:"bytes,2,opt.name=apiVersion"`
	// Name of the object being referenced.
	Name string `json:"name" protobuf:"bytes,3,opt,name=name"`
	// Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
	// the Authorizer should report an error.
	// +optional
	Namespace string `json:"namespace,omitempty" protobuf:"bytes,4,opt,name=namespace"`
}

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

func (*Subject) DeepCopy 

func (in *Subject) DeepCopy() *Subject

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Subject.

func (*Subject) DeepCopyInto 

func (in *Subject) DeepCopyInto(out *Subject)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Subject) Descriptor 

func (*Subject) Descriptor() ([]byte, []int)

func (*Subject) Marshal 

func (m *Subject) Marshal() (dAtA []byte, err error)

func (*Subject) MarshalTo 

func (m *Subject) MarshalTo(dAtA []byte) (int, error)

func (*Subject) MarshalToSizedBuffer added in v0.16.4 

func (m *Subject) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Subject) ProtoMessage 

func (*Subject) ProtoMessage()

func (*Subject) Reset 

func (m *Subject) Reset()

func (*Subject) Size 

func (m *Subject) Size() (n int)

func (*Subject) String 

func (this *Subject) String() string

func (Subject) SwaggerDoc 

func (Subject) SwaggerDoc() map[string]string

func (*Subject) Unmarshal 

func (m *Subject) Unmarshal(dAtA []byte) error

func (*Subject) XXX_DiscardUnknown added in v0.16.4 

func (m *Subject) XXX_DiscardUnknown()

func (*Subject) XXX_Marshal added in v0.16.4 

func (m *Subject) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Subject) XXX_Merge added in v0.16.4 

func (m *Subject) XXX_Merge(src proto.Message)

func (*Subject) XXX_Size added in v0.16.4 

func (m *Subject) XXX_Size() int

func (*Subject) XXX_Unmarshal added in v0.16.4 

func (m *Subject) XXX_Unmarshal(b []byte) error

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.