util

Documentation

Index

• func AuthorizationAttributesFrom(spec authorizationapi.SubjectAccessReviewSpec) authorizer.AttributesRecord
• func BuildEvaluationError(evaluationError error, attrs authorizer.AttributesRecord) string
• func NonResourceAttributesFrom(user user.Info, in authorizationapi.NonResourceAttributes) authorizer.AttributesRecord
• func ResourceAttributesFrom(user user.Info, in authorizationapi.ResourceAttributes) authorizer.AttributesRecord

Functions

func AuthorizationAttributesFrom

func AuthorizationAttributesFrom(spec authorizationapi.SubjectAccessReviewSpec) authorizer.AttributesRecord

AuthorizationAttributesFrom takes a spec and returns the proper authz attributes to check it.

func BuildEvaluationError

func BuildEvaluationError(evaluationError error, attrs authorizer.AttributesRecord) string

BuildEvaluationError constructs the evaluation error string to include in *SubjectAccessReview status based on the authorizer evaluation error and any field and label selector parse errors.

func NonResourceAttributesFrom

func NonResourceAttributesFrom(user user.Info, in authorizationapi.NonResourceAttributes) authorizer.AttributesRecord

NonResourceAttributesFrom combines the API object information and the user.Info from the context to build a full authorizer.AttributesRecord for non resource access

func ResourceAttributesFrom

func ResourceAttributesFrom(user user.Info, in authorizationapi.ResourceAttributes) authorizer.AttributesRecord

ResourceAttributesFrom combines the API object information and the user.Info from the context to build a full authorizer.AttributesRecord for resource access