policybased

Documentation

Overview

Package policybased implements a standard storage for ClusterRoleBinding that prevents privilege escalation.

Index

• type Storage
  • func NewStorage(s rest.StandardStorage, authorizer authorizer.Authorizer, ...) *Storage
  • func (s *Storage) Create(ctx context.Context, obj runtime.Object, ...) (runtime.Object, error)
  • func (r *Storage) Destroy()
  • func (r *Storage) NamespaceScoped() bool
  • func (r *Storage) StorageVersion() runtime.GroupVersioner
  • func (s *Storage) Update(ctx context.Context, name string, obj rest.UpdatedObjectInfo, ...) (runtime.Object, bool, error)

Types

type Storage

type Storage struct {
	rest.StandardStorage
	// contains filtered or unexported fields
}

func NewStorage

func NewStorage(s rest.StandardStorage, authorizer authorizer.Authorizer, ruleResolver rbacregistryvalidation.AuthorizationRuleResolver) *Storage

func (*Storage) Create

func (s *Storage) Create(ctx context.Context, obj runtime.Object, createValidation rest.ValidateObjectFunc, options *metav1.CreateOptions) (runtime.Object, error)

func (*Storage) Destroy

func (r *Storage) Destroy()

Destroy cleans up resources on shutdown.

func (*Storage) NamespaceScoped

func (r *Storage) NamespaceScoped() bool

func (*Storage) StorageVersion

func (r *Storage) StorageVersion() runtime.GroupVersioner

func (*Storage) Update

func (s *Storage) Update(ctx context.Context, name string, obj rest.UpdatedObjectInfo, createValidation rest.ValidateObjectFunc, updateValidation rest.ValidateObjectUpdateFunc, forceAllowCreate bool, options *metav1.UpdateOptions) (runtime.Object, bool, error)