validation

Documentation

Index

• func ValidateClusterRole(role *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList
• func ValidateClusterRoleBinding(roleBinding *rbac.ClusterRoleBinding) field.ErrorList
• func ValidateClusterRoleBindingUpdate(roleBinding *rbac.ClusterRoleBinding, oldRoleBinding *rbac.ClusterRoleBinding) field.ErrorList
• func ValidateClusterRoleUpdate(role *rbac.ClusterRole, oldRole *rbac.ClusterRole, ...) field.ErrorList
• func ValidatePolicyRule(rule rbac.PolicyRule, isNamespaced bool, fldPath *field.Path) field.ErrorList
• func ValidateRBACName(name string, prefix bool) []string
• func ValidateRole(role *rbac.Role) field.ErrorList
• func ValidateRoleBinding(roleBinding *rbac.RoleBinding) field.ErrorList
• func ValidateRoleBindingSubject(subject rbac.Subject, isNamespaced bool, fldPath *field.Path) field.ErrorList
• func ValidateRoleBindingUpdate(roleBinding *rbac.RoleBinding, oldRoleBinding *rbac.RoleBinding) field.ErrorList
• func ValidateRoleUpdate(role *rbac.Role, oldRole *rbac.Role) field.ErrorList
• type ClusterRoleValidationOptions

Functions

func ValidateClusterRole

func ValidateClusterRole(role *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList

func ValidateClusterRoleBinding

func ValidateClusterRoleBinding(roleBinding *rbac.ClusterRoleBinding) field.ErrorList

func ValidateClusterRoleBindingUpdate

func ValidateClusterRoleBindingUpdate(roleBinding *rbac.ClusterRoleBinding, oldRoleBinding *rbac.ClusterRoleBinding) field.ErrorList

func ValidateClusterRoleUpdate

func ValidateClusterRoleUpdate(role *rbac.ClusterRole, oldRole *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList

func ValidatePolicyRule

func ValidatePolicyRule(rule rbac.PolicyRule, isNamespaced bool, fldPath *field.Path) field.ErrorList

ValidatePolicyRule is exported to allow types outside of the RBAC API group to embed a rbac.PolicyRule and reuse this validation logic

func ValidateRBACName

func ValidateRBACName(name string, prefix bool) []string

ValidateRBACName is exported to allow types outside of the RBAC API group to reuse this validation logic Minimal validation of names for roles and bindings. Identical to the validation for Openshift. See: * https://github.com/kubernetes/kubernetes/blob/60db507b279ce45bd16ea3db49bf181f2aeb3c3d/pkg/api/validation/name.go * https://github.com/openshift/origin/blob/388478c40e751c4295dcb9a44dd69e5ac65d0e3b/pkg/api/helpers.go

func ValidateRole

func ValidateRole(role *rbac.Role) field.ErrorList

func ValidateRoleBinding

func ValidateRoleBinding(roleBinding *rbac.RoleBinding) field.ErrorList

func ValidateRoleBindingSubject

func ValidateRoleBindingSubject(subject rbac.Subject, isNamespaced bool, fldPath *field.Path) field.ErrorList

ValidateRoleBindingSubject is exported to allow types outside of the RBAC API group to embed a rbac.Subject and reuse this validation logic

func ValidateRoleBindingUpdate

func ValidateRoleBindingUpdate(roleBinding *rbac.RoleBinding, oldRoleBinding *rbac.RoleBinding) field.ErrorList

func ValidateRoleUpdate

func ValidateRoleUpdate(role *rbac.Role, oldRole *rbac.Role) field.ErrorList

Types

type ClusterRoleValidationOptions

type ClusterRoleValidationOptions struct {
	AllowInvalidLabelValueInSelector bool
}