certificates

Documentation

Index

• func IsAuthorizedForSignerName(ctx context.Context, authz authorizer.Authorizer, info user.Info, ...) bool

Functions

func IsAuthorizedForSignerName

func IsAuthorizedForSignerName(ctx context.Context, authz authorizer.Authorizer, info user.Info, verb, signerName string) bool

IsAuthorizedForSignerName returns true if 'info' is authorized to perform the given 'verb' on the synthetic 'signers' resource with the given signerName. If the user does not have permission to perform the 'verb' on the given signerName, it will also perform an authorization check against {domain portion}/*, for example `kubernetes.io/*`. This allows an entity to be granted permission to 'verb' on all signerNames with a given 'domain portion'.