auth

Documentation

Index

• func NewFactory(config *rest.Config, kubeClient kubernetes.Interface, ...) *validatorFactory
• type ExecutorValidator

Functions

func NewFactory

func NewFactory(
	config *rest.Config,
	kubeClient kubernetes.Interface,
	manifestWorkInformer workinformers.ManifestWorkInformer,
	clusterName string,
	recorder events.Recorder,
	restMapper meta.RESTMapper) *validatorFactory

Types

type ExecutorValidator

type ExecutorValidator interface {
	// Validate whether the work executor subject has permission to operate the specific manifest,
	// if there is no permission will return a basic.NotAllowedError.
	Validate(ctx context.Context, executor *workapiv1.ManifestWorkExecutor, gvr schema.GroupVersionResource,
		namespace, name string, ownedByTheWork bool, obj *unstructured.Unstructured) error
}

ExecutorValidator validates whether the executor has permission to perform the requests to the local managed cluster