cmd

Feb 9, 2021

Changes in this version

type Printer

+ func (p *Printer) ExportData(action Action, roleBindings []rbac.RoleBinding, ...)

Aug 21, 2020

Changes in this version

+ type Printer struct

+ func NewPrinter(out io.Writer, wide bool) *Printer

+ func (p *Printer) PrintChecks(action Action, roleBindings []rbac.RoleBinding, ...)

+ func (p *Printer) PrintWarnings(warnings []string)

Feb 20, 2020

Changes in this version

+ const ClusterRoleKind

+ const RoleKind

+ func NewWhoCanCommand(streams clioptions.IOStreams) (*cobra.Command, error)

+ func PrintChecks(out io.Writer, action Action, roleBindings []rbac.RoleBinding, ...)

+ func PrintWarnings(out io.Writer, warnings []string)

+ type AccessChecker interface

+ IsAllowedTo func(verb, resource, namespace string) (bool, error)

+ func NewAccessChecker(client clientauthz.SelfSubjectAccessReviewInterface) AccessChecker

+ type Action struct

+ AllNamespaces bool

+ Namespace string

+ NonResourceURL string

+ Resource string

+ ResourceName string

+ SubResource string

+ Verb string

+ func ActionFrom(clientConfig clientcmd.ClientConfig, flags *pflag.FlagSet, args []string) (action Action, err error)

+ func (w Action) String() string

+ type NamespaceValidator interface

+ Validate func(name string) error

+ func NewNamespaceValidator(client clientcore.NamespaceInterface) NamespaceValidator

+ type PolicyRuleMatcher interface

+ MatchesClusterRole func(role rbac.ClusterRole, action resolvedAction) bool

+ MatchesRole func(role rbac.Role, action resolvedAction) bool

+ func NewPolicyRuleMatcher() PolicyRuleMatcher

+ type ResourceResolver interface

+ Resolve func(verb, resource, subResource string) (schema.GroupResource, error)

+ func NewResourceResolver(client discovery.DiscoveryInterface, mapper meta.RESTMapper) ResourceResolver

+ type WhoCan struct

+ func NewWhoCan(restConfig *rest.Config, mapper apimeta.RESTMapper) (*WhoCan, error)

+ func (w *WhoCan) Check(action Action) (roleBindings []rbac.RoleBinding, clusterRoleBindings []rbac.ClusterRoleBinding, ...)

+ func (w *WhoCan) CheckAPIAccess(action Action) ([]string, error)