Documentation
¶
Index ¶
- func APIGroupMatches(rule *rbacv1.PolicyRule, requestedGroup string) bool
- func NewAuthorizer(am iam.Operator, cm cluster.Operator) authorizer.Authorizer
- func NonResourceURLMatches(rule *rbacv1.PolicyRule, requestedURL string) bool
- func ResourceMatches(rule *rbacv1.PolicyRule, ...) bool
- func ResourceNameMatches(rule *rbacv1.PolicyRule, requestedName string) bool
- func VerbMatches(rule *rbacv1.PolicyRule, requestedVerb string) bool
- type Authorizer
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func APIGroupMatches ¶
func APIGroupMatches(rule *rbacv1.PolicyRule, requestedGroup string) bool
func NewAuthorizer ¶
func NewAuthorizer(am iam.Operator, cm cluster.Operator) authorizer.Authorizer
func NonResourceURLMatches ¶
func NonResourceURLMatches(rule *rbacv1.PolicyRule, requestedURL string) bool
func ResourceMatches ¶
func ResourceMatches(rule *rbacv1.PolicyRule, combinedRequestedResource, requestedSubresource string) bool
func ResourceNameMatches ¶
func ResourceNameMatches(rule *rbacv1.PolicyRule, requestedName string) bool
func VerbMatches ¶
func VerbMatches(rule *rbacv1.PolicyRule, requestedVerb string) bool
Types ¶
type Authorizer ¶
type Authorizer struct {
// contains filtered or unexported fields
}
func (*Authorizer) Authorize ¶
func (a *Authorizer) Authorize(ctx context.Context, attributes authorizer.Attributes) (authorizer.Decision, string, error)
Source Files
Click to show internal directories.
Click to hide internal directories.