result

package

v0.5.1 Latest Latest Go to latest Published: Nov 18, 2022 License: Apache-2.0 Imports: 6 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/corneliusweig/rakkess

Links

Open Source Insights

Documentation ¶

Index ¶

type Access
type ResourceAccess
- func (ra ResourceAccess) Table(verbs []string) *printer.Table
type RoleRef
type SubjectAccess
- func NewSubjectAccess(resource, resourceName string) *SubjectAccess
type SubjectRef

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Access ¶ added in v0.4.5

type Access uint8

const (
	Denied Access = iota
	Allowed
	NotApplicable
	RequestErr
)

This encodes the access of the given subject to the resource+verb combination.

type ResourceAccess ¶

type ResourceAccess map[string]map[string]Access

ResourceAccess holds the access result for all resources.

func (ResourceAccess) Table ¶ added in v0.5.0

func (ra ResourceAccess) Table(verbs []string) *printer.Table

Print implements MatrixPrinter.Print. It prints a tab-separated table with a header.

type RoleRef ¶

type RoleRef struct {
	Name, Kind string
}

RoleRef uniquely identifies a ClusterRole or namespaced Role. The namespace is always fixed and need not be part of RoleRef to identify a namespaced Role.

type SubjectAccess ¶

type SubjectAccess struct {
	// Resource is the kubernetes resource of this query.
	Resource string
	// ResourceName is the name of the kubernetes resource instance of this query.
	ResourceName string
	// contains filtered or unexported fields
}

SubjectAccess holds the access information of all subjects for the given resource.

func NewSubjectAccess ¶

func NewSubjectAccess(resource, resourceName string) *SubjectAccess

NewSubjectAccess creates a new SubjectAccess with initialized fields.

func (*SubjectAccess) Empty ¶

func (sa *SubjectAccess) Empty() bool

Empty checks if any subjects with access were found.

func (*SubjectAccess) Get ¶

func (sa *SubjectAccess) Get() map[SubjectRef]sets.String

Get provides access to the actual result (for testing).

func (*SubjectAccess) MatchRules ¶

func (sa *SubjectAccess) MatchRules(ref RoleRef, rule v1.PolicyRule)

MatchRules takes a RoleRef and a PolicyRule and adds the rule verbs to the allowed verbs for the RoleRef, if the sa.resource matches the rule. The RoleRef and rule usually come from a (Cluster)Role.

func (*SubjectAccess) ResolveRoleRef ¶

func (sa *SubjectAccess) ResolveRoleRef(r RoleRef, subjects []v1.Subject)

ResolveRoleRef takes a RoleRef and a list of subjects and stores the access rights of the given role for each subject. The RoleRef and subjects usually come from a (Cluster)RoleBinding.

func (*SubjectAccess) Table ¶ added in v0.5.0

func (sa *SubjectAccess) Table(verbs []string) *printer.Table

type SubjectRef ¶

type SubjectRef struct {
	Name, Kind, Namespace string
}

SubjectRef uniquely identifies the subject of a RoleBinding or ClusterRoleBinding

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL