util

func ChangeAttributesResource ¶

func ChangeAttributesResource(a authorizer.Attributes, groupVersionResource schema.GroupVersionResource, namespace string) authorizer.Attributes

func CreateRoleBinding ¶

func CreateRoleBinding(ctx context.Context, client client.Client, namespace string, owner *configv1alpha1.Account, scheme *runtime.Scheme) error

CreateRoleBinding creates a new role binding for the target account with the given name and namespace

func ForbiddenMessage ¶

func ForbiddenMessage(attributes authorizer.Attributes) string

func GetClusterRoleFor ¶

func GetClusterRoleFor(account *configv1alpha1.Account) string

GetClusterRoleFor returns the cluster role for the given account if there is any

func IsUserPartOfAccount ¶

func IsUserPartOfAccount(userInfo user.Info, account *configv1alpha1.Account) bool