auth

type AuthorizationCache struct {
	// contains filtered or unexported fields
}

type CacheWatcher interface {
	// GroupMembershipChanged is called serially for all changes for all watchers.  This method MUST NOT BLOCK.
	// The serial nature makes reasoning about the code easy, but if you block in this method you will doom all watchers.
	GroupMembershipChanged(namespaceName string, users, groups sets.String)
}

type LastSyncResourceVersioner interface {
	LastSyncResourceVersion() string
}

type Lister interface {
	// List returns the list of Namespace items that the user can access
	List(user user.Info) (*v1.NamespaceList, error)
}

type Reviewer interface {
	Review(name string) ([]rbacv1.Subject, error)
}

type WatchableCache interface {
	// RemoveWatcher removes a watcher
	RemoveWatcher(CacheWatcher)
	// List returns the set of namespace names the user has access to view
	List(userInfo user.Info) (*v1.NamespaceList, error)
}