authorization

func AddUserAdminToProject ¶

func AddUserAdminToProject(oc *exutil.CLI, namespace, user string) string

func AddUserEditToProject ¶

func AddUserEditToProject(oc *exutil.CLI, namespace, user string) string

func AddUserToRoleInProject ¶

func AddUserToRoleInProject(oc *exutil.CLI, clusterrolebinding, namespace, user string) string

func AddUserViewToProject ¶

func AddUserViewToProject(oc *exutil.CLI, namespace, user string) string

func RunLegacyClusterRoleBindingEndpoint ¶

func RunLegacyClusterRoleBindingEndpoint(t g.GinkgoTInterface, authorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, namespace string)

RunLegacyClusterRoleBindingEndpoint exercises the legacy clusterrolebinding endpoint that is proxied to rbac

func RunLegacyClusterRoleEndpoint ¶

func RunLegacyClusterRoleEndpoint(t g.GinkgoTInterface, authorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, namespace string)

RunLegacyClusterRoleEndpoint exercises the legacy clusterrole endpoint that is proxied to rbac

func RunLegacyEndpointConfirmNoEscalation ¶

func RunLegacyEndpointConfirmNoEscalation(t g.GinkgoTInterface, clusterAdminAuthorizationClient, userAuthorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, userName, namespace string)

RunLegacyEndpointConfirmNoEscalation tests that the authorization proxy endpoints cannot be used to bypass the RBAC escalation checks. It also makes sure that the GR in the returned error matches authorization v1.

func RunLegacyLocalRoleBindingEndpoint ¶

func RunLegacyLocalRoleBindingEndpoint(t g.GinkgoTInterface, authorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, namespace string)

RunLegacyLocalRoleBindingEndpoint exercises the legacy rolebinding endpoint that is proxied to rbac

func RunLegacyLocalRoleEndpoint ¶

func RunLegacyLocalRoleEndpoint(t g.GinkgoTInterface, authorizationClient authorizationv1client.AuthorizationV1Interface, kubeClient kubernetes.Interface, namespace string)

RunLegacyLocalRoleEndpoint exercises the legacy role endpoint that is proxied to rbac