README
¶
norman-rbac
Enhanced K8s RBAC for norman.
License
Copyright (c) 2014-2017 Rancher Labs, Inc.
Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AccessControl ¶
type AccessControl struct {
authorization.AllAccess
// contains filtered or unexported fields
}
func NewAccessControl ¶
func NewAccessControl(rbacClient v1.Interface) *AccessControl
func (*AccessControl) Filter ¶
func (a *AccessControl) Filter(apiContext *types.APIContext, obj map[string]interface{}, context map[string]string) map[string]interface{}
func (*AccessControl) FilterList ¶
func (a *AccessControl) FilterList(apiContext *types.APIContext, objs []map[string]interface{}, context map[string]string) []map[string]interface{}
type ListPermission ¶
type ListPermissionSet ¶
type ListPermissionSet map[ListPermission]bool
func (ListPermissionSet) Access ¶
func (l ListPermissionSet) Access(namespace, name string) bool
type ListPermissionStore ¶
type ListPermissionStore struct {
// contains filtered or unexported fields
}
func NewListPermissionStore ¶
func NewListPermissionStore(client v1.Interface) *ListPermissionStore
func (*ListPermissionStore) GroupPermissions ¶
func (l *ListPermissionStore) GroupPermissions(name, apiGroup, resource string) ListPermissionSet
func (*ListPermissionStore) UserPermissions ¶
func (l *ListPermissionStore) UserPermissions(name, apiGroup, resource string) ListPermissionSet
Source Files
Click to show internal directories.
Click to hide internal directories.