Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AutomountServiceAccountSetOnSA ¶
func AutomountServiceAccountSetOnSA(client corev1typed.CoreV1Interface, serviceAccountName, podNamespace string) (*bool, error)
AutomountServiceAccountSetOnSA checks if the AutomountServiceAccountToken field is set on a ServiceAccount. Returns:
- A boolean pointer indicating whether the AutomountServiceAccountToken field is set.
- An error if any occurred during the operation.
func EvaluateAutomountTokens ¶
func EvaluateAutomountTokens(client corev1typed.CoreV1Interface, put *corev1.Pod) (bool, string)
EvaluateAutomountTokens evaluates whether the automountServiceAccountToken is correctly configured for the given Pod. Checks if the token is explicitly set in the Pod's spec or if it is inherited from the associated ServiceAccount. Returns:
- bool: Indicates whether the Pod passed all checks. if yes- return true, otherwise return false.
- string: Error message if the Pod is misconfigured, otherwise an empty string.
Types ¶
type CrdResource ¶
func GetCrdResources ¶
func GetCrdResources(crds []*apiextv1.CustomResourceDefinition) (resourceList []CrdResource)
GetCrdResources converts a list of apiextv1.CustomResourceDefinition structs into a list of list of CrdResource structs. Returns:
- []CrdResource : a slice of CrdResource objects.
type RoleResource ¶
type RoleResource struct {
Group, Name string
}
type RoleRule ¶
type RoleRule struct {
Resource RoleResource
Verb string
}
func FilterRulesNonMatchingResources ¶
func FilterRulesNonMatchingResources(ruleList []RoleRule, resourceList []CrdResource) (matching, nonMatching []RoleRule)
FilterRulesNonMatchingResources filters RoleRules based on whether they match any CrdResource in the resourceList. Returns :
- Matching: a slice of RoleRule that contains all rules where a CrdResource matches a RoleRule based on their properties.
- NonMatching: a slice of RoleRule that contains all rules not matching the CRD resource.
func GetAllRules ¶
GetAllRules retrieves a list all of rules defined by the role passed in input. Returns:
- []RoleRule : a slice of RoleRule objects.
func SliceDifference ¶
SliceDifference checks if there is a difference between s1 and s2 RoleRule slices. Returns :
- []RoleRule : the elements that are exist in s1 but not in s2.
Source Files