apiserver: k8s.io/apiserver/pkg/authorization/union Index | Files

package union

import "k8s.io/apiserver/pkg/authorization/union"

Package union implements an authorizer that combines multiple subauthorizer. The union authorizer iterates over each subauthorizer and returns the first decision that is either an Allow decision or a Deny decision. If a subauthorizer returns a NoOpinion, then the union authorizer moves onto the next authorizer or, if the subauthorizer was the last authorizer, returns NoOpinion as the aggregate decision. I.e. union authorizer creates an aggregate decision and supports short-circuit allows and denies from subauthorizers.

Index

Package Files

union.go

func New Uses

func New(authorizationHandlers ...authorizer.Authorizer) authorizer.Authorizer

New returns an authorizer that authorizes against a chain of authorizer.Authorizer objects

func NewRuleResolvers Uses

func NewRuleResolvers(authorizationHandlers ...authorizer.RuleResolver) authorizer.RuleResolver

NewRuleResolvers returns an authorizer that authorizes against a chain of authorizer.Authorizer objects

Package union imports 5 packages (graph) and is imported by 106 packages. Updated 2019-09-30. Refresh now. Tools for package owners.