kubernetes: k8s.io/kubernetes/pkg/kubeapiserver/authorizer Index | Files | Directories

package authorizer

import "k8s.io/kubernetes/pkg/kubeapiserver/authorizer"


Package Files


type Config Uses

type Config struct {
    AuthorizationModes []string

    // Path to an ABAC policy file.
    PolicyFile string

    // Kubeconfig file for Webhook authorization plugin.
    WebhookConfigFile string
    // API version of subject access reviews to send to the webhook (e.g. "v1", "v1beta1")
    WebhookVersion string
    // TTL for caching of authorized responses from the webhook server.
    WebhookCacheAuthorizedTTL time.Duration
    // TTL for caching of unauthorized responses from the webhook server.
    WebhookCacheUnauthorizedTTL time.Duration
    // WebhookRetryBackoff specifies the backoff parameters for the authorization webhook retry logic.
    // This allows us to configure the sleep time at each iteration and the maximum number of retries allowed
    // before we fail the webhook call in order to limit the fan out that ensues when the system is degraded.
    WebhookRetryBackoff *wait.Backoff

    VersionedInformerFactory versionedinformers.SharedInformerFactory

    // Optional field, custom dial function used to connect to webhook
    CustomDial utilnet.DialFunc

Config contains the data on how to authorize a request to the Kube API Server

func (Config) New Uses

func (config Config) New() (authorizer.Authorizer, authorizer.RuleResolver, error)

New returns the right sort of union of multiple authorizer.Authorizer objects based on the authorizationMode or an error.



Package authorizer imports 16 packages (graph) and is imported by 117 packages. Updated 2020-11-11. Refresh now. Tools for package owners.