rbac

package

v0.0.0-...-18e089f Latest Latest Go to latest Published: Mar 19, 2024 License: Apache-2.0 Imports: 16 Imported by: 1

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

func APIGroupMatches(rule *rbacv1.PolicyRule, requestedGroup string) bool

func CompactString(r rbacv1.PolicyRule) string

CompactString exposes a compact string representation for use in escalation error messages

func NonResourceURLMatches(rule *rbacv1.PolicyRule, requestedURL string) bool

func ResourceMatches(rule *rbacv1.PolicyRule, combinedRequestedResource, requestedSubresource string) bool

func ResourceNameMatches(rule *rbacv1.PolicyRule, requestedName string) bool

func RoleRefGroupKind(roleRef rbacv1.RoleRef) schema.GroupKind

func String(r rbacv1.PolicyRule) string

func SubjectsStrings(subjects []rbacv1.Subject) ([]string, []string, []string, []string)

subjectsStrings returns users, groups, serviceaccounts, unknown for display purposes.

func VerbMatches(rule *rbacv1.PolicyRule, requestedVerb string) bool

type RBACAuthorizer struct {
	// contains filtered or unexported fields
}

func NewRBACAuthorizer(am am.AccessManagementInterface) *RBACAuthorizer

func (r *RBACAuthorizer) Authorize(requestAttributes authorizer.Attributes) (authorizer.Decision, string, error)

type SortableRuleSlice []rbacv1.PolicyRule

func (s SortableRuleSlice) Len() int

func (s SortableRuleSlice) Less(i, j int) bool

func (s SortableRuleSlice) Swap(i, j int)