v1

package
v3.7.34-1+incompatible Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Feb 27, 2018 License: Apache-2.0 Imports: 18 Imported by: 0

Documentation

Overview

+groupName=authorization.openshift.io Package v1 is the v1 version of the API. 

Package v1 is a generated protocol buffer package.

It is generated from these files:
	github.com/openshift/origin/pkg/authorization/apis/authorization/v1/generated.proto

It has these top-level messages:
	Action
	ClusterPolicy
	ClusterPolicyBinding
	ClusterPolicyBindingList
	ClusterPolicyList
	ClusterRole
	ClusterRoleBinding
	ClusterRoleBindingList
	ClusterRoleList
	GroupRestriction
	IsPersonalSubjectAccessReview
	LocalResourceAccessReview
	LocalSubjectAccessReview
	NamedClusterRole
	NamedClusterRoleBinding
	NamedRole
	NamedRoleBinding
	OptionalNames
	OptionalScopes
	Policy
	PolicyBinding
	PolicyBindingList
	PolicyList
	PolicyRule
	ResourceAccessReview
	ResourceAccessReviewResponse
	Role
	RoleBinding
	RoleBindingList
	RoleBindingRestriction
	RoleBindingRestrictionList
	RoleBindingRestrictionSpec
	RoleList
	SelfSubjectRulesReview
	SelfSubjectRulesReviewSpec
	ServiceAccountReference
	ServiceAccountRestriction
	SubjectAccessReview
	SubjectAccessReviewResponse
	SubjectRulesReview
	SubjectRulesReviewSpec
	SubjectRulesReviewStatus
	UserRestriction

Index

Constants

View Source 
const (
	GroupName       = "authorization.openshift.io"
	LegacyGroupName = ""
)

Variables

View Source 
var (
	ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated   = fmt.Errorf("proto: integer overflow")
)
View Source 
var (
	SchemeGroupVersion       = schema.GroupVersion{Group: GroupName, Version: "v1"}
	LegacySchemeGroupVersion = schema.GroupVersion{Group: LegacyGroupName, Version: "v1"}

	LegacySchemeBuilder    = runtime.NewSchemeBuilder(addLegacyKnownTypes, addConversionFuncs, addLegacyFieldSelectorKeyConversions, RegisterDefaults)
	AddToSchemeInCoreGroup = LegacySchemeBuilder.AddToScheme

	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes, addConversionFuncs, addFieldSelectorKeyConversions, RegisterDefaults)
	AddToScheme   = SchemeBuilder.AddToScheme
)

Functions

func Convert_authorization_Action_To_v1_Action 

func Convert_authorization_Action_To_v1_Action(in *authorization.Action, out *Action, s conversion.Scope) error

Convert_authorization_Action_To_v1_Action is an autogenerated conversion function.

func Convert_authorization_ClusterPolicyBindingList_To_v1_ClusterPolicyBindingList 

func Convert_authorization_ClusterPolicyBindingList_To_v1_ClusterPolicyBindingList(in *authorization.ClusterPolicyBindingList, out *ClusterPolicyBindingList, s conversion.Scope) error

Convert_authorization_ClusterPolicyBindingList_To_v1_ClusterPolicyBindingList is an autogenerated conversion function.

func Convert_authorization_ClusterPolicyBinding_To_v1_ClusterPolicyBinding 

func Convert_authorization_ClusterPolicyBinding_To_v1_ClusterPolicyBinding(in *authorization.ClusterPolicyBinding, out *ClusterPolicyBinding, s conversion.Scope) error

Convert_authorization_ClusterPolicyBinding_To_v1_ClusterPolicyBinding is an autogenerated conversion function.

func Convert_authorization_ClusterPolicyList_To_v1_ClusterPolicyList 

func Convert_authorization_ClusterPolicyList_To_v1_ClusterPolicyList(in *authorization.ClusterPolicyList, out *ClusterPolicyList, s conversion.Scope) error

Convert_authorization_ClusterPolicyList_To_v1_ClusterPolicyList is an autogenerated conversion function.

func Convert_authorization_ClusterPolicy_To_v1_ClusterPolicy 

func Convert_authorization_ClusterPolicy_To_v1_ClusterPolicy(in *authorization.ClusterPolicy, out *ClusterPolicy, s conversion.Scope) error

Convert_authorization_ClusterPolicy_To_v1_ClusterPolicy is an autogenerated conversion function.

func Convert_authorization_ClusterRoleBindingList_To_v1_ClusterRoleBindingList 

func Convert_authorization_ClusterRoleBindingList_To_v1_ClusterRoleBindingList(in *authorization.ClusterRoleBindingList, out *ClusterRoleBindingList, s conversion.Scope) error

Convert_authorization_ClusterRoleBindingList_To_v1_ClusterRoleBindingList is an autogenerated conversion function.

func Convert_authorization_ClusterRoleBinding_To_v1_ClusterRoleBinding 

func Convert_authorization_ClusterRoleBinding_To_v1_ClusterRoleBinding(in *newer.ClusterRoleBinding, out *ClusterRoleBinding, s conversion.Scope) error

func Convert_authorization_ClusterRoleBindingsByName_To_v1_NamedClusterRoleBindings 

func Convert_authorization_ClusterRoleBindingsByName_To_v1_NamedClusterRoleBindings(in *newer.ClusterRoleBindingsByName, out *NamedClusterRoleBindings, s conversion.Scope) error

func Convert_authorization_ClusterRoleList_To_v1_ClusterRoleList 

func Convert_authorization_ClusterRoleList_To_v1_ClusterRoleList(in *authorization.ClusterRoleList, out *ClusterRoleList, s conversion.Scope) error

Convert_authorization_ClusterRoleList_To_v1_ClusterRoleList is an autogenerated conversion function.

func Convert_authorization_ClusterRole_To_v1_ClusterRole 

func Convert_authorization_ClusterRole_To_v1_ClusterRole(in *authorization.ClusterRole, out *ClusterRole, s conversion.Scope) error

Convert_authorization_ClusterRole_To_v1_ClusterRole is an autogenerated conversion function.

func Convert_authorization_ClusterRolesByName_To_v1_NamedClusterRoles 

func Convert_authorization_ClusterRolesByName_To_v1_NamedClusterRoles(in *newer.ClusterRolesByName, out *NamedClusterRoles, s conversion.Scope) error

func Convert_authorization_GroupRestriction_To_v1_GroupRestriction 

func Convert_authorization_GroupRestriction_To_v1_GroupRestriction(in *authorization.GroupRestriction, out *GroupRestriction, s conversion.Scope) error

Convert_authorization_GroupRestriction_To_v1_GroupRestriction is an autogenerated conversion function.

func Convert_authorization_IsPersonalSubjectAccessReview_To_v1_IsPersonalSubjectAccessReview 

func Convert_authorization_IsPersonalSubjectAccessReview_To_v1_IsPersonalSubjectAccessReview(in *authorization.IsPersonalSubjectAccessReview, out *IsPersonalSubjectAccessReview, s conversion.Scope) error

Convert_authorization_IsPersonalSubjectAccessReview_To_v1_IsPersonalSubjectAccessReview is an autogenerated conversion function.

func Convert_authorization_LocalResourceAccessReview_To_v1_LocalResourceAccessReview 

func Convert_authorization_LocalResourceAccessReview_To_v1_LocalResourceAccessReview(in *authorization.LocalResourceAccessReview, out *LocalResourceAccessReview, s conversion.Scope) error

Convert_authorization_LocalResourceAccessReview_To_v1_LocalResourceAccessReview is an autogenerated conversion function.

func Convert_authorization_LocalSubjectAccessReview_To_v1_LocalSubjectAccessReview 

func Convert_authorization_LocalSubjectAccessReview_To_v1_LocalSubjectAccessReview(in *newer.LocalSubjectAccessReview, out *LocalSubjectAccessReview, s conversion.Scope) error

func Convert_authorization_PolicyBindingList_To_v1_PolicyBindingList 

func Convert_authorization_PolicyBindingList_To_v1_PolicyBindingList(in *authorization.PolicyBindingList, out *PolicyBindingList, s conversion.Scope) error

Convert_authorization_PolicyBindingList_To_v1_PolicyBindingList is an autogenerated conversion function.

func Convert_authorization_PolicyBinding_To_v1_PolicyBinding 

func Convert_authorization_PolicyBinding_To_v1_PolicyBinding(in *authorization.PolicyBinding, out *PolicyBinding, s conversion.Scope) error

Convert_authorization_PolicyBinding_To_v1_PolicyBinding is an autogenerated conversion function.

func Convert_authorization_PolicyList_To_v1_PolicyList 

func Convert_authorization_PolicyList_To_v1_PolicyList(in *authorization.PolicyList, out *PolicyList, s conversion.Scope) error

Convert_authorization_PolicyList_To_v1_PolicyList is an autogenerated conversion function.

func Convert_authorization_PolicyRule_To_v1_PolicyRule 

func Convert_authorization_PolicyRule_To_v1_PolicyRule(in *newer.PolicyRule, out *PolicyRule, s conversion.Scope) error

func Convert_authorization_Policy_To_v1_Policy 

func Convert_authorization_Policy_To_v1_Policy(in *authorization.Policy, out *Policy, s conversion.Scope) error

Convert_authorization_Policy_To_v1_Policy is an autogenerated conversion function.

func Convert_authorization_ResourceAccessReviewResponse_To_v1_ResourceAccessReviewResponse 

func Convert_authorization_ResourceAccessReviewResponse_To_v1_ResourceAccessReviewResponse(in *newer.ResourceAccessReviewResponse, out *ResourceAccessReviewResponse, s conversion.Scope) error

func Convert_authorization_ResourceAccessReview_To_v1_ResourceAccessReview 

func Convert_authorization_ResourceAccessReview_To_v1_ResourceAccessReview(in *authorization.ResourceAccessReview, out *ResourceAccessReview, s conversion.Scope) error

Convert_authorization_ResourceAccessReview_To_v1_ResourceAccessReview is an autogenerated conversion function.

func Convert_authorization_RoleBindingList_To_v1_RoleBindingList 

func Convert_authorization_RoleBindingList_To_v1_RoleBindingList(in *authorization.RoleBindingList, out *RoleBindingList, s conversion.Scope) error

Convert_authorization_RoleBindingList_To_v1_RoleBindingList is an autogenerated conversion function.

func Convert_authorization_RoleBindingRestrictionList_To_v1_RoleBindingRestrictionList 

func Convert_authorization_RoleBindingRestrictionList_To_v1_RoleBindingRestrictionList(in *authorization.RoleBindingRestrictionList, out *RoleBindingRestrictionList, s conversion.Scope) error

Convert_authorization_RoleBindingRestrictionList_To_v1_RoleBindingRestrictionList is an autogenerated conversion function.

func Convert_authorization_RoleBindingRestrictionSpec_To_v1_RoleBindingRestrictionSpec 

func Convert_authorization_RoleBindingRestrictionSpec_To_v1_RoleBindingRestrictionSpec(in *authorization.RoleBindingRestrictionSpec, out *RoleBindingRestrictionSpec, s conversion.Scope) error

Convert_authorization_RoleBindingRestrictionSpec_To_v1_RoleBindingRestrictionSpec is an autogenerated conversion function.

func Convert_authorization_RoleBindingRestriction_To_v1_RoleBindingRestriction 

func Convert_authorization_RoleBindingRestriction_To_v1_RoleBindingRestriction(in *authorization.RoleBindingRestriction, out *RoleBindingRestriction, s conversion.Scope) error

Convert_authorization_RoleBindingRestriction_To_v1_RoleBindingRestriction is an autogenerated conversion function.

func Convert_authorization_RoleBinding_To_v1_RoleBinding 

func Convert_authorization_RoleBinding_To_v1_RoleBinding(in *newer.RoleBinding, out *RoleBinding, s conversion.Scope) error

func Convert_authorization_RoleBindingsByName_To_v1_NamedRoleBindings 

func Convert_authorization_RoleBindingsByName_To_v1_NamedRoleBindings(in *newer.RoleBindingsByName, out *NamedRoleBindings, s conversion.Scope) error

func Convert_authorization_RoleList_To_v1_RoleList 

func Convert_authorization_RoleList_To_v1_RoleList(in *authorization.RoleList, out *RoleList, s conversion.Scope) error

Convert_authorization_RoleList_To_v1_RoleList is an autogenerated conversion function.

func Convert_authorization_Role_To_v1_Role 

func Convert_authorization_Role_To_v1_Role(in *authorization.Role, out *Role, s conversion.Scope) error

Convert_authorization_Role_To_v1_Role is an autogenerated conversion function.

func Convert_authorization_RolesByName_To_v1_NamedRoles 

func Convert_authorization_RolesByName_To_v1_NamedRoles(in *newer.RolesByName, out *NamedRoles, s conversion.Scope) error

func Convert_authorization_SelfSubjectRulesReviewSpec_To_v1_SelfSubjectRulesReviewSpec 

func Convert_authorization_SelfSubjectRulesReviewSpec_To_v1_SelfSubjectRulesReviewSpec(in *newer.SelfSubjectRulesReviewSpec, out *SelfSubjectRulesReviewSpec, s conversion.Scope) error

func Convert_authorization_SelfSubjectRulesReview_To_v1_SelfSubjectRulesReview 

func Convert_authorization_SelfSubjectRulesReview_To_v1_SelfSubjectRulesReview(in *authorization.SelfSubjectRulesReview, out *SelfSubjectRulesReview, s conversion.Scope) error

Convert_authorization_SelfSubjectRulesReview_To_v1_SelfSubjectRulesReview is an autogenerated conversion function.

func Convert_authorization_ServiceAccountReference_To_v1_ServiceAccountReference 

func Convert_authorization_ServiceAccountReference_To_v1_ServiceAccountReference(in *authorization.ServiceAccountReference, out *ServiceAccountReference, s conversion.Scope) error

Convert_authorization_ServiceAccountReference_To_v1_ServiceAccountReference is an autogenerated conversion function.

func Convert_authorization_ServiceAccountRestriction_To_v1_ServiceAccountRestriction 

func Convert_authorization_ServiceAccountRestriction_To_v1_ServiceAccountRestriction(in *authorization.ServiceAccountRestriction, out *ServiceAccountRestriction, s conversion.Scope) error

Convert_authorization_ServiceAccountRestriction_To_v1_ServiceAccountRestriction is an autogenerated conversion function.

func Convert_authorization_SubjectAccessReviewResponse_To_v1_SubjectAccessReviewResponse 

func Convert_authorization_SubjectAccessReviewResponse_To_v1_SubjectAccessReviewResponse(in *authorization.SubjectAccessReviewResponse, out *SubjectAccessReviewResponse, s conversion.Scope) error

Convert_authorization_SubjectAccessReviewResponse_To_v1_SubjectAccessReviewResponse is an autogenerated conversion function.

func Convert_authorization_SubjectAccessReview_To_v1_SubjectAccessReview 

func Convert_authorization_SubjectAccessReview_To_v1_SubjectAccessReview(in *newer.SubjectAccessReview, out *SubjectAccessReview, s conversion.Scope) error

func Convert_authorization_SubjectRulesReviewSpec_To_v1_SubjectRulesReviewSpec 

func Convert_authorization_SubjectRulesReviewSpec_To_v1_SubjectRulesReviewSpec(in *authorization.SubjectRulesReviewSpec, out *SubjectRulesReviewSpec, s conversion.Scope) error

Convert_authorization_SubjectRulesReviewSpec_To_v1_SubjectRulesReviewSpec is an autogenerated conversion function.

func Convert_authorization_SubjectRulesReviewStatus_To_v1_SubjectRulesReviewStatus 

func Convert_authorization_SubjectRulesReviewStatus_To_v1_SubjectRulesReviewStatus(in *authorization.SubjectRulesReviewStatus, out *SubjectRulesReviewStatus, s conversion.Scope) error

Convert_authorization_SubjectRulesReviewStatus_To_v1_SubjectRulesReviewStatus is an autogenerated conversion function.

func Convert_authorization_SubjectRulesReview_To_v1_SubjectRulesReview 

func Convert_authorization_SubjectRulesReview_To_v1_SubjectRulesReview(in *authorization.SubjectRulesReview, out *SubjectRulesReview, s conversion.Scope) error

Convert_authorization_SubjectRulesReview_To_v1_SubjectRulesReview is an autogenerated conversion function.

func Convert_authorization_UserRestriction_To_v1_UserRestriction 

func Convert_authorization_UserRestriction_To_v1_UserRestriction(in *authorization.UserRestriction, out *UserRestriction, s conversion.Scope) error

Convert_authorization_UserRestriction_To_v1_UserRestriction is an autogenerated conversion function.

func Convert_v1_Action_To_authorization_Action 

func Convert_v1_Action_To_authorization_Action(in *Action, out *authorization.Action, s conversion.Scope) error

Convert_v1_Action_To_authorization_Action is an autogenerated conversion function.

func Convert_v1_ClusterPolicyBindingList_To_authorization_ClusterPolicyBindingList 

func Convert_v1_ClusterPolicyBindingList_To_authorization_ClusterPolicyBindingList(in *ClusterPolicyBindingList, out *authorization.ClusterPolicyBindingList, s conversion.Scope) error

Convert_v1_ClusterPolicyBindingList_To_authorization_ClusterPolicyBindingList is an autogenerated conversion function.

func Convert_v1_ClusterPolicyBinding_To_authorization_ClusterPolicyBinding 

func Convert_v1_ClusterPolicyBinding_To_authorization_ClusterPolicyBinding(in *ClusterPolicyBinding, out *newer.ClusterPolicyBinding, s conversion.Scope) error

func Convert_v1_ClusterPolicyList_To_authorization_ClusterPolicyList 

func Convert_v1_ClusterPolicyList_To_authorization_ClusterPolicyList(in *ClusterPolicyList, out *authorization.ClusterPolicyList, s conversion.Scope) error

Convert_v1_ClusterPolicyList_To_authorization_ClusterPolicyList is an autogenerated conversion function.

func Convert_v1_ClusterPolicy_To_authorization_ClusterPolicy 

func Convert_v1_ClusterPolicy_To_authorization_ClusterPolicy(in *ClusterPolicy, out *newer.ClusterPolicy, s conversion.Scope) error

and now the globals

func Convert_v1_ClusterRoleBindingList_To_authorization_ClusterRoleBindingList 

func Convert_v1_ClusterRoleBindingList_To_authorization_ClusterRoleBindingList(in *ClusterRoleBindingList, out *authorization.ClusterRoleBindingList, s conversion.Scope) error

Convert_v1_ClusterRoleBindingList_To_authorization_ClusterRoleBindingList is an autogenerated conversion function.

func Convert_v1_ClusterRoleBinding_To_authorization_ClusterRoleBinding 

func Convert_v1_ClusterRoleBinding_To_authorization_ClusterRoleBinding(in *ClusterRoleBinding, out *newer.ClusterRoleBinding, s conversion.Scope) error

func Convert_v1_ClusterRoleList_To_authorization_ClusterRoleList 

func Convert_v1_ClusterRoleList_To_authorization_ClusterRoleList(in *ClusterRoleList, out *authorization.ClusterRoleList, s conversion.Scope) error

Convert_v1_ClusterRoleList_To_authorization_ClusterRoleList is an autogenerated conversion function.

func Convert_v1_ClusterRole_To_authorization_ClusterRole 

func Convert_v1_ClusterRole_To_authorization_ClusterRole(in *ClusterRole, out *authorization.ClusterRole, s conversion.Scope) error

Convert_v1_ClusterRole_To_authorization_ClusterRole is an autogenerated conversion function.

func Convert_v1_GroupRestriction_To_authorization_GroupRestriction 

func Convert_v1_GroupRestriction_To_authorization_GroupRestriction(in *GroupRestriction, out *authorization.GroupRestriction, s conversion.Scope) error

Convert_v1_GroupRestriction_To_authorization_GroupRestriction is an autogenerated conversion function.

func Convert_v1_IsPersonalSubjectAccessReview_To_authorization_IsPersonalSubjectAccessReview 

func Convert_v1_IsPersonalSubjectAccessReview_To_authorization_IsPersonalSubjectAccessReview(in *IsPersonalSubjectAccessReview, out *authorization.IsPersonalSubjectAccessReview, s conversion.Scope) error

Convert_v1_IsPersonalSubjectAccessReview_To_authorization_IsPersonalSubjectAccessReview is an autogenerated conversion function.

func Convert_v1_LocalResourceAccessReview_To_authorization_LocalResourceAccessReview 

func Convert_v1_LocalResourceAccessReview_To_authorization_LocalResourceAccessReview(in *LocalResourceAccessReview, out *authorization.LocalResourceAccessReview, s conversion.Scope) error

Convert_v1_LocalResourceAccessReview_To_authorization_LocalResourceAccessReview is an autogenerated conversion function.

func Convert_v1_LocalSubjectAccessReview_To_authorization_LocalSubjectAccessReview 

func Convert_v1_LocalSubjectAccessReview_To_authorization_LocalSubjectAccessReview(in *LocalSubjectAccessReview, out *newer.LocalSubjectAccessReview, s conversion.Scope) error

func Convert_v1_NamedClusterRoleBindings_To_authorization_ClusterRoleBindingsByName 

func Convert_v1_NamedClusterRoleBindings_To_authorization_ClusterRoleBindingsByName(in *NamedClusterRoleBindings, out *newer.ClusterRoleBindingsByName, s conversion.Scope) error

func Convert_v1_NamedClusterRoles_To_authorization_ClusterRolesByName 

func Convert_v1_NamedClusterRoles_To_authorization_ClusterRolesByName(in *NamedClusterRoles, out *newer.ClusterRolesByName, s conversion.Scope) error

func Convert_v1_NamedRoleBindings_To_authorization_RoleBindingsByName 

func Convert_v1_NamedRoleBindings_To_authorization_RoleBindingsByName(in *NamedRoleBindings, out *newer.RoleBindingsByName, s conversion.Scope) error

func Convert_v1_NamedRoles_To_authorization_RolesByName 

func Convert_v1_NamedRoles_To_authorization_RolesByName(in *NamedRoles, out *newer.RolesByName, s conversion.Scope) error

func Convert_v1_PolicyBindingList_To_authorization_PolicyBindingList 

func Convert_v1_PolicyBindingList_To_authorization_PolicyBindingList(in *PolicyBindingList, out *authorization.PolicyBindingList, s conversion.Scope) error

Convert_v1_PolicyBindingList_To_authorization_PolicyBindingList is an autogenerated conversion function.

func Convert_v1_PolicyBinding_To_authorization_PolicyBinding 

func Convert_v1_PolicyBinding_To_authorization_PolicyBinding(in *PolicyBinding, out *newer.PolicyBinding, s conversion.Scope) error

func Convert_v1_PolicyList_To_authorization_PolicyList 

func Convert_v1_PolicyList_To_authorization_PolicyList(in *PolicyList, out *authorization.PolicyList, s conversion.Scope) error

Convert_v1_PolicyList_To_authorization_PolicyList is an autogenerated conversion function.

func Convert_v1_PolicyRule_To_authorization_PolicyRule 

func Convert_v1_PolicyRule_To_authorization_PolicyRule(in *PolicyRule, out *newer.PolicyRule, s conversion.Scope) error

func Convert_v1_Policy_To_authorization_Policy 

func Convert_v1_Policy_To_authorization_Policy(in *Policy, out *newer.Policy, s conversion.Scope) error

func Convert_v1_ResourceAccessReviewResponse_To_authorization_ResourceAccessReviewResponse 

func Convert_v1_ResourceAccessReviewResponse_To_authorization_ResourceAccessReviewResponse(in *ResourceAccessReviewResponse, out *newer.ResourceAccessReviewResponse, s conversion.Scope) error

func Convert_v1_ResourceAccessReview_To_authorization_ResourceAccessReview 

func Convert_v1_ResourceAccessReview_To_authorization_ResourceAccessReview(in *ResourceAccessReview, out *authorization.ResourceAccessReview, s conversion.Scope) error

Convert_v1_ResourceAccessReview_To_authorization_ResourceAccessReview is an autogenerated conversion function.

func Convert_v1_RoleBindingList_To_authorization_RoleBindingList 

func Convert_v1_RoleBindingList_To_authorization_RoleBindingList(in *RoleBindingList, out *authorization.RoleBindingList, s conversion.Scope) error

Convert_v1_RoleBindingList_To_authorization_RoleBindingList is an autogenerated conversion function.

func Convert_v1_RoleBindingRestrictionList_To_authorization_RoleBindingRestrictionList 

func Convert_v1_RoleBindingRestrictionList_To_authorization_RoleBindingRestrictionList(in *RoleBindingRestrictionList, out *authorization.RoleBindingRestrictionList, s conversion.Scope) error

Convert_v1_RoleBindingRestrictionList_To_authorization_RoleBindingRestrictionList is an autogenerated conversion function.

func Convert_v1_RoleBindingRestrictionSpec_To_authorization_RoleBindingRestrictionSpec 

func Convert_v1_RoleBindingRestrictionSpec_To_authorization_RoleBindingRestrictionSpec(in *RoleBindingRestrictionSpec, out *authorization.RoleBindingRestrictionSpec, s conversion.Scope) error

Convert_v1_RoleBindingRestrictionSpec_To_authorization_RoleBindingRestrictionSpec is an autogenerated conversion function.

func Convert_v1_RoleBindingRestriction_To_authorization_RoleBindingRestriction 

func Convert_v1_RoleBindingRestriction_To_authorization_RoleBindingRestriction(in *RoleBindingRestriction, out *authorization.RoleBindingRestriction, s conversion.Scope) error

Convert_v1_RoleBindingRestriction_To_authorization_RoleBindingRestriction is an autogenerated conversion function.

func Convert_v1_RoleBinding_To_authorization_RoleBinding 

func Convert_v1_RoleBinding_To_authorization_RoleBinding(in *RoleBinding, out *newer.RoleBinding, s conversion.Scope) error

func Convert_v1_RoleList_To_authorization_RoleList 

func Convert_v1_RoleList_To_authorization_RoleList(in *RoleList, out *authorization.RoleList, s conversion.Scope) error

Convert_v1_RoleList_To_authorization_RoleList is an autogenerated conversion function.

func Convert_v1_Role_To_authorization_Role 

func Convert_v1_Role_To_authorization_Role(in *Role, out *authorization.Role, s conversion.Scope) error

Convert_v1_Role_To_authorization_Role is an autogenerated conversion function.

func Convert_v1_SelfSubjectRulesReviewSpec_To_authorization_SelfSubjectRulesReviewSpec 

func Convert_v1_SelfSubjectRulesReviewSpec_To_authorization_SelfSubjectRulesReviewSpec(in *SelfSubjectRulesReviewSpec, out *newer.SelfSubjectRulesReviewSpec, s conversion.Scope) error

func Convert_v1_SelfSubjectRulesReview_To_authorization_SelfSubjectRulesReview 

func Convert_v1_SelfSubjectRulesReview_To_authorization_SelfSubjectRulesReview(in *SelfSubjectRulesReview, out *authorization.SelfSubjectRulesReview, s conversion.Scope) error

Convert_v1_SelfSubjectRulesReview_To_authorization_SelfSubjectRulesReview is an autogenerated conversion function.

func Convert_v1_ServiceAccountReference_To_authorization_ServiceAccountReference 

func Convert_v1_ServiceAccountReference_To_authorization_ServiceAccountReference(in *ServiceAccountReference, out *authorization.ServiceAccountReference, s conversion.Scope) error

Convert_v1_ServiceAccountReference_To_authorization_ServiceAccountReference is an autogenerated conversion function.

func Convert_v1_ServiceAccountRestriction_To_authorization_ServiceAccountRestriction 

func Convert_v1_ServiceAccountRestriction_To_authorization_ServiceAccountRestriction(in *ServiceAccountRestriction, out *authorization.ServiceAccountRestriction, s conversion.Scope) error

Convert_v1_ServiceAccountRestriction_To_authorization_ServiceAccountRestriction is an autogenerated conversion function.

func Convert_v1_SubjectAccessReviewResponse_To_authorization_SubjectAccessReviewResponse 

func Convert_v1_SubjectAccessReviewResponse_To_authorization_SubjectAccessReviewResponse(in *SubjectAccessReviewResponse, out *authorization.SubjectAccessReviewResponse, s conversion.Scope) error

Convert_v1_SubjectAccessReviewResponse_To_authorization_SubjectAccessReviewResponse is an autogenerated conversion function.

func Convert_v1_SubjectAccessReview_To_authorization_SubjectAccessReview 

func Convert_v1_SubjectAccessReview_To_authorization_SubjectAccessReview(in *SubjectAccessReview, out *newer.SubjectAccessReview, s conversion.Scope) error

func Convert_v1_SubjectRulesReviewSpec_To_authorization_SubjectRulesReviewSpec 

func Convert_v1_SubjectRulesReviewSpec_To_authorization_SubjectRulesReviewSpec(in *SubjectRulesReviewSpec, out *authorization.SubjectRulesReviewSpec, s conversion.Scope) error

Convert_v1_SubjectRulesReviewSpec_To_authorization_SubjectRulesReviewSpec is an autogenerated conversion function.

func Convert_v1_SubjectRulesReviewStatus_To_authorization_SubjectRulesReviewStatus 

func Convert_v1_SubjectRulesReviewStatus_To_authorization_SubjectRulesReviewStatus(in *SubjectRulesReviewStatus, out *authorization.SubjectRulesReviewStatus, s conversion.Scope) error

Convert_v1_SubjectRulesReviewStatus_To_authorization_SubjectRulesReviewStatus is an autogenerated conversion function.

func Convert_v1_SubjectRulesReview_To_authorization_SubjectRulesReview 

func Convert_v1_SubjectRulesReview_To_authorization_SubjectRulesReview(in *SubjectRulesReview, out *authorization.SubjectRulesReview, s conversion.Scope) error

Convert_v1_SubjectRulesReview_To_authorization_SubjectRulesReview is an autogenerated conversion function.

func Convert_v1_UserRestriction_To_authorization_UserRestriction 

func Convert_v1_UserRestriction_To_authorization_UserRestriction(in *UserRestriction, out *authorization.UserRestriction, s conversion.Scope) error

Convert_v1_UserRestriction_To_authorization_UserRestriction is an autogenerated conversion function.

func DeepCopy_v1_Action 

func DeepCopy_v1_Action(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_Action is an autogenerated deepcopy function.

func DeepCopy_v1_ClusterPolicy 

func DeepCopy_v1_ClusterPolicy(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ClusterPolicy is an autogenerated deepcopy function.

func DeepCopy_v1_ClusterPolicyBinding 

func DeepCopy_v1_ClusterPolicyBinding(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ClusterPolicyBinding is an autogenerated deepcopy function.

func DeepCopy_v1_ClusterPolicyBindingList 

func DeepCopy_v1_ClusterPolicyBindingList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ClusterPolicyBindingList is an autogenerated deepcopy function.

func DeepCopy_v1_ClusterPolicyList 

func DeepCopy_v1_ClusterPolicyList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ClusterPolicyList is an autogenerated deepcopy function.

func DeepCopy_v1_ClusterRole 

func DeepCopy_v1_ClusterRole(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ClusterRole is an autogenerated deepcopy function.

func DeepCopy_v1_ClusterRoleBinding 

func DeepCopy_v1_ClusterRoleBinding(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ClusterRoleBinding is an autogenerated deepcopy function.

func DeepCopy_v1_ClusterRoleBindingList 

func DeepCopy_v1_ClusterRoleBindingList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ClusterRoleBindingList is an autogenerated deepcopy function.

func DeepCopy_v1_ClusterRoleList 

func DeepCopy_v1_ClusterRoleList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ClusterRoleList is an autogenerated deepcopy function.

func DeepCopy_v1_GroupRestriction 

func DeepCopy_v1_GroupRestriction(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_GroupRestriction is an autogenerated deepcopy function.

func DeepCopy_v1_IsPersonalSubjectAccessReview 

func DeepCopy_v1_IsPersonalSubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_IsPersonalSubjectAccessReview is an autogenerated deepcopy function.

func DeepCopy_v1_LocalResourceAccessReview 

func DeepCopy_v1_LocalResourceAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_LocalResourceAccessReview is an autogenerated deepcopy function.

func DeepCopy_v1_LocalSubjectAccessReview 

func DeepCopy_v1_LocalSubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_LocalSubjectAccessReview is an autogenerated deepcopy function.

func DeepCopy_v1_NamedClusterRole 

func DeepCopy_v1_NamedClusterRole(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_NamedClusterRole is an autogenerated deepcopy function.

func DeepCopy_v1_NamedClusterRoleBinding 

func DeepCopy_v1_NamedClusterRoleBinding(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_NamedClusterRoleBinding is an autogenerated deepcopy function.

func DeepCopy_v1_NamedRole 

func DeepCopy_v1_NamedRole(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_NamedRole is an autogenerated deepcopy function.

func DeepCopy_v1_NamedRoleBinding 

func DeepCopy_v1_NamedRoleBinding(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_NamedRoleBinding is an autogenerated deepcopy function.

func DeepCopy_v1_Policy 

func DeepCopy_v1_Policy(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_Policy is an autogenerated deepcopy function.

func DeepCopy_v1_PolicyBinding 

func DeepCopy_v1_PolicyBinding(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_PolicyBinding is an autogenerated deepcopy function.

func DeepCopy_v1_PolicyBindingList 

func DeepCopy_v1_PolicyBindingList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_PolicyBindingList is an autogenerated deepcopy function.

func DeepCopy_v1_PolicyList 

func DeepCopy_v1_PolicyList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_PolicyList is an autogenerated deepcopy function.

func DeepCopy_v1_PolicyRule 

func DeepCopy_v1_PolicyRule(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_PolicyRule is an autogenerated deepcopy function.

func DeepCopy_v1_ResourceAccessReview 

func DeepCopy_v1_ResourceAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ResourceAccessReview is an autogenerated deepcopy function.

func DeepCopy_v1_ResourceAccessReviewResponse 

func DeepCopy_v1_ResourceAccessReviewResponse(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ResourceAccessReviewResponse is an autogenerated deepcopy function.

func DeepCopy_v1_Role 

func DeepCopy_v1_Role(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_Role is an autogenerated deepcopy function.

func DeepCopy_v1_RoleBinding 

func DeepCopy_v1_RoleBinding(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_RoleBinding is an autogenerated deepcopy function.

func DeepCopy_v1_RoleBindingList 

func DeepCopy_v1_RoleBindingList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_RoleBindingList is an autogenerated deepcopy function.

func DeepCopy_v1_RoleBindingRestriction 

func DeepCopy_v1_RoleBindingRestriction(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_RoleBindingRestriction is an autogenerated deepcopy function.

func DeepCopy_v1_RoleBindingRestrictionList 

func DeepCopy_v1_RoleBindingRestrictionList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_RoleBindingRestrictionList is an autogenerated deepcopy function.

func DeepCopy_v1_RoleBindingRestrictionSpec 

func DeepCopy_v1_RoleBindingRestrictionSpec(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_RoleBindingRestrictionSpec is an autogenerated deepcopy function.

func DeepCopy_v1_RoleList 

func DeepCopy_v1_RoleList(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_RoleList is an autogenerated deepcopy function.

func DeepCopy_v1_SelfSubjectRulesReview 

func DeepCopy_v1_SelfSubjectRulesReview(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_SelfSubjectRulesReview is an autogenerated deepcopy function.

func DeepCopy_v1_SelfSubjectRulesReviewSpec 

func DeepCopy_v1_SelfSubjectRulesReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_SelfSubjectRulesReviewSpec is an autogenerated deepcopy function.

func DeepCopy_v1_ServiceAccountReference 

func DeepCopy_v1_ServiceAccountReference(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ServiceAccountReference is an autogenerated deepcopy function.

func DeepCopy_v1_ServiceAccountRestriction 

func DeepCopy_v1_ServiceAccountRestriction(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_ServiceAccountRestriction is an autogenerated deepcopy function.

func DeepCopy_v1_SubjectAccessReview 

func DeepCopy_v1_SubjectAccessReview(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_SubjectAccessReview is an autogenerated deepcopy function.

func DeepCopy_v1_SubjectAccessReviewResponse 

func DeepCopy_v1_SubjectAccessReviewResponse(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_SubjectAccessReviewResponse is an autogenerated deepcopy function.

func DeepCopy_v1_SubjectRulesReview 

func DeepCopy_v1_SubjectRulesReview(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_SubjectRulesReview is an autogenerated deepcopy function.

func DeepCopy_v1_SubjectRulesReviewSpec 

func DeepCopy_v1_SubjectRulesReviewSpec(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_SubjectRulesReviewSpec is an autogenerated deepcopy function.

func DeepCopy_v1_SubjectRulesReviewStatus 

func DeepCopy_v1_SubjectRulesReviewStatus(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_SubjectRulesReviewStatus is an autogenerated deepcopy function.

func DeepCopy_v1_UserRestriction 

func DeepCopy_v1_UserRestriction(in interface{}, out interface{}, c *conversion.Cloner) error

DeepCopy_v1_UserRestriction is an autogenerated deepcopy function.

func RegisterConversions 

func RegisterConversions(scheme *runtime.Scheme) error

RegisterConversions adds conversion functions to the given scheme. Public to allow building arbitrary schemes.

func RegisterDeepCopies 

func RegisterDeepCopies(scheme *runtime.Scheme) error

RegisterDeepCopies adds deep-copy functions to the given scheme. Public to allow building arbitrary schemes.

func RegisterDefaults 

func RegisterDefaults(scheme *runtime.Scheme) error

RegisterDefaults adds defaulters functions to the given scheme. Public to allow building arbitrary schemes. All generated defaulters are covering - they call all nested defaulters.

func Resource 

func Resource(resource string) schema.GroupResource

func SetDefaults_PolicyRule 

func SetDefaults_PolicyRule(obj *PolicyRule)

func SetObjectDefaults_ClusterPolicy 

func SetObjectDefaults_ClusterPolicy(in *ClusterPolicy)

func SetObjectDefaults_ClusterPolicyList 

func SetObjectDefaults_ClusterPolicyList(in *ClusterPolicyList)

func SetObjectDefaults_ClusterRole 

func SetObjectDefaults_ClusterRole(in *ClusterRole)

func SetObjectDefaults_ClusterRoleList 

func SetObjectDefaults_ClusterRoleList(in *ClusterRoleList)

func SetObjectDefaults_Policy 

func SetObjectDefaults_Policy(in *Policy)

func SetObjectDefaults_PolicyList 

func SetObjectDefaults_PolicyList(in *PolicyList)

func SetObjectDefaults_Role 

func SetObjectDefaults_Role(in *Role)

func SetObjectDefaults_RoleList 

func SetObjectDefaults_RoleList(in *RoleList)

func SetObjectDefaults_SelfSubjectRulesReview 

func SetObjectDefaults_SelfSubjectRulesReview(in *SelfSubjectRulesReview)

func SetObjectDefaults_SubjectRulesReview 

func SetObjectDefaults_SubjectRulesReview(in *SubjectRulesReview)

Types

type Action 

type Action struct {
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces
	Namespace string `json:"namespace" protobuf:"bytes,1,opt,name=namespace"`
	// Verb is one of: get, list, watch, create, update, delete
	Verb string `json:"verb" protobuf:"bytes,2,opt,name=verb"`
	// Group is the API group of the resource
	// Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined
	Group string `json:"resourceAPIGroup" protobuf:"bytes,3,opt,name=resourceAPIGroup"`
	// Version is the API version of the resource
	// Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined
	Version string `json:"resourceAPIVersion" protobuf:"bytes,4,opt,name=resourceAPIVersion"`
	// Resource is one of the existing resource types
	Resource string `json:"resource" protobuf:"bytes,5,opt,name=resource"`
	// ResourceName is the name of the resource being requested for a "get" or deleted for a "delete"
	ResourceName string `json:"resourceName" protobuf:"bytes,6,opt,name=resourceName"`
	// Path is the path of a non resource URL
	Path string `json:"path" protobuf:"bytes,8,opt,name=path"`
	// IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hieraarchy)
	IsNonResourceURL bool `json:"isNonResourceURL" protobuf:"varint,9,opt,name=isNonResourceURL"`
	// Content is the actual content of the request for create and update
	Content kruntime.RawExtension `json:"content,omitempty" protobuf:"bytes,7,opt,name=content"`
}

Action describes a request to the API server

func (*Action) Descriptor 

func (*Action) Descriptor() ([]byte, []int)

func (*Action) Marshal 

func (m *Action) Marshal() (dAtA []byte, err error)

func (*Action) MarshalTo 

func (m *Action) MarshalTo(dAtA []byte) (int, error)

func (*Action) ProtoMessage 

func (*Action) ProtoMessage()

func (*Action) Reset 

func (m *Action) Reset()

func (*Action) Size 

func (m *Action) Size() (n int)

func (*Action) String 

func (this *Action) String() string

func (Action) SwaggerDoc 

func (Action) SwaggerDoc() map[string]string

func (*Action) Unmarshal 

func (m *Action) Unmarshal(dAtA []byte) error

type ClusterPolicy 

type ClusterPolicy struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// LastModified is the last time that any part of the ClusterPolicy was created, updated, or deleted
	LastModified metav1.Time `json:"lastModified" protobuf:"bytes,2,opt,name=lastModified"`

	// Roles holds all the ClusterRoles held by this ClusterPolicy, mapped by ClusterRole.Name
	Roles NamedClusterRoles `json:"roles" protobuf:"bytes,3,rep,name=roles"`
}

ClusterPolicy is a object that holds all the ClusterRoles for a particular namespace. There is at most one ClusterPolicy document per namespace.

func (*ClusterPolicy) DecodeNestedObjects 

func (c *ClusterPolicy) DecodeNestedObjects(d runtime.Decoder) error

func (*ClusterPolicy) Descriptor 

func (*ClusterPolicy) Descriptor() ([]byte, []int)

func (*ClusterPolicy) EncodeNestedObjects 

func (c *ClusterPolicy) EncodeNestedObjects(e runtime.Encoder) error

func (*ClusterPolicy) Marshal 

func (m *ClusterPolicy) Marshal() (dAtA []byte, err error)

func (*ClusterPolicy) MarshalTo 

func (m *ClusterPolicy) MarshalTo(dAtA []byte) (int, error)

func (*ClusterPolicy) ProtoMessage 

func (*ClusterPolicy) ProtoMessage()

func (*ClusterPolicy) Reset 

func (m *ClusterPolicy) Reset()

func (*ClusterPolicy) Size 

func (m *ClusterPolicy) Size() (n int)

func (*ClusterPolicy) String 

func (this *ClusterPolicy) String() string

func (ClusterPolicy) SwaggerDoc 

func (ClusterPolicy) SwaggerDoc() map[string]string

func (*ClusterPolicy) Unmarshal 

func (m *ClusterPolicy) Unmarshal(dAtA []byte) error

type ClusterPolicyBinding 

type ClusterPolicyBinding struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// LastModified is the last time that any part of the ClusterPolicyBinding was created, updated, or deleted
	LastModified metav1.Time `json:"lastModified" protobuf:"bytes,2,opt,name=lastModified"`

	// PolicyRef is a reference to the ClusterPolicy that contains all the ClusterRoles that this ClusterPolicyBinding's RoleBindings may reference
	PolicyRef kapi.ObjectReference `json:"policyRef" protobuf:"bytes,3,opt,name=policyRef"`
	// RoleBindings holds all the ClusterRoleBindings held by this ClusterPolicyBinding, mapped by ClusterRoleBinding.Name
	RoleBindings NamedClusterRoleBindings `json:"roleBindings" protobuf:"bytes,4,rep,name=roleBindings"`
}

ClusterPolicyBinding is a object that holds all the ClusterRoleBindings for a particular namespace. There is one ClusterPolicyBinding document per referenced ClusterPolicy namespace

func (*ClusterPolicyBinding) Descriptor 

func (*ClusterPolicyBinding) Descriptor() ([]byte, []int)

func (*ClusterPolicyBinding) Marshal 

func (m *ClusterPolicyBinding) Marshal() (dAtA []byte, err error)

func (*ClusterPolicyBinding) MarshalTo 

func (m *ClusterPolicyBinding) MarshalTo(dAtA []byte) (int, error)

func (*ClusterPolicyBinding) ProtoMessage 

func (*ClusterPolicyBinding) ProtoMessage()

func (*ClusterPolicyBinding) Reset 

func (m *ClusterPolicyBinding) Reset()

func (*ClusterPolicyBinding) Size 

func (m *ClusterPolicyBinding) Size() (n int)

func (*ClusterPolicyBinding) String 

func (this *ClusterPolicyBinding) String() string

func (ClusterPolicyBinding) SwaggerDoc 

func (ClusterPolicyBinding) SwaggerDoc() map[string]string

func (*ClusterPolicyBinding) Unmarshal 

func (m *ClusterPolicyBinding) Unmarshal(dAtA []byte) error

type ClusterPolicyBindingList 

type ClusterPolicyBindingList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of ClusterPolicyBindings
	Items []ClusterPolicyBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterPolicyBindingList is a collection of ClusterPolicyBindings

func (*ClusterPolicyBindingList) Descriptor 

func (*ClusterPolicyBindingList) Descriptor() ([]byte, []int)

func (*ClusterPolicyBindingList) Marshal 

func (m *ClusterPolicyBindingList) Marshal() (dAtA []byte, err error)

func (*ClusterPolicyBindingList) MarshalTo 

func (m *ClusterPolicyBindingList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterPolicyBindingList) ProtoMessage 

func (*ClusterPolicyBindingList) ProtoMessage()

func (*ClusterPolicyBindingList) Reset 

func (m *ClusterPolicyBindingList) Reset()

func (*ClusterPolicyBindingList) Size 

func (m *ClusterPolicyBindingList) Size() (n int)

func (*ClusterPolicyBindingList) String 

func (this *ClusterPolicyBindingList) String() string

func (ClusterPolicyBindingList) SwaggerDoc 

func (ClusterPolicyBindingList) SwaggerDoc() map[string]string

func (*ClusterPolicyBindingList) Unmarshal 

func (m *ClusterPolicyBindingList) Unmarshal(dAtA []byte) error

type ClusterPolicyList 

type ClusterPolicyList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of ClusterPolicies
	Items []ClusterPolicy `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterPolicyList is a collection of ClusterPolicies

func (*ClusterPolicyList) DecodeNestedObjects 

func (c *ClusterPolicyList) DecodeNestedObjects(d runtime.Decoder) error

func (*ClusterPolicyList) Descriptor 

func (*ClusterPolicyList) Descriptor() ([]byte, []int)

func (*ClusterPolicyList) EncodeNestedObjects 

func (c *ClusterPolicyList) EncodeNestedObjects(e runtime.Encoder) error

func (*ClusterPolicyList) Marshal 

func (m *ClusterPolicyList) Marshal() (dAtA []byte, err error)

func (*ClusterPolicyList) MarshalTo 

func (m *ClusterPolicyList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterPolicyList) ProtoMessage 

func (*ClusterPolicyList) ProtoMessage()

func (*ClusterPolicyList) Reset 

func (m *ClusterPolicyList) Reset()

func (*ClusterPolicyList) Size 

func (m *ClusterPolicyList) Size() (n int)

func (*ClusterPolicyList) String 

func (this *ClusterPolicyList) String() string

func (ClusterPolicyList) SwaggerDoc 

func (ClusterPolicyList) SwaggerDoc() map[string]string

func (*ClusterPolicyList) Unmarshal 

func (m *ClusterPolicyList) Unmarshal(dAtA []byte) error

type ClusterRole 

type ClusterRole struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Rules holds all the PolicyRules for this ClusterRole
	Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
}

ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.

func (*ClusterRole) DecodeNestedObjects 

func (c *ClusterRole) DecodeNestedObjects(d runtime.Decoder) error

func (*ClusterRole) Descriptor 

func (*ClusterRole) Descriptor() ([]byte, []int)

func (*ClusterRole) EncodeNestedObjects 

func (c *ClusterRole) EncodeNestedObjects(e runtime.Encoder) error

func (*ClusterRole) Marshal 

func (m *ClusterRole) Marshal() (dAtA []byte, err error)

func (*ClusterRole) MarshalTo 

func (m *ClusterRole) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRole) ProtoMessage 

func (*ClusterRole) ProtoMessage()

func (*ClusterRole) Reset 

func (m *ClusterRole) Reset()

func (*ClusterRole) Size 

func (m *ClusterRole) Size() (n int)

func (*ClusterRole) String 

func (this *ClusterRole) String() string

func (ClusterRole) SwaggerDoc 

func (ClusterRole) SwaggerDoc() map[string]string

func (*ClusterRole) Unmarshal 

func (m *ClusterRole) Unmarshal(dAtA []byte) error

type ClusterRoleBinding 

type ClusterRoleBinding struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// UserNames holds all the usernames directly bound to the role.
	// This field should only be specified when supporting legacy clients and servers.
	// See Subjects for further details.
	// +k8s:conversion-gen=false
	UserNames OptionalNames `json:"userNames" protobuf:"bytes,2,rep,name=userNames"`
	// GroupNames holds all the groups directly bound to the role.
	// This field should only be specified when supporting legacy clients and servers.
	// See Subjects for further details.
	// +k8s:conversion-gen=false
	GroupNames OptionalNames `json:"groupNames" protobuf:"bytes,3,rep,name=groupNames"`
	// Subjects hold object references to authorize with this rule.
	// This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers.
	// Thus newer clients that do not need to support backwards compatibility should send
	// only fully qualified Subjects and should omit the UserNames and GroupNames fields.
	// Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.
	Subjects []kapi.ObjectReference `json:"subjects" protobuf:"bytes,4,rep,name=subjects"`

	// RoleRef can only reference the current namespace and the global namespace.
	// If the ClusterRoleRef cannot be resolved, the Authorizer must return an error.
	// Since Policy is a singleton, this is sufficient knowledge to locate a role.
	RoleRef kapi.ObjectReference `json:"roleRef" protobuf:"bytes,5,opt,name=roleRef"`
}

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. ClusterRoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).

func (*ClusterRoleBinding) Descriptor 

func (*ClusterRoleBinding) Descriptor() ([]byte, []int)

func (*ClusterRoleBinding) Marshal 

func (m *ClusterRoleBinding) Marshal() (dAtA []byte, err error)

func (*ClusterRoleBinding) MarshalTo 

func (m *ClusterRoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleBinding) ProtoMessage 

func (*ClusterRoleBinding) ProtoMessage()

func (*ClusterRoleBinding) Reset 

func (m *ClusterRoleBinding) Reset()

func (*ClusterRoleBinding) Size 

func (m *ClusterRoleBinding) Size() (n int)

func (*ClusterRoleBinding) String 

func (this *ClusterRoleBinding) String() string

func (ClusterRoleBinding) SwaggerDoc 

func (ClusterRoleBinding) SwaggerDoc() map[string]string

func (*ClusterRoleBinding) Unmarshal 

func (m *ClusterRoleBinding) Unmarshal(dAtA []byte) error

type ClusterRoleBindingList 

type ClusterRoleBindingList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of ClusterRoleBindings
	Items []ClusterRoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterRoleBindingList is a collection of ClusterRoleBindings

func (*ClusterRoleBindingList) Descriptor 

func (*ClusterRoleBindingList) Descriptor() ([]byte, []int)

func (*ClusterRoleBindingList) Marshal 

func (m *ClusterRoleBindingList) Marshal() (dAtA []byte, err error)

func (*ClusterRoleBindingList) MarshalTo 

func (m *ClusterRoleBindingList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleBindingList) ProtoMessage 

func (*ClusterRoleBindingList) ProtoMessage()

func (*ClusterRoleBindingList) Reset 

func (m *ClusterRoleBindingList) Reset()

func (*ClusterRoleBindingList) Size 

func (m *ClusterRoleBindingList) Size() (n int)

func (*ClusterRoleBindingList) String 

func (this *ClusterRoleBindingList) String() string

func (ClusterRoleBindingList) SwaggerDoc 

func (ClusterRoleBindingList) SwaggerDoc() map[string]string

func (*ClusterRoleBindingList) Unmarshal 

func (m *ClusterRoleBindingList) Unmarshal(dAtA []byte) error

type ClusterRoleList 

type ClusterRoleList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of ClusterRoles
	Items []ClusterRole `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterRoleList is a collection of ClusterRoles

func (*ClusterRoleList) DecodeNestedObjects 

func (c *ClusterRoleList) DecodeNestedObjects(d runtime.Decoder) error

func (*ClusterRoleList) Descriptor 

func (*ClusterRoleList) Descriptor() ([]byte, []int)

func (*ClusterRoleList) EncodeNestedObjects 

func (c *ClusterRoleList) EncodeNestedObjects(e runtime.Encoder) error

func (*ClusterRoleList) Marshal 

func (m *ClusterRoleList) Marshal() (dAtA []byte, err error)

func (*ClusterRoleList) MarshalTo 

func (m *ClusterRoleList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleList) ProtoMessage 

func (*ClusterRoleList) ProtoMessage()

func (*ClusterRoleList) Reset 

func (m *ClusterRoleList) Reset()

func (*ClusterRoleList) Size 

func (m *ClusterRoleList) Size() (n int)

func (*ClusterRoleList) String 

func (this *ClusterRoleList) String() string

func (ClusterRoleList) SwaggerDoc 

func (ClusterRoleList) SwaggerDoc() map[string]string

func (*ClusterRoleList) Unmarshal 

func (m *ClusterRoleList) Unmarshal(dAtA []byte) error

type GroupRestriction 

type GroupRestriction struct {
	// Groups is a list of groups used to match against an individual user's
	// groups. If the user is a member of one of the whitelisted groups, the user
	// is allowed to be bound to a role.
	Groups []string `json:"groups" protobuf:"bytes,1,rep,name=groups"`

	// Selectors specifies a list of label selectors over group labels.
	Selectors []metav1.LabelSelector `json:"labels" protobuf:"bytes,2,rep,name=labels"`
}

GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.

func (*GroupRestriction) Descriptor 

func (*GroupRestriction) Descriptor() ([]byte, []int)

func (*GroupRestriction) Marshal 

func (m *GroupRestriction) Marshal() (dAtA []byte, err error)

func (*GroupRestriction) MarshalTo 

func (m *GroupRestriction) MarshalTo(dAtA []byte) (int, error)

func (*GroupRestriction) ProtoMessage 

func (*GroupRestriction) ProtoMessage()

func (*GroupRestriction) Reset 

func (m *GroupRestriction) Reset()

func (*GroupRestriction) Size 

func (m *GroupRestriction) Size() (n int)

func (*GroupRestriction) String 

func (this *GroupRestriction) String() string

func (GroupRestriction) SwaggerDoc 

func (GroupRestriction) SwaggerDoc() map[string]string

func (*GroupRestriction) Unmarshal 

func (m *GroupRestriction) Unmarshal(dAtA []byte) error

type IsPersonalSubjectAccessReview 

type IsPersonalSubjectAccessReview struct {
	metav1.TypeMeta `json:",inline"`
}

IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed

func (*IsPersonalSubjectAccessReview) Descriptor 

func (*IsPersonalSubjectAccessReview) Descriptor() ([]byte, []int)

func (*IsPersonalSubjectAccessReview) Marshal 

func (m *IsPersonalSubjectAccessReview) Marshal() (dAtA []byte, err error)

func (*IsPersonalSubjectAccessReview) MarshalTo 

func (m *IsPersonalSubjectAccessReview) MarshalTo(dAtA []byte) (int, error)

func (*IsPersonalSubjectAccessReview) ProtoMessage 

func (*IsPersonalSubjectAccessReview) ProtoMessage()

func (*IsPersonalSubjectAccessReview) Reset 

func (m *IsPersonalSubjectAccessReview) Reset()

func (*IsPersonalSubjectAccessReview) Size 

func (m *IsPersonalSubjectAccessReview) Size() (n int)

func (*IsPersonalSubjectAccessReview) String 

func (this *IsPersonalSubjectAccessReview) String() string

func (IsPersonalSubjectAccessReview) SwaggerDoc 

func (IsPersonalSubjectAccessReview) SwaggerDoc() map[string]string

func (*IsPersonalSubjectAccessReview) Unmarshal 

func (m *IsPersonalSubjectAccessReview) Unmarshal(dAtA []byte) error

type LocalResourceAccessReview 

type LocalResourceAccessReview struct {
	metav1.TypeMeta `json:",inline"`

	// Action describes the action being tested.  The Namespace element is FORCED to the current namespace.
	Action `json:",inline" protobuf:"bytes,1,opt,name=Action"`
}

LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace

func (*LocalResourceAccessReview) Descriptor 

func (*LocalResourceAccessReview) Descriptor() ([]byte, []int)

func (*LocalResourceAccessReview) Marshal 

func (m *LocalResourceAccessReview) Marshal() (dAtA []byte, err error)

func (*LocalResourceAccessReview) MarshalTo 

func (m *LocalResourceAccessReview) MarshalTo(dAtA []byte) (int, error)

func (*LocalResourceAccessReview) ProtoMessage 

func (*LocalResourceAccessReview) ProtoMessage()

func (*LocalResourceAccessReview) Reset 

func (m *LocalResourceAccessReview) Reset()

func (*LocalResourceAccessReview) Size 

func (m *LocalResourceAccessReview) Size() (n int)

func (*LocalResourceAccessReview) String 

func (this *LocalResourceAccessReview) String() string

func (LocalResourceAccessReview) SwaggerDoc 

func (LocalResourceAccessReview) SwaggerDoc() map[string]string

func (*LocalResourceAccessReview) Unmarshal 

func (m *LocalResourceAccessReview) Unmarshal(dAtA []byte) error

type LocalSubjectAccessReview 

type LocalSubjectAccessReview struct {
	metav1.TypeMeta `json:",inline"`

	// Action describes the action being tested.  The Namespace element is FORCED to the current namespace.
	Action `json:",inline" protobuf:"bytes,1,opt,name=Action"`
	// User is optional.  If both User and Groups are empty, the current authenticated user is used.
	User string `json:"user" protobuf:"bytes,2,opt,name=user"`
	// Groups is optional.  Groups is the list of groups to which the User belongs.
	// +k8s:conversion-gen=false
	GroupsSlice []string `json:"groups" protobuf:"bytes,3,rep,name=groups"`
	// Scopes to use for the evaluation.  Empty means "use the unscoped (full) permissions of the user/groups".
	// Nil for a self-SAR, means "use the scopes on this request".
	// Nil for a regular SAR, means the same as empty.
	// +k8s:conversion-gen=false
	Scopes OptionalScopes `json:"scopes" protobuf:"bytes,4,rep,name=scopes"`
}

LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace

func (*LocalSubjectAccessReview) Descriptor 

func (*LocalSubjectAccessReview) Descriptor() ([]byte, []int)

func (*LocalSubjectAccessReview) Marshal 

func (m *LocalSubjectAccessReview) Marshal() (dAtA []byte, err error)

func (*LocalSubjectAccessReview) MarshalTo 

func (m *LocalSubjectAccessReview) MarshalTo(dAtA []byte) (int, error)

func (*LocalSubjectAccessReview) ProtoMessage 

func (*LocalSubjectAccessReview) ProtoMessage()

func (*LocalSubjectAccessReview) Reset 

func (m *LocalSubjectAccessReview) Reset()

func (*LocalSubjectAccessReview) Size 

func (m *LocalSubjectAccessReview) Size() (n int)

func (*LocalSubjectAccessReview) String 

func (this *LocalSubjectAccessReview) String() string

func (LocalSubjectAccessReview) SwaggerDoc 

func (LocalSubjectAccessReview) SwaggerDoc() map[string]string

func (*LocalSubjectAccessReview) Unmarshal 

func (m *LocalSubjectAccessReview) Unmarshal(dAtA []byte) error

type NamedClusterRole 

type NamedClusterRole struct {
	// Name is the name of the cluster role
	Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
	// Role is the cluster role being named
	Role ClusterRole `json:"role" protobuf:"bytes,2,opt,name=role"`
}

NamedClusterRole relates a name with a cluster role

func (*NamedClusterRole) Descriptor 

func (*NamedClusterRole) Descriptor() ([]byte, []int)

func (*NamedClusterRole) Marshal 

func (m *NamedClusterRole) Marshal() (dAtA []byte, err error)

func (*NamedClusterRole) MarshalTo 

func (m *NamedClusterRole) MarshalTo(dAtA []byte) (int, error)

func (*NamedClusterRole) ProtoMessage 

func (*NamedClusterRole) ProtoMessage()

func (*NamedClusterRole) Reset 

func (m *NamedClusterRole) Reset()

func (*NamedClusterRole) Size 

func (m *NamedClusterRole) Size() (n int)

func (*NamedClusterRole) String 

func (this *NamedClusterRole) String() string

func (NamedClusterRole) SwaggerDoc 

func (NamedClusterRole) SwaggerDoc() map[string]string

func (*NamedClusterRole) Unmarshal 

func (m *NamedClusterRole) Unmarshal(dAtA []byte) error

type NamedClusterRoleBinding 

type NamedClusterRoleBinding struct {
	// Name is the name of the cluster role binding
	Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
	// RoleBinding is the cluster role binding being named
	RoleBinding ClusterRoleBinding `json:"roleBinding" protobuf:"bytes,2,opt,name=roleBinding"`
}

NamedClusterRoleBinding relates a name with a cluster role binding

func (*NamedClusterRoleBinding) Descriptor 

func (*NamedClusterRoleBinding) Descriptor() ([]byte, []int)

func (*NamedClusterRoleBinding) Marshal 

func (m *NamedClusterRoleBinding) Marshal() (dAtA []byte, err error)

func (*NamedClusterRoleBinding) MarshalTo 

func (m *NamedClusterRoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*NamedClusterRoleBinding) ProtoMessage 

func (*NamedClusterRoleBinding) ProtoMessage()

func (*NamedClusterRoleBinding) Reset 

func (m *NamedClusterRoleBinding) Reset()

func (*NamedClusterRoleBinding) Size 

func (m *NamedClusterRoleBinding) Size() (n int)

func (*NamedClusterRoleBinding) String 

func (this *NamedClusterRoleBinding) String() string

func (NamedClusterRoleBinding) SwaggerDoc 

func (NamedClusterRoleBinding) SwaggerDoc() map[string]string

func (*NamedClusterRoleBinding) Unmarshal 

func (m *NamedClusterRoleBinding) Unmarshal(dAtA []byte) error

type NamedClusterRoleBindings 

type NamedClusterRoleBindings []NamedClusterRoleBinding

type NamedClusterRoles 

type NamedClusterRoles []NamedClusterRole

type NamedRole 

type NamedRole struct {
	// Name is the name of the role
	Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
	// Role is the role being named
	Role Role `json:"role" protobuf:"bytes,2,opt,name=role"`
}

NamedRole relates a Role with a name

func (*NamedRole) Descriptor 

func (*NamedRole) Descriptor() ([]byte, []int)

func (*NamedRole) Marshal 

func (m *NamedRole) Marshal() (dAtA []byte, err error)

func (*NamedRole) MarshalTo 

func (m *NamedRole) MarshalTo(dAtA []byte) (int, error)

func (*NamedRole) ProtoMessage 

func (*NamedRole) ProtoMessage()

func (*NamedRole) Reset 

func (m *NamedRole) Reset()

func (*NamedRole) Size 

func (m *NamedRole) Size() (n int)

func (*NamedRole) String 

func (this *NamedRole) String() string

func (NamedRole) SwaggerDoc 

func (NamedRole) SwaggerDoc() map[string]string

func (*NamedRole) Unmarshal 

func (m *NamedRole) Unmarshal(dAtA []byte) error

type NamedRoleBinding 

type NamedRoleBinding struct {
	// Name is the name of the role binding
	Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
	// RoleBinding is the role binding being named
	RoleBinding RoleBinding `json:"roleBinding" protobuf:"bytes,2,opt,name=roleBinding"`
}

NamedRoleBinding relates a role binding with a name

func (*NamedRoleBinding) Descriptor 

func (*NamedRoleBinding) Descriptor() ([]byte, []int)

func (*NamedRoleBinding) Marshal 

func (m *NamedRoleBinding) Marshal() (dAtA []byte, err error)

func (*NamedRoleBinding) MarshalTo 

func (m *NamedRoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*NamedRoleBinding) ProtoMessage 

func (*NamedRoleBinding) ProtoMessage()

func (*NamedRoleBinding) Reset 

func (m *NamedRoleBinding) Reset()

func (*NamedRoleBinding) Size 

func (m *NamedRoleBinding) Size() (n int)

func (*NamedRoleBinding) String 

func (this *NamedRoleBinding) String() string

func (NamedRoleBinding) SwaggerDoc 

func (NamedRoleBinding) SwaggerDoc() map[string]string

func (*NamedRoleBinding) Unmarshal 

func (m *NamedRoleBinding) Unmarshal(dAtA []byte) error

type NamedRoleBindings 

type NamedRoleBindings []NamedRoleBinding

type NamedRoles 

type NamedRoles []NamedRole

type OptionalNames 

type OptionalNames []string

OptionalNames is an array that may also be left nil to distinguish between set and unset. +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false

func (*OptionalNames) Descriptor 

func (*OptionalNames) Descriptor() ([]byte, []int)

func (OptionalNames) Marshal 

func (m OptionalNames) Marshal() (dAtA []byte, err error)

func (OptionalNames) MarshalTo 

func (m OptionalNames) MarshalTo(dAtA []byte) (int, error)

func (*OptionalNames) ProtoMessage 

func (*OptionalNames) ProtoMessage()

func (*OptionalNames) Reset 

func (m *OptionalNames) Reset()

func (OptionalNames) Size 

func (m OptionalNames) Size() (n int)

func (OptionalNames) String 

func (t OptionalNames) String() string

func (*OptionalNames) Unmarshal 

func (m *OptionalNames) Unmarshal(dAtA []byte) error

type OptionalScopes 

type OptionalScopes []string

OptionalScopes is an array that may also be left nil to distinguish between set and unset. +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false

func (*OptionalScopes) Descriptor 

func (*OptionalScopes) Descriptor() ([]byte, []int)

func (OptionalScopes) Marshal 

func (m OptionalScopes) Marshal() (dAtA []byte, err error)

func (OptionalScopes) MarshalTo 

func (m OptionalScopes) MarshalTo(dAtA []byte) (int, error)

func (*OptionalScopes) ProtoMessage 

func (*OptionalScopes) ProtoMessage()

func (*OptionalScopes) Reset 

func (m *OptionalScopes) Reset()

func (OptionalScopes) Size 

func (m OptionalScopes) Size() (n int)

func (OptionalScopes) String 

func (t OptionalScopes) String() string

func (*OptionalScopes) Unmarshal 

func (m *OptionalScopes) Unmarshal(dAtA []byte) error

type Policy 

type Policy struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// LastModified is the last time that any part of the Policy was created, updated, or deleted
	LastModified metav1.Time `json:"lastModified" protobuf:"bytes,2,opt,name=lastModified"`

	// Roles holds all the Roles held by this Policy, mapped by Role.Name
	Roles NamedRoles `json:"roles" protobuf:"bytes,3,rep,name=roles"`
}

Policy is a object that holds all the Roles for a particular namespace. There is at most one Policy document per namespace.

func (*Policy) DecodeNestedObjects 

func (c *Policy) DecodeNestedObjects(d runtime.Decoder) error

func (*Policy) Descriptor 

func (*Policy) Descriptor() ([]byte, []int)

func (*Policy) EncodeNestedObjects 

func (c *Policy) EncodeNestedObjects(e runtime.Encoder) error

func (*Policy) Marshal 

func (m *Policy) Marshal() (dAtA []byte, err error)

func (*Policy) MarshalTo 

func (m *Policy) MarshalTo(dAtA []byte) (int, error)

func (*Policy) ProtoMessage 

func (*Policy) ProtoMessage()

func (*Policy) Reset 

func (m *Policy) Reset()

func (*Policy) Size 

func (m *Policy) Size() (n int)

func (*Policy) String 

func (this *Policy) String() string

func (Policy) SwaggerDoc 

func (Policy) SwaggerDoc() map[string]string

func (*Policy) Unmarshal 

func (m *Policy) Unmarshal(dAtA []byte) error

type PolicyBinding 

type PolicyBinding struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// LastModified is the last time that any part of the PolicyBinding was created, updated, or deleted
	LastModified metav1.Time `json:"lastModified" protobuf:"bytes,2,opt,name=lastModified"`

	// PolicyRef is a reference to the Policy that contains all the Roles that this PolicyBinding's RoleBindings may reference
	PolicyRef kapi.ObjectReference `json:"policyRef" protobuf:"bytes,3,opt,name=policyRef"`
	// RoleBindings holds all the RoleBindings held by this PolicyBinding, mapped by RoleBinding.Name
	RoleBindings NamedRoleBindings `json:"roleBindings" protobuf:"bytes,4,rep,name=roleBindings"`
}

PolicyBinding is a object that holds all the RoleBindings for a particular namespace. There is one PolicyBinding document per referenced Policy namespace

func (*PolicyBinding) Descriptor 

func (*PolicyBinding) Descriptor() ([]byte, []int)

func (*PolicyBinding) Marshal 

func (m *PolicyBinding) Marshal() (dAtA []byte, err error)

func (*PolicyBinding) MarshalTo 

func (m *PolicyBinding) MarshalTo(dAtA []byte) (int, error)

func (*PolicyBinding) ProtoMessage 

func (*PolicyBinding) ProtoMessage()

func (*PolicyBinding) Reset 

func (m *PolicyBinding) Reset()

func (*PolicyBinding) Size 

func (m *PolicyBinding) Size() (n int)

func (*PolicyBinding) String 

func (this *PolicyBinding) String() string

func (PolicyBinding) SwaggerDoc 

func (PolicyBinding) SwaggerDoc() map[string]string

func (*PolicyBinding) Unmarshal 

func (m *PolicyBinding) Unmarshal(dAtA []byte) error

type PolicyBindingList 

type PolicyBindingList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of PolicyBindings
	Items []PolicyBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}

PolicyBindingList is a collection of PolicyBindings

func (*PolicyBindingList) Descriptor 

func (*PolicyBindingList) Descriptor() ([]byte, []int)

func (*PolicyBindingList) Marshal 

func (m *PolicyBindingList) Marshal() (dAtA []byte, err error)

func (*PolicyBindingList) MarshalTo 

func (m *PolicyBindingList) MarshalTo(dAtA []byte) (int, error)

func (*PolicyBindingList) ProtoMessage 

func (*PolicyBindingList) ProtoMessage()

func (*PolicyBindingList) Reset 

func (m *PolicyBindingList) Reset()

func (*PolicyBindingList) Size 

func (m *PolicyBindingList) Size() (n int)

func (*PolicyBindingList) String 

func (this *PolicyBindingList) String() string

func (PolicyBindingList) SwaggerDoc 

func (PolicyBindingList) SwaggerDoc() map[string]string

func (*PolicyBindingList) Unmarshal 

func (m *PolicyBindingList) Unmarshal(dAtA []byte) error

type PolicyList 

type PolicyList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of Policies
	Items []Policy `json:"items" protobuf:"bytes,2,rep,name=items"`
}

PolicyList is a collection of Policies

func (*PolicyList) DecodeNestedObjects 

func (c *PolicyList) DecodeNestedObjects(d runtime.Decoder) error

func (*PolicyList) Descriptor 

func (*PolicyList) Descriptor() ([]byte, []int)

func (*PolicyList) EncodeNestedObjects 

func (c *PolicyList) EncodeNestedObjects(e runtime.Encoder) error

func (*PolicyList) Marshal 

func (m *PolicyList) Marshal() (dAtA []byte, err error)

func (*PolicyList) MarshalTo 

func (m *PolicyList) MarshalTo(dAtA []byte) (int, error)

func (*PolicyList) ProtoMessage 

func (*PolicyList) ProtoMessage()

func (*PolicyList) Reset 

func (m *PolicyList) Reset()

func (*PolicyList) Size 

func (m *PolicyList) Size() (n int)

func (*PolicyList) String 

func (this *PolicyList) String() string

func (PolicyList) SwaggerDoc 

func (PolicyList) SwaggerDoc() map[string]string

func (*PolicyList) Unmarshal 

func (m *PolicyList) Unmarshal(dAtA []byte) error

type PolicyRule 

type PolicyRule struct {
	// Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule.  VerbAll represents all kinds.
	Verbs []string `json:"verbs" protobuf:"bytes,1,rep,name=verbs"`
	// AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports.
	// If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.
	AttributeRestrictions kruntime.RawExtension `json:"attributeRestrictions,omitempty" protobuf:"bytes,2,opt,name=attributeRestrictions"`
	// APIGroups is the name of the APIGroup that contains the resources.  If this field is empty, then both kubernetes and origin API groups are assumed.
	// That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request
	// will be allowed
	APIGroups []string `json:"apiGroups" protobuf:"bytes,3,rep,name=apiGroups"`
	// Resources is a list of resources this rule applies to.  ResourceAll represents all resources.
	Resources []string `json:"resources" protobuf:"bytes,4,rep,name=resources"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
	ResourceNames []string `json:"resourceNames,omitempty" protobuf:"bytes,5,rep,name=resourceNames"`
	// NonResourceURLsSlice is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path
	// This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.
	NonResourceURLsSlice []string `json:"nonResourceURLs,omitempty" protobuf:"bytes,6,rep,name=nonResourceURLs"`
}

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

func (*PolicyRule) DecodeNestedObjects 

func (c *PolicyRule) DecodeNestedObjects(d runtime.Decoder) error

func (*PolicyRule) Descriptor 

func (*PolicyRule) Descriptor() ([]byte, []int)

func (*PolicyRule) EncodeNestedObjects 

func (c *PolicyRule) EncodeNestedObjects(e runtime.Encoder) error

func (*PolicyRule) Marshal 

func (m *PolicyRule) Marshal() (dAtA []byte, err error)

func (*PolicyRule) MarshalTo 

func (m *PolicyRule) MarshalTo(dAtA []byte) (int, error)

func (*PolicyRule) ProtoMessage 

func (*PolicyRule) ProtoMessage()

func (*PolicyRule) Reset 

func (m *PolicyRule) Reset()

func (*PolicyRule) Size 

func (m *PolicyRule) Size() (n int)

func (*PolicyRule) String 

func (this *PolicyRule) String() string

func (PolicyRule) SwaggerDoc 

func (PolicyRule) SwaggerDoc() map[string]string

func (*PolicyRule) Unmarshal 

func (m *PolicyRule) Unmarshal(dAtA []byte) error

type ResourceAccessReview 

type ResourceAccessReview struct {
	metav1.TypeMeta `json:",inline"`

	// Action describes the action being tested.
	Action `json:",inline" protobuf:"bytes,1,opt,name=Action"`
}

ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec

func (*ResourceAccessReview) Descriptor 

func (*ResourceAccessReview) Descriptor() ([]byte, []int)

func (*ResourceAccessReview) Marshal 

func (m *ResourceAccessReview) Marshal() (dAtA []byte, err error)

func (*ResourceAccessReview) MarshalTo 

func (m *ResourceAccessReview) MarshalTo(dAtA []byte) (int, error)

func (*ResourceAccessReview) ProtoMessage 

func (*ResourceAccessReview) ProtoMessage()

func (*ResourceAccessReview) Reset 

func (m *ResourceAccessReview) Reset()

func (*ResourceAccessReview) Size 

func (m *ResourceAccessReview) Size() (n int)

func (*ResourceAccessReview) String 

func (this *ResourceAccessReview) String() string

func (ResourceAccessReview) SwaggerDoc 

func (ResourceAccessReview) SwaggerDoc() map[string]string

func (*ResourceAccessReview) Unmarshal 

func (m *ResourceAccessReview) Unmarshal(dAtA []byte) error

type ResourceAccessReviewResponse 

type ResourceAccessReviewResponse struct {
	metav1.TypeMeta `json:",inline"`

	// Namespace is the namespace used for the access review
	Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`
	// UsersSlice is the list of users who can perform the action
	// +k8s:conversion-gen=false
	UsersSlice []string `json:"users" protobuf:"bytes,2,rep,name=users"`
	// GroupsSlice is the list of groups who can perform the action
	// +k8s:conversion-gen=false
	GroupsSlice []string `json:"groups" protobuf:"bytes,3,rep,name=groups"`

	// EvaluationError is an indication that some error occurred during resolution, but partial results can still be returned.
	// It is entirely possible to get an error and be able to continue determine authorization status in spite of it.  This is
	// most common when a bound role is missing, but enough roles are still present and bound to reason about the request.
	EvaluationError string `json:"evalutionError" protobuf:"bytes,4,opt,name=evalutionError"`
}

ResourceAccessReviewResponse describes who can perform the action

func (*ResourceAccessReviewResponse) Descriptor 

func (*ResourceAccessReviewResponse) Descriptor() ([]byte, []int)

func (*ResourceAccessReviewResponse) Marshal 

func (m *ResourceAccessReviewResponse) Marshal() (dAtA []byte, err error)

func (*ResourceAccessReviewResponse) MarshalTo 

func (m *ResourceAccessReviewResponse) MarshalTo(dAtA []byte) (int, error)

func (*ResourceAccessReviewResponse) ProtoMessage 

func (*ResourceAccessReviewResponse) ProtoMessage()

func (*ResourceAccessReviewResponse) Reset 

func (m *ResourceAccessReviewResponse) Reset()

func (*ResourceAccessReviewResponse) Size 

func (m *ResourceAccessReviewResponse) Size() (n int)

func (*ResourceAccessReviewResponse) String 

func (this *ResourceAccessReviewResponse) String() string

func (ResourceAccessReviewResponse) SwaggerDoc 

func (ResourceAccessReviewResponse) SwaggerDoc() map[string]string

func (*ResourceAccessReviewResponse) Unmarshal 

func (m *ResourceAccessReviewResponse) Unmarshal(dAtA []byte) error

type Role 

type Role struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Rules holds all the PolicyRules for this Role
	Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
}

Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.

func (*Role) DecodeNestedObjects 

func (c *Role) DecodeNestedObjects(d runtime.Decoder) error

func (*Role) Descriptor 

func (*Role) Descriptor() ([]byte, []int)

func (*Role) EncodeNestedObjects 

func (c *Role) EncodeNestedObjects(e runtime.Encoder) error

func (*Role) Marshal 

func (m *Role) Marshal() (dAtA []byte, err error)

func (*Role) MarshalTo 

func (m *Role) MarshalTo(dAtA []byte) (int, error)

func (*Role) ProtoMessage 

func (*Role) ProtoMessage()

func (*Role) Reset 

func (m *Role) Reset()

func (*Role) Size 

func (m *Role) Size() (n int)

func (*Role) String 

func (this *Role) String() string

func (Role) SwaggerDoc 

func (Role) SwaggerDoc() map[string]string

func (*Role) Unmarshal 

func (m *Role) Unmarshal(dAtA []byte) error

type RoleBinding 

type RoleBinding struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// UserNames holds all the usernames directly bound to the role.
	// This field should only be specified when supporting legacy clients and servers.
	// See Subjects for further details.
	// +k8s:conversion-gen=false
	UserNames OptionalNames `json:"userNames" protobuf:"bytes,2,rep,name=userNames"`
	// GroupNames holds all the groups directly bound to the role.
	// This field should only be specified when supporting legacy clients and servers.
	// See Subjects for further details.
	// +k8s:conversion-gen=false
	GroupNames OptionalNames `json:"groupNames" protobuf:"bytes,3,rep,name=groupNames"`
	// Subjects hold object references to authorize with this rule.
	// This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers.
	// Thus newer clients that do not need to support backwards compatibility should send
	// only fully qualified Subjects and should omit the UserNames and GroupNames fields.
	// Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.
	Subjects []kapi.ObjectReference `json:"subjects" protobuf:"bytes,4,rep,name=subjects"`

	// RoleRef can only reference the current namespace and the global namespace.
	// If the RoleRef cannot be resolved, the Authorizer must return an error.
	// Since Policy is a singleton, this is sufficient knowledge to locate a role.
	RoleRef kapi.ObjectReference `json:"roleRef" protobuf:"bytes,5,opt,name=roleRef"`
}

RoleBinding references a Role, but not contain it. It can reference any Role in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).

func (*RoleBinding) Descriptor 

func (*RoleBinding) Descriptor() ([]byte, []int)

func (*RoleBinding) Marshal 

func (m *RoleBinding) Marshal() (dAtA []byte, err error)

func (*RoleBinding) MarshalTo 

func (m *RoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*RoleBinding) ProtoMessage 

func (*RoleBinding) ProtoMessage()

func (*RoleBinding) Reset 

func (m *RoleBinding) Reset()

func (*RoleBinding) Size 

func (m *RoleBinding) Size() (n int)

func (*RoleBinding) String 

func (this *RoleBinding) String() string

func (RoleBinding) SwaggerDoc 

func (RoleBinding) SwaggerDoc() map[string]string

func (*RoleBinding) Unmarshal 

func (m *RoleBinding) Unmarshal(dAtA []byte) error

type RoleBindingList 

type RoleBindingList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of RoleBindings
	Items []RoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}

RoleBindingList is a collection of RoleBindings

func (*RoleBindingList) Descriptor 

func (*RoleBindingList) Descriptor() ([]byte, []int)

func (*RoleBindingList) Marshal 

func (m *RoleBindingList) Marshal() (dAtA []byte, err error)

func (*RoleBindingList) MarshalTo 

func (m *RoleBindingList) MarshalTo(dAtA []byte) (int, error)

func (*RoleBindingList) ProtoMessage 

func (*RoleBindingList) ProtoMessage()

func (*RoleBindingList) Reset 

func (m *RoleBindingList) Reset()

func (*RoleBindingList) Size 

func (m *RoleBindingList) Size() (n int)

func (*RoleBindingList) String 

func (this *RoleBindingList) String() string

func (RoleBindingList) SwaggerDoc 

func (RoleBindingList) SwaggerDoc() map[string]string

func (*RoleBindingList) Unmarshal 

func (m *RoleBindingList) Unmarshal(dAtA []byte) error

type RoleBindingRestriction 

type RoleBindingRestriction struct {
	metav1.TypeMeta `json:",inline"`

	// Standard object's metadata.
	metav1.ObjectMeta `json:"metadata" protobuf:"bytes,1,opt,name=metadata"`

	// Spec defines the matcher.
	Spec RoleBindingRestrictionSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`
}

RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs. If any one of those RoleBindingRestriction objects matches a subject, rolebindings on that subject in the namespace are allowed.

func (*RoleBindingRestriction) Descriptor 

func (*RoleBindingRestriction) Descriptor() ([]byte, []int)

func (*RoleBindingRestriction) Marshal 

func (m *RoleBindingRestriction) Marshal() (dAtA []byte, err error)

func (*RoleBindingRestriction) MarshalTo 

func (m *RoleBindingRestriction) MarshalTo(dAtA []byte) (int, error)

func (*RoleBindingRestriction) ProtoMessage 

func (*RoleBindingRestriction) ProtoMessage()

func (*RoleBindingRestriction) Reset 

func (m *RoleBindingRestriction) Reset()

func (*RoleBindingRestriction) Size 

func (m *RoleBindingRestriction) Size() (n int)

func (*RoleBindingRestriction) String 

func (this *RoleBindingRestriction) String() string

func (RoleBindingRestriction) SwaggerDoc 

func (RoleBindingRestriction) SwaggerDoc() map[string]string

func (*RoleBindingRestriction) Unmarshal 

func (m *RoleBindingRestriction) Unmarshal(dAtA []byte) error

type RoleBindingRestrictionList 

type RoleBindingRestrictionList struct {
	metav1.TypeMeta `json:",inline"`

	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of RoleBindingRestriction objects.
	Items []RoleBindingRestriction `json:"items" protobuf:"bytes,2,rep,name=items"`
}

RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.

func (*RoleBindingRestrictionList) Descriptor 

func (*RoleBindingRestrictionList) Descriptor() ([]byte, []int)

func (*RoleBindingRestrictionList) Marshal 

func (m *RoleBindingRestrictionList) Marshal() (dAtA []byte, err error)

func (*RoleBindingRestrictionList) MarshalTo 

func (m *RoleBindingRestrictionList) MarshalTo(dAtA []byte) (int, error)

func (*RoleBindingRestrictionList) ProtoMessage 

func (*RoleBindingRestrictionList) ProtoMessage()

func (*RoleBindingRestrictionList) Reset 

func (m *RoleBindingRestrictionList) Reset()

func (*RoleBindingRestrictionList) Size 

func (m *RoleBindingRestrictionList) Size() (n int)

func (*RoleBindingRestrictionList) String 

func (this *RoleBindingRestrictionList) String() string

func (RoleBindingRestrictionList) SwaggerDoc 

func (RoleBindingRestrictionList) SwaggerDoc() map[string]string

func (*RoleBindingRestrictionList) Unmarshal 

func (m *RoleBindingRestrictionList) Unmarshal(dAtA []byte) error

type RoleBindingRestrictionSpec 

type RoleBindingRestrictionSpec struct {
	// UserRestriction matches against user subjects.
	UserRestriction *UserRestriction `json:"userrestriction" protobuf:"bytes,1,opt,name=userrestriction"`

	// GroupRestriction matches against group subjects.
	GroupRestriction *GroupRestriction `json:"grouprestriction" protobuf:"bytes,2,opt,name=grouprestriction"`

	// ServiceAccountRestriction matches against service-account subjects.
	ServiceAccountRestriction *ServiceAccountRestriction `json:"serviceaccountrestriction" protobuf:"bytes,3,opt,name=serviceaccountrestriction"`
}

RoleBindingRestrictionSpec defines a rolebinding restriction. Exactly one field must be non-nil.

func (*RoleBindingRestrictionSpec) Descriptor 

func (*RoleBindingRestrictionSpec) Descriptor() ([]byte, []int)

func (*RoleBindingRestrictionSpec) Marshal 

func (m *RoleBindingRestrictionSpec) Marshal() (dAtA []byte, err error)

func (*RoleBindingRestrictionSpec) MarshalTo 

func (m *RoleBindingRestrictionSpec) MarshalTo(dAtA []byte) (int, error)

func (*RoleBindingRestrictionSpec) ProtoMessage 

func (*RoleBindingRestrictionSpec) ProtoMessage()

func (*RoleBindingRestrictionSpec) Reset 

func (m *RoleBindingRestrictionSpec) Reset()

func (*RoleBindingRestrictionSpec) Size 

func (m *RoleBindingRestrictionSpec) Size() (n int)

func (*RoleBindingRestrictionSpec) String 

func (this *RoleBindingRestrictionSpec) String() string

func (RoleBindingRestrictionSpec) SwaggerDoc 

func (RoleBindingRestrictionSpec) SwaggerDoc() map[string]string

func (*RoleBindingRestrictionSpec) Unmarshal 

func (m *RoleBindingRestrictionSpec) Unmarshal(dAtA []byte) error

type RoleList 

type RoleList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of Roles
	Items []Role `json:"items" protobuf:"bytes,2,rep,name=items"`
}

RoleList is a collection of Roles

func (*RoleList) DecodeNestedObjects 

func (c *RoleList) DecodeNestedObjects(d runtime.Decoder) error

func (*RoleList) Descriptor 

func (*RoleList) Descriptor() ([]byte, []int)

func (*RoleList) EncodeNestedObjects 

func (c *RoleList) EncodeNestedObjects(e runtime.Encoder) error

func (*RoleList) Marshal 

func (m *RoleList) Marshal() (dAtA []byte, err error)

func (*RoleList) MarshalTo 

func (m *RoleList) MarshalTo(dAtA []byte) (int, error)

func (*RoleList) ProtoMessage 

func (*RoleList) ProtoMessage()

func (*RoleList) Reset 

func (m *RoleList) Reset()

func (*RoleList) Size 

func (m *RoleList) Size() (n int)

func (*RoleList) String 

func (this *RoleList) String() string

func (RoleList) SwaggerDoc 

func (RoleList) SwaggerDoc() map[string]string

func (*RoleList) Unmarshal 

func (m *RoleList) Unmarshal(dAtA []byte) error

type SelfSubjectRulesReview 

type SelfSubjectRulesReview struct {
	metav1.TypeMeta `json:",inline"`

	// Spec adds information about how to conduct the check
	Spec SelfSubjectRulesReviewSpec `json:"spec" protobuf:"bytes,1,opt,name=spec"`

	// Status is completed by the server to tell which permissions you have
	Status SubjectRulesReviewStatus `json:"status,omitempty" protobuf:"bytes,2,opt,name=status"`
}

SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace

func (*SelfSubjectRulesReview) DecodeNestedObjects 

func (c *SelfSubjectRulesReview) DecodeNestedObjects(d runtime.Decoder) error

func (*SelfSubjectRulesReview) Descriptor 

func (*SelfSubjectRulesReview) Descriptor() ([]byte, []int)

func (*SelfSubjectRulesReview) EncodeNestedObjects 

func (c *SelfSubjectRulesReview) EncodeNestedObjects(e runtime.Encoder) error

func (*SelfSubjectRulesReview) Marshal 

func (m *SelfSubjectRulesReview) Marshal() (dAtA []byte, err error)

func (*SelfSubjectRulesReview) MarshalTo 

func (m *SelfSubjectRulesReview) MarshalTo(dAtA []byte) (int, error)

func (*SelfSubjectRulesReview) ProtoMessage 

func (*SelfSubjectRulesReview) ProtoMessage()

func (*SelfSubjectRulesReview) Reset 

func (m *SelfSubjectRulesReview) Reset()

func (*SelfSubjectRulesReview) Size 

func (m *SelfSubjectRulesReview) Size() (n int)

func (*SelfSubjectRulesReview) String 

func (this *SelfSubjectRulesReview) String() string

func (SelfSubjectRulesReview) SwaggerDoc 

func (SelfSubjectRulesReview) SwaggerDoc() map[string]string

func (*SelfSubjectRulesReview) Unmarshal 

func (m *SelfSubjectRulesReview) Unmarshal(dAtA []byte) error

type SelfSubjectRulesReviewSpec 

type SelfSubjectRulesReviewSpec struct {
	// Scopes to use for the evaluation.  Empty means "use the unscoped (full) permissions of the user/groups".
	// Nil means "use the scopes on this request".
	// +k8s:conversion-gen=false
	Scopes OptionalScopes `json:"scopes" protobuf:"bytes,1,rep,name=scopes"`
}

SelfSubjectRulesReviewSpec adds information about how to conduct the check

func (*SelfSubjectRulesReviewSpec) Descriptor 

func (*SelfSubjectRulesReviewSpec) Descriptor() ([]byte, []int)

func (*SelfSubjectRulesReviewSpec) Marshal 

func (m *SelfSubjectRulesReviewSpec) Marshal() (dAtA []byte, err error)

func (*SelfSubjectRulesReviewSpec) MarshalTo 

func (m *SelfSubjectRulesReviewSpec) MarshalTo(dAtA []byte) (int, error)

func (*SelfSubjectRulesReviewSpec) ProtoMessage 

func (*SelfSubjectRulesReviewSpec) ProtoMessage()

func (*SelfSubjectRulesReviewSpec) Reset 

func (m *SelfSubjectRulesReviewSpec) Reset()

func (*SelfSubjectRulesReviewSpec) Size 

func (m *SelfSubjectRulesReviewSpec) Size() (n int)

func (*SelfSubjectRulesReviewSpec) String 

func (this *SelfSubjectRulesReviewSpec) String() string

func (SelfSubjectRulesReviewSpec) SwaggerDoc 

func (SelfSubjectRulesReviewSpec) SwaggerDoc() map[string]string

func (*SelfSubjectRulesReviewSpec) Unmarshal 

func (m *SelfSubjectRulesReviewSpec) Unmarshal(dAtA []byte) error

type ServiceAccountReference 

type ServiceAccountReference struct {
	// Name is the name of the service account.
	Name string `json:"name" protobuf:"bytes,1,opt,name=name"`

	// Namespace is the namespace of the service account.  Service accounts from
	// inside the whitelisted namespaces are allowed to be bound to roles.  If
	// Namespace is empty, then the namespace of the RoleBindingRestriction in
	// which the ServiceAccountReference is embedded is used.
	Namespace string `json:"namespace" protobuf:"bytes,2,opt,name=namespace"`
}

ServiceAccountReference specifies a service account and namespace by their names.

func (*ServiceAccountReference) Descriptor 

func (*ServiceAccountReference) Descriptor() ([]byte, []int)

func (*ServiceAccountReference) Marshal 

func (m *ServiceAccountReference) Marshal() (dAtA []byte, err error)

func (*ServiceAccountReference) MarshalTo 

func (m *ServiceAccountReference) MarshalTo(dAtA []byte) (int, error)

func (*ServiceAccountReference) ProtoMessage 

func (*ServiceAccountReference) ProtoMessage()

func (*ServiceAccountReference) Reset 

func (m *ServiceAccountReference) Reset()

func (*ServiceAccountReference) Size 

func (m *ServiceAccountReference) Size() (n int)

func (*ServiceAccountReference) String 

func (this *ServiceAccountReference) String() string

func (ServiceAccountReference) SwaggerDoc 

func (ServiceAccountReference) SwaggerDoc() map[string]string

func (*ServiceAccountReference) Unmarshal 

func (m *ServiceAccountReference) Unmarshal(dAtA []byte) error

type ServiceAccountRestriction 

type ServiceAccountRestriction struct {
	// ServiceAccounts specifies a list of literal service-account names.
	ServiceAccounts []ServiceAccountReference `json:"serviceaccounts" protobuf:"bytes,1,rep,name=serviceaccounts"`

	// Namespaces specifies a list of literal namespace names.
	Namespaces []string `json:"namespaces" protobuf:"bytes,2,rep,name=namespaces"`
}

ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.

func (*ServiceAccountRestriction) Descriptor 

func (*ServiceAccountRestriction) Descriptor() ([]byte, []int)

func (*ServiceAccountRestriction) Marshal 

func (m *ServiceAccountRestriction) Marshal() (dAtA []byte, err error)

func (*ServiceAccountRestriction) MarshalTo 

func (m *ServiceAccountRestriction) MarshalTo(dAtA []byte) (int, error)

func (*ServiceAccountRestriction) ProtoMessage 

func (*ServiceAccountRestriction) ProtoMessage()

func (*ServiceAccountRestriction) Reset 

func (m *ServiceAccountRestriction) Reset()

func (*ServiceAccountRestriction) Size 

func (m *ServiceAccountRestriction) Size() (n int)

func (*ServiceAccountRestriction) String 

func (this *ServiceAccountRestriction) String() string

func (ServiceAccountRestriction) SwaggerDoc 

func (ServiceAccountRestriction) SwaggerDoc() map[string]string

func (*ServiceAccountRestriction) Unmarshal 

func (m *ServiceAccountRestriction) Unmarshal(dAtA []byte) error

type SubjectAccessReview 

type SubjectAccessReview struct {
	metav1.TypeMeta `json:",inline"`

	// Action describes the action being tested.
	Action `json:",inline" protobuf:"bytes,1,opt,name=Action"`
	// User is optional. If both User and Groups are empty, the current authenticated user is used.
	User string `json:"user" protobuf:"bytes,2,opt,name=user"`
	// GroupsSlice is optional. Groups is the list of groups to which the User belongs.
	// +k8s:conversion-gen=false
	GroupsSlice []string `json:"groups" protobuf:"bytes,3,rep,name=groups"`
	// Scopes to use for the evaluation.  Empty means "use the unscoped (full) permissions of the user/groups".
	// Nil for a self-SAR, means "use the scopes on this request".
	// Nil for a regular SAR, means the same as empty.
	// +k8s:conversion-gen=false
	Scopes OptionalScopes `json:"scopes" protobuf:"bytes,4,rep,name=scopes"`
}

SubjectAccessReview is an object for requesting information about whether a user or group can perform an action

func (*SubjectAccessReview) Descriptor 

func (*SubjectAccessReview) Descriptor() ([]byte, []int)

func (*SubjectAccessReview) Marshal 

func (m *SubjectAccessReview) Marshal() (dAtA []byte, err error)

func (*SubjectAccessReview) MarshalTo 

func (m *SubjectAccessReview) MarshalTo(dAtA []byte) (int, error)

func (*SubjectAccessReview) ProtoMessage 

func (*SubjectAccessReview) ProtoMessage()

func (*SubjectAccessReview) Reset 

func (m *SubjectAccessReview) Reset()

func (*SubjectAccessReview) Size 

func (m *SubjectAccessReview) Size() (n int)

func (*SubjectAccessReview) String 

func (this *SubjectAccessReview) String() string

func (SubjectAccessReview) SwaggerDoc 

func (SubjectAccessReview) SwaggerDoc() map[string]string

func (*SubjectAccessReview) Unmarshal 

func (m *SubjectAccessReview) Unmarshal(dAtA []byte) error

type SubjectAccessReviewResponse 

type SubjectAccessReviewResponse struct {
	metav1.TypeMeta `json:",inline"`

	// Namespace is the namespace used for the access review
	Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`
	// Allowed is required.  True if the action would be allowed, false otherwise.
	Allowed bool `json:"allowed" protobuf:"varint,2,opt,name=allowed"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason string `json:"reason,omitempty" protobuf:"bytes,3,opt,name=reason"`
	// EvaluationError is an indication that some error occurred during the authorization check.
	// It is entirely possible to get an error and be able to continue determine authorization status in spite of it.  This is
	// most common when a bound role is missing, but enough roles are still present and bound to reason about the request.
	EvaluationError string `json:"evaluationError,omitempty" protobuf:"bytes,4,opt,name=evaluationError"`
}

SubjectAccessReviewResponse describes whether or not a user or group can perform an action

func (*SubjectAccessReviewResponse) Descriptor 

func (*SubjectAccessReviewResponse) Descriptor() ([]byte, []int)

func (*SubjectAccessReviewResponse) Marshal 

func (m *SubjectAccessReviewResponse) Marshal() (dAtA []byte, err error)

func (*SubjectAccessReviewResponse) MarshalTo 

func (m *SubjectAccessReviewResponse) MarshalTo(dAtA []byte) (int, error)

func (*SubjectAccessReviewResponse) ProtoMessage 

func (*SubjectAccessReviewResponse) ProtoMessage()

func (*SubjectAccessReviewResponse) Reset 

func (m *SubjectAccessReviewResponse) Reset()

func (*SubjectAccessReviewResponse) Size 

func (m *SubjectAccessReviewResponse) Size() (n int)

func (*SubjectAccessReviewResponse) String 

func (this *SubjectAccessReviewResponse) String() string

func (SubjectAccessReviewResponse) SwaggerDoc 

func (SubjectAccessReviewResponse) SwaggerDoc() map[string]string

func (*SubjectAccessReviewResponse) Unmarshal 

func (m *SubjectAccessReviewResponse) Unmarshal(dAtA []byte) error

type SubjectRulesReview 

type SubjectRulesReview struct {
	metav1.TypeMeta `json:",inline"`

	// Spec adds information about how to conduct the check
	Spec SubjectRulesReviewSpec `json:"spec" protobuf:"bytes,1,opt,name=spec"`

	// Status is completed by the server to tell which permissions you have
	Status SubjectRulesReviewStatus `json:"status,omitempty" protobuf:"bytes,2,opt,name=status"`
}

SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace

func (*SubjectRulesReview) DecodeNestedObjects 

func (c *SubjectRulesReview) DecodeNestedObjects(d runtime.Decoder) error

func (*SubjectRulesReview) Descriptor 

func (*SubjectRulesReview) Descriptor() ([]byte, []int)

func (*SubjectRulesReview) EncodeNestedObjects 

func (c *SubjectRulesReview) EncodeNestedObjects(e runtime.Encoder) error

func (*SubjectRulesReview) Marshal 

func (m *SubjectRulesReview) Marshal() (dAtA []byte, err error)

func (*SubjectRulesReview) MarshalTo 

func (m *SubjectRulesReview) MarshalTo(dAtA []byte) (int, error)

func (*SubjectRulesReview) ProtoMessage 

func (*SubjectRulesReview) ProtoMessage()

func (*SubjectRulesReview) Reset 

func (m *SubjectRulesReview) Reset()

func (*SubjectRulesReview) Size 

func (m *SubjectRulesReview) Size() (n int)

func (*SubjectRulesReview) String 

func (this *SubjectRulesReview) String() string

func (SubjectRulesReview) SwaggerDoc 

func (SubjectRulesReview) SwaggerDoc() map[string]string

func (*SubjectRulesReview) Unmarshal 

func (m *SubjectRulesReview) Unmarshal(dAtA []byte) error

type SubjectRulesReviewSpec 

type SubjectRulesReviewSpec struct {
	// User is optional.  At least one of User and Groups must be specified.
	User string `json:"user" protobuf:"bytes,1,opt,name=user"`
	// Groups is optional.  Groups is the list of groups to which the User belongs.  At least one of User and Groups must be specified.
	Groups []string `json:"groups" protobuf:"bytes,2,rep,name=groups"`
	// Scopes to use for the evaluation.  Empty means "use the unscoped (full) permissions of the user/groups".
	Scopes OptionalScopes `json:"scopes" protobuf:"bytes,3,opt,name=scopes"`
}

SubjectRulesReviewSpec adds information about how to conduct the check

func (*SubjectRulesReviewSpec) Descriptor 

func (*SubjectRulesReviewSpec) Descriptor() ([]byte, []int)

func (*SubjectRulesReviewSpec) Marshal 

func (m *SubjectRulesReviewSpec) Marshal() (dAtA []byte, err error)

func (*SubjectRulesReviewSpec) MarshalTo 

func (m *SubjectRulesReviewSpec) MarshalTo(dAtA []byte) (int, error)

func (*SubjectRulesReviewSpec) ProtoMessage 

func (*SubjectRulesReviewSpec) ProtoMessage()

func (*SubjectRulesReviewSpec) Reset 

func (m *SubjectRulesReviewSpec) Reset()

func (*SubjectRulesReviewSpec) Size 

func (m *SubjectRulesReviewSpec) Size() (n int)

func (*SubjectRulesReviewSpec) String 

func (this *SubjectRulesReviewSpec) String() string

func (SubjectRulesReviewSpec) SwaggerDoc 

func (SubjectRulesReviewSpec) SwaggerDoc() map[string]string

func (*SubjectRulesReviewSpec) Unmarshal 

func (m *SubjectRulesReviewSpec) Unmarshal(dAtA []byte) error

type SubjectRulesReviewStatus 

type SubjectRulesReviewStatus struct {
	// Rules is the list of rules (no particular sort) that are allowed for the subject
	Rules []PolicyRule `json:"rules" protobuf:"bytes,1,rep,name=rules"`
	// EvaluationError can appear in combination with Rules.  It means some error happened during evaluation
	// that may have prevented additional rules from being populated.
	EvaluationError string `json:"evaluationError,omitempty" protobuf:"bytes,2,opt,name=evaluationError"`
}

SubjectRulesReviewStatus is contains the result of a rules check

func (*SubjectRulesReviewStatus) Descriptor 

func (*SubjectRulesReviewStatus) Descriptor() ([]byte, []int)

func (*SubjectRulesReviewStatus) Marshal 

func (m *SubjectRulesReviewStatus) Marshal() (dAtA []byte, err error)

func (*SubjectRulesReviewStatus) MarshalTo 

func (m *SubjectRulesReviewStatus) MarshalTo(dAtA []byte) (int, error)

func (*SubjectRulesReviewStatus) ProtoMessage 

func (*SubjectRulesReviewStatus) ProtoMessage()

func (*SubjectRulesReviewStatus) Reset 

func (m *SubjectRulesReviewStatus) Reset()

func (*SubjectRulesReviewStatus) Size 

func (m *SubjectRulesReviewStatus) Size() (n int)

func (*SubjectRulesReviewStatus) String 

func (this *SubjectRulesReviewStatus) String() string

func (SubjectRulesReviewStatus) SwaggerDoc 

func (SubjectRulesReviewStatus) SwaggerDoc() map[string]string

func (*SubjectRulesReviewStatus) Unmarshal 

func (m *SubjectRulesReviewStatus) Unmarshal(dAtA []byte) error

type UserRestriction 

type UserRestriction struct {
	// Users specifies a list of literal user names.
	Users []string `json:"users" protobuf:"bytes,1,rep,name=users"`

	// Groups specifies a list of literal group names.
	Groups []string `json:"groups" protobuf:"bytes,2,rep,name=groups"`

	// Selectors specifies a list of label selectors over user labels.
	Selectors []metav1.LabelSelector `json:"labels" protobuf:"bytes,3,rep,name=labels"`
}

UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.

func (*UserRestriction) Descriptor 

func (*UserRestriction) Descriptor() ([]byte, []int)

func (*UserRestriction) Marshal 

func (m *UserRestriction) Marshal() (dAtA []byte, err error)

func (*UserRestriction) MarshalTo 

func (m *UserRestriction) MarshalTo(dAtA []byte) (int, error)

func (*UserRestriction) ProtoMessage 

func (*UserRestriction) ProtoMessage()

func (*UserRestriction) Reset 

func (m *UserRestriction) Reset()

func (*UserRestriction) Size 

func (m *UserRestriction) Size() (n int)

func (*UserRestriction) String 

func (this *UserRestriction) String() string

func (UserRestriction) SwaggerDoc 

func (UserRestriction) SwaggerDoc() map[string]string

func (*UserRestriction) Unmarshal 

func (m *UserRestriction) Unmarshal(dAtA []byte) error

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.