client

Documentation

Index

• func CheckResourceAccess(ctx context.Context, sar authv1.SelfSubjectAccessReviewInterface, ...) result.ResourceAccess
• func GetSubjectAccess(ctx context.Context, opts *options.RakkessOptions, ...) (*result.SubjectAccess, error)
• type GroupResource
  • func FetchAvailableGroupResources(opts *options.RakkessOptions) ([]GroupResource, error)

Functions

func CheckResourceAccess

func CheckResourceAccess(ctx context.Context, sar authv1.SelfSubjectAccessReviewInterface, grs []GroupResource, verbs []string, namespace *string) result.ResourceAccess

CheckResourceAccess determines the access rights for the given GroupResources and verbs. Since it needs to do a lot of requests, the SelfSubjectAccessReviewInterface needs to be configured for high queries per second.

func GetSubjectAccess

func GetSubjectAccess(ctx context.Context, opts *options.RakkessOptions, resource, resourceName string) (*result.SubjectAccess, error)

GetSubjectAccess determines subjects with access to the given resource.

Types

type GroupResource

type GroupResource struct {
	APIGroup    string
	APIResource metav1.APIResource
}

GroupResource contains the APIGroup and APIResource

func FetchAvailableGroupResources

func FetchAvailableGroupResources(opts *options.RakkessOptions) ([]GroupResource, error)

FetchAvailableGroupResources fetches a list of known APIResources on the server.