restrictusers

Jan 14, 2017

Changes in this version

+ func NewRestrictUsersAdmission(kclient kclientset.Interface) (admission.Interface, error)

+ type GroupSubjectChecker struct

+ func NewGroupSubjectChecker(groupRestriction *authorizationapi.GroupRestriction) GroupSubjectChecker

+ func (checker GroupSubjectChecker) Allowed(subject kapi.ObjectReference, ctx *RoleBindingRestrictionContext) (bool, error)

+ type RoleBindingRestrictionContext struct

+ func NewRoleBindingRestrictionContext(ns string, kc kclientset.Interface, oc oclient.Interface, ...) (*RoleBindingRestrictionContext, error)

+ type ServiceAccountSubjectChecker struct

+ func NewServiceAccountSubjectChecker(serviceAccountRestriction *authorizationapi.ServiceAccountRestriction) ServiceAccountSubjectChecker

+ func (checker ServiceAccountSubjectChecker) Allowed(subject kapi.ObjectReference, ctx *RoleBindingRestrictionContext) (bool, error)

+ type SubjectChecker interface

+ Allowed func(kapi.ObjectReference, *RoleBindingRestrictionContext) (bool, error)

+ func NewSubjectChecker(spec *authorizationapi.RoleBindingRestrictionSpec) (SubjectChecker, error)

+ type UnionSubjectChecker []SubjectChecker

+ func NewUnionSubjectChecker(checkers []SubjectChecker) UnionSubjectChecker

+ func (checkers UnionSubjectChecker) Allowed(subject kapi.ObjectReference, ctx *RoleBindingRestrictionContext) (bool, error)

+ type UserSubjectChecker struct

+ func NewUserSubjectChecker(userRestriction *authorizationapi.UserRestriction) UserSubjectChecker

+ func (checker UserSubjectChecker) Allowed(subject kapi.ObjectReference, ctx *RoleBindingRestrictionContext) (bool, error)