policy

Documentation

Index

• type ActionRule
• type Attribute
• type Client
  • func NewDefault() *Client
  • func NewWithRetry() *Client
  • func (c *Client) CreateOrUpdatePolicyRegistration(p *PolicyMeta) error
  • func (c *Client) CreateOrUpdateRoleBinding(projectName string, roleBinding *RoleBinding) error
  • func (c *Client) CreateOrUpdateSystemRoleBinding(roleBinding *RoleBinding) error
  • func (c *Client) CreatePolicies(ns string, request CreatePoliciesArgs) error
  • func (c *Client) CreatePolicyBinding(projectName string, policyBindings []*PolicyBinding) error
  • func (c *Client) CreatePresetRole(name string, role *Role) error
  • func (c *Client) CreateSystemRole(name string, role *Role) error
  • func (c *Client) DeletePolicies(ns string, request DeletePoliciesArgs) error
  • func (c *Client) DeletePolicyBindings(names []string, projectName string) error
  • func (c *Client) DeleteRoleBinding(name string, projectName string) error
  • func (c *Client) DeleteRoleBindings(names []string, projectName string) error
  • func (c *Client) DeleteRoles(names []string, projectName string) error
  • func (c *Client) GetPolicies(names string) ([]*Policy, error)
  • func (c *Client) GetResourcePermission(req *ResourcePermissionReq) (map[string][]string, error)
  • func (c *Client) Healthz() error
  • func (c *Client) ListRoleBindings(projectName string) ([]*RoleBinding, error)
  • func (c *Client) UpdatePolicy(ns string, policy *Policy) error
• type CreatePoliciesArgs
• type DeletePoliciesArgs
• type MatchAttribute
• type NameArgs
• type Policy
• type PolicyBinding
• type PolicyMeta
• type ResourcePermissionReq
• type Role
• type RoleBinding
• type Rule
• type RuleMeta

Types

type ActionRule

type ActionRule struct {
	Method          string       `json:"method"`
	Endpoint        string       `json:"endpoint"`
	ResourceType    string       `json:"resourceType,omitempty"`
	IDRegex         string       `json:"idRegex,omitempty"`
	MatchAttributes []*Attribute `json:"matchAttributes,omitempty"`
}

type Attribute

type Attribute struct {
	Key   string `json:"key"`
	Value string `json:"value"`
}

type Client

type Client struct {
	*httpclient.Client
	// contains filtered or unexported fields
}

func NewDefault

func NewDefault() *Client

func NewWithRetry

func NewWithRetry() *Client

func (*Client) CreateOrUpdatePolicyRegistration

func (c *Client) CreateOrUpdatePolicyRegistration(p *PolicyMeta) error

func (*Client) CreateOrUpdateRoleBinding

func (c *Client) CreateOrUpdateRoleBinding(projectName string, roleBinding *RoleBinding) error

func (*Client) CreateOrUpdateSystemRoleBinding

func (c *Client) CreateOrUpdateSystemRoleBinding(roleBinding *RoleBinding) error

func (*Client) CreatePolicies

func (c *Client) CreatePolicies(ns string, request CreatePoliciesArgs) error

func (*Client) CreatePolicyBinding

func (c *Client) CreatePolicyBinding(projectName string, policyBindings []*PolicyBinding) error

func (*Client) CreatePresetRole

func (c *Client) CreatePresetRole(name string, role *Role) error

func (*Client) CreateSystemRole

func (c *Client) CreateSystemRole(name string, role *Role) error

func (*Client) DeletePolicies

func (c *Client) DeletePolicies(ns string, request DeletePoliciesArgs) error

func (*Client) DeletePolicyBindings

func (c *Client) DeletePolicyBindings(names []string, projectName string) error

func (*Client) DeleteRoleBinding

func (c *Client) DeleteRoleBinding(name string, projectName string) error

func (*Client) DeleteRoleBindings

func (c *Client) DeleteRoleBindings(names []string, projectName string) error

func (*Client) DeleteRoles

func (c *Client) DeleteRoles(names []string, projectName string) error

func (*Client) GetPolicies

func (c *Client) GetPolicies(names string) ([]*Policy, error)

func (*Client) GetResourcePermission

func (c *Client) GetResourcePermission(req *ResourcePermissionReq) (map[string][]string, error)

func (*Client) Healthz

func (c *Client) Healthz() error

func (*Client) ListRoleBindings

func (c *Client) ListRoleBindings(projectName string) ([]*RoleBinding, error)

func (*Client) UpdatePolicy

func (c *Client) UpdatePolicy(ns string, policy *Policy) error

type CreatePoliciesArgs

type CreatePoliciesArgs struct {
	Policies []*Policy `json:"policies"`
}

type DeletePoliciesArgs

type DeletePoliciesArgs struct {
	Names []string `json:"names"`
}

type MatchAttribute

type MatchAttribute struct {
	Key   string `json:"key"`
	Value string `json:"value"`
}

type NameArgs

type NameArgs struct {
	Names []string `json:"names"`
}

type Policy

type Policy struct {
	Name        string  `json:"name"`
	Description string  `json:"description"`
	UpdateTime  int64   `json:"update_time"`
	Rules       []*Rule `json:"rules"`
}

type PolicyBinding

type PolicyBinding struct {
	Name   string               `json:"name"`
	UID    string               `json:"uid"`
	Policy string               `json:"policy"`
	Preset bool                 `json:"preset"`
	Type   setting.ResourceType `json:"type"`
}

type PolicyMeta

type PolicyMeta struct {
	Resource    string      `json:"resource"`
	Alias       string      `json:"alias"`
	Description string      `json:"description"`
	Rules       []*RuleMeta `json:"rules"`
}

type ResourcePermissionReq

type ResourcePermissionReq struct {
	ProjectName  string   `json:"project_name"      form:"project_name"`
	Uid          string   `json:"uid"               form:"uid"`
	Resources    []string `json:"resources"         form:"resources"`
	ResourceType string   `json:"resource_type"     form:"resource_type"`
}

type Role

type Role struct {
	Name  string               `json:"name"`
	Type  setting.ResourceType `json:"type"`
	Rules []*struct {
		Verbs           []string         `json:"verbs"`
		Resources       []string         `json:"resources"`
		Kind            string           `json:"kind"`
		MatchAttributes []MatchAttribute `json:"match_attributes,omitempty"`
	} `json:"rules"`
}

type RoleBinding

type RoleBinding struct {
	Name   string               `json:"name"`
	UID    string               `json:"uid"`
	Role   string               `json:"role"`
	Preset bool                 `json:"preset"`
	Type   setting.ResourceType `json:"type"`
}

type Rule

type Rule struct {
	Verbs           []string         `json:"verbs"`
	Resources       []string         `json:"resources"`
	Kind            string           `json:"kind"`
	MatchAttributes []MatchAttribute `json:"match_attributes"`
}

type RuleMeta

type RuleMeta struct {
	Action      string        `json:"action"`
	Alias       string        `json:"alias"`
	Description string        `json:"description"`
	Rules       []*ActionRule `json:"rules"`
}