service

Documentation

Index

• Constants
• func CreateOrUpdatePolicyRegistration(p *Policy, _ *zap.SugaredLogger) error
• func CreateOrUpdateSystemRoleBinding(ns string, rb *RoleBinding, logger *zap.SugaredLogger) error
• func CreateRole(ns string, role *Role, _ *zap.SugaredLogger) error
• func CreateRoleBindings(ns string, rbs []*RoleBinding, logger *zap.SugaredLogger) error
• func DeleteRole(name string, projectName string, logger *zap.SugaredLogger) error
• func DeleteRoleBinding(name string, projectName string, _ *zap.SugaredLogger) error
• func DeleteRoleBindings(names []string, projectName string, userID string, _ *zap.SugaredLogger) error
• func DeleteRoles(names []string, projectName string, logger *zap.SugaredLogger) error
• func GetPermission(ns, uid string, log *zap.SugaredLogger) (map[string][]string, error)
• func UpdateOrCreateRole(ns string, role *Role, _ *zap.SugaredLogger) error
• func UpdateOrCreateRoleBinding(ns string, rb *RoleBinding, logger *zap.SugaredLogger) error
• func UpdateRole(ns string, role *Role, _ *zap.SugaredLogger) error
• type ActionRule
• type Policy
• type PolicyDefinition
  • func GetPolicyRegistrationDefinitions(_ *zap.SugaredLogger) ([]*PolicyDefinition, error)
• type PolicyRule
• type PolicyRuleDefinition
• type Role
  • func GetRole(ns, name string, _ *zap.SugaredLogger) (*Role, error)
  • func ListRoles(projectName string, _ *zap.SugaredLogger) ([]*Role, error)
• type RoleBinding
  • func ListRoleBindings(ns, uid string, _ *zap.SugaredLogger) ([]*RoleBinding, error)
  • func ListRoleBindingsByRole(ns, roleName string, publicRole bool, _ *zap.SugaredLogger) ([]*RoleBinding, error)
• type Rule

Constants

const SystemScope = "*"

Functions

func CreateOrUpdatePolicyRegistration

func CreateOrUpdatePolicyRegistration(p *Policy, _ *zap.SugaredLogger) error

func CreateOrUpdateSystemRoleBinding

func CreateOrUpdateSystemRoleBinding(ns string, rb *RoleBinding, logger *zap.SugaredLogger) error

func CreateRole

func CreateRole(ns string, role *Role, _ *zap.SugaredLogger) error

func CreateRoleBindings

func CreateRoleBindings(ns string, rbs []*RoleBinding, logger *zap.SugaredLogger) error

func DeleteRole

func DeleteRole(name string, projectName string, logger *zap.SugaredLogger) error

func DeleteRoleBinding

func DeleteRoleBinding(name string, projectName string, _ *zap.SugaredLogger) error

func DeleteRoleBindings

func DeleteRoleBindings(names []string, projectName string, userID string, _ *zap.SugaredLogger) error

func DeleteRoles

func DeleteRoles(names []string, projectName string, logger *zap.SugaredLogger) error

func GetPermission

func GetPermission(ns, uid string, log *zap.SugaredLogger) (map[string][]string, error)

GetPermission user's permission for frontend

func UpdateOrCreateRole

func UpdateOrCreateRole(ns string, role *Role, _ *zap.SugaredLogger) error

func UpdateOrCreateRoleBinding

func UpdateOrCreateRoleBinding(ns string, rb *RoleBinding, logger *zap.SugaredLogger) error

func UpdateRole

func UpdateRole(ns string, role *Role, _ *zap.SugaredLogger) error

Types

type ActionRule

type ActionRule struct {
	Method          string      `json:"method"`
	Endpoint        string      `json:"endpoint"`
	ResourceType    string      `json:"resourceType,omitempty"`
	IDRegex         string      `json:"idRegex,omitempty"`
	MatchAttributes []attribute `json:"matchAttributes,omitempty"`
}

type Policy

type Policy struct {
	Resource    string        `json:"resource"`
	Alias       string        `json:"alias"`
	Description string        `json:"description"`
	Rules       []*PolicyRule `json:"rules"`
}

type PolicyDefinition

type PolicyDefinition struct {
	Resource    string                  `json:"resource"`
	Alias       string                  `json:"alias"`
	Description string                  `json:"description"`
	Rules       []*PolicyRuleDefinition `json:"rules"`
}

func GetPolicyRegistrationDefinitions

func GetPolicyRegistrationDefinitions(_ *zap.SugaredLogger) ([]*PolicyDefinition, error)

type PolicyRule

type PolicyRule struct {
	Action      string        `json:"action"`
	Alias       string        `json:"alias"`
	Description string        `json:"description"`
	Rules       []*ActionRule `json:"rules"`
}

type PolicyRuleDefinition

type PolicyRuleDefinition struct {
	Action      string `json:"action"`
	Alias       string `json:"alias"`
	Description string `json:"description"`
}

type Role

type Role struct {
	Name  string  `json:"name"`
	Rules []*Rule `json:"rules,omitempty"`
}

func GetRole

func GetRole(ns, name string, _ *zap.SugaredLogger) (*Role, error)

func ListRoles

func ListRoles(projectName string, _ *zap.SugaredLogger) ([]*Role, error)

type RoleBinding

type RoleBinding struct {
	Name   string `json:"name"`
	UID    string `json:"uid"`
	Role   string `json:"role"`
	Public bool   `json:"public"`
}

func ListRoleBindings

func ListRoleBindings(ns, uid string, _ *zap.SugaredLogger) ([]*RoleBinding, error)

func ListRoleBindingsByRole

func ListRoleBindingsByRole(ns, roleName string, publicRole bool, _ *zap.SugaredLogger) ([]*RoleBinding, error)

type Rule

type Rule struct {
	Verbs     []string `json:"verbs"`
	Resources []string `json:"resources"`
	Kind      string   `json:"kind"`
}