checker

Documentation

Index

• Variables
• func Check(ctx context.Context, checker AuthChecker, ...) (bool, error)
• type AuthChecker
  • func NewSelfChecker(client authorizationv1client.SelfSubjectAccessReviewInterface) AuthChecker
  • func NewSubjectChecker(client authorizationv1client.SubjectAccessReviewInterface, user string, ...) AuthChecker
• type AuthResult

Variables

var ErrNoServiceAccount = errors.New("no service account provided")

Functions

func Check

func Check(ctx context.Context, checker AuthChecker, group, version, resource, subresource, namespace string, verbs ...string) (bool, error)

Types

type AuthChecker

type AuthChecker interface {
	// Check checks if the caller can perform an operation
	Check(ctx context.Context, group, version, resource, subresource, namespace, name, verb string) (*AuthResult, error)
}

AuthChecker provides utility to check authorization

func NewSelfChecker

func NewSelfChecker(client authorizationv1client.SelfSubjectAccessReviewInterface) AuthChecker

func NewSubjectChecker

func NewSubjectChecker(client authorizationv1client.SubjectAccessReviewInterface, user string, groups []string) AuthChecker

type AuthResult

type AuthResult struct {
	Allowed         bool
	Reason          string
	EvaluationError string
}

AuthResult contains authorization check result