v1beta1

package
v3.30.2 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Jul 11, 2023 License: Apache-2.0 Imports: 4 Imported by: 1

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type LocalSubjectAccessReview

type LocalSubjectAccessReview struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string            `pulumi:"kind"`
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpec `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatus `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

type LocalSubjectAccessReviewArgs

type LocalSubjectAccessReviewArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpecInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrInput `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func (LocalSubjectAccessReviewArgs) ElementType

func (LocalSubjectAccessReviewArgs) ToLocalSubjectAccessReviewOutput added in v3.28.0

func (i LocalSubjectAccessReviewArgs) ToLocalSubjectAccessReviewOutput() LocalSubjectAccessReviewOutput

func (LocalSubjectAccessReviewArgs) ToLocalSubjectAccessReviewOutputWithContext added in v3.28.0

func (i LocalSubjectAccessReviewArgs) ToLocalSubjectAccessReviewOutputWithContext(ctx context.Context) LocalSubjectAccessReviewOutput

type LocalSubjectAccessReviewInput

type LocalSubjectAccessReviewInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewOutput() LocalSubjectAccessReviewOutput
	ToLocalSubjectAccessReviewOutputWithContext(context.Context) LocalSubjectAccessReviewOutput
}

LocalSubjectAccessReviewInput is an input type that accepts LocalSubjectAccessReviewArgs and LocalSubjectAccessReviewOutput values. You can construct a concrete instance of `LocalSubjectAccessReviewInput` via:

LocalSubjectAccessReviewArgs{...}

type LocalSubjectAccessReviewOutput

type LocalSubjectAccessReviewOutput struct{ *pulumi.OutputState }

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func (LocalSubjectAccessReviewOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (LocalSubjectAccessReviewOutput) ElementType

func (LocalSubjectAccessReviewOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (LocalSubjectAccessReviewOutput) Metadata added in v3.19.1

func (LocalSubjectAccessReviewOutput) Spec added in v3.19.1

Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.

func (LocalSubjectAccessReviewOutput) Status added in v3.19.1

Status is filled in by the server and indicates whether the request is allowed or not

func (LocalSubjectAccessReviewOutput) ToLocalSubjectAccessReviewOutput

func (o LocalSubjectAccessReviewOutput) ToLocalSubjectAccessReviewOutput() LocalSubjectAccessReviewOutput

func (LocalSubjectAccessReviewOutput) ToLocalSubjectAccessReviewOutputWithContext

func (o LocalSubjectAccessReviewOutput) ToLocalSubjectAccessReviewOutputWithContext(ctx context.Context) LocalSubjectAccessReviewOutput

type LocalSubjectAccessReviewPatch added in v3.20.0

type LocalSubjectAccessReviewPatch struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string                 `pulumi:"kind"`
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec *SubjectAccessReviewSpecPatch `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatusPatch `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

type LocalSubjectAccessReviewPatchArgs added in v3.20.0

type LocalSubjectAccessReviewPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
	Spec SubjectAccessReviewSpecPatchPtrInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrInput `pulumi:"status"`
}

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func (LocalSubjectAccessReviewPatchArgs) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchArgs) ToLocalSubjectAccessReviewPatchOutput added in v3.28.0

func (i LocalSubjectAccessReviewPatchArgs) ToLocalSubjectAccessReviewPatchOutput() LocalSubjectAccessReviewPatchOutput

func (LocalSubjectAccessReviewPatchArgs) ToLocalSubjectAccessReviewPatchOutputWithContext added in v3.28.0

func (i LocalSubjectAccessReviewPatchArgs) ToLocalSubjectAccessReviewPatchOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchOutput

type LocalSubjectAccessReviewPatchInput added in v3.20.0

type LocalSubjectAccessReviewPatchInput interface {
	pulumi.Input

	ToLocalSubjectAccessReviewPatchOutput() LocalSubjectAccessReviewPatchOutput
	ToLocalSubjectAccessReviewPatchOutputWithContext(context.Context) LocalSubjectAccessReviewPatchOutput
}

LocalSubjectAccessReviewPatchInput is an input type that accepts LocalSubjectAccessReviewPatchArgs and LocalSubjectAccessReviewPatchOutput values. You can construct a concrete instance of `LocalSubjectAccessReviewPatchInput` via:

LocalSubjectAccessReviewPatchArgs{...}

type LocalSubjectAccessReviewPatchOutput added in v3.20.0

type LocalSubjectAccessReviewPatchOutput struct{ *pulumi.OutputState }

LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.

func (LocalSubjectAccessReviewPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (LocalSubjectAccessReviewPatchOutput) ElementType added in v3.20.0

func (LocalSubjectAccessReviewPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (LocalSubjectAccessReviewPatchOutput) Metadata added in v3.20.0

func (LocalSubjectAccessReviewPatchOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace you made the request against. If empty, it is defaulted.

func (LocalSubjectAccessReviewPatchOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (LocalSubjectAccessReviewPatchOutput) ToLocalSubjectAccessReviewPatchOutput added in v3.20.0

func (o LocalSubjectAccessReviewPatchOutput) ToLocalSubjectAccessReviewPatchOutput() LocalSubjectAccessReviewPatchOutput

func (LocalSubjectAccessReviewPatchOutput) ToLocalSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (o LocalSubjectAccessReviewPatchOutput) ToLocalSubjectAccessReviewPatchOutputWithContext(ctx context.Context) LocalSubjectAccessReviewPatchOutput

type NonResourceAttributes

type NonResourceAttributes struct {
	// Path is the URL path of the request
	Path *string `pulumi:"path"`
	// Verb is the standard HTTP verb
	Verb *string `pulumi:"verb"`
}

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

type NonResourceAttributesArgs

type NonResourceAttributesArgs struct {
	// Path is the URL path of the request
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Verb is the standard HTTP verb
	Verb pulumi.StringPtrInput `pulumi:"verb"`
}

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

func (NonResourceAttributesArgs) ElementType

func (NonResourceAttributesArgs) ElementType() reflect.Type

func (NonResourceAttributesArgs) ToNonResourceAttributesOutput

func (i NonResourceAttributesArgs) ToNonResourceAttributesOutput() NonResourceAttributesOutput

func (NonResourceAttributesArgs) ToNonResourceAttributesOutputWithContext

func (i NonResourceAttributesArgs) ToNonResourceAttributesOutputWithContext(ctx context.Context) NonResourceAttributesOutput

func (NonResourceAttributesArgs) ToNonResourceAttributesPtrOutput

func (i NonResourceAttributesArgs) ToNonResourceAttributesPtrOutput() NonResourceAttributesPtrOutput

func (NonResourceAttributesArgs) ToNonResourceAttributesPtrOutputWithContext

func (i NonResourceAttributesArgs) ToNonResourceAttributesPtrOutputWithContext(ctx context.Context) NonResourceAttributesPtrOutput

type NonResourceAttributesInput

type NonResourceAttributesInput interface {
	pulumi.Input

	ToNonResourceAttributesOutput() NonResourceAttributesOutput
	ToNonResourceAttributesOutputWithContext(context.Context) NonResourceAttributesOutput
}

NonResourceAttributesInput is an input type that accepts NonResourceAttributesArgs and NonResourceAttributesOutput values. You can construct a concrete instance of `NonResourceAttributesInput` via:

NonResourceAttributesArgs{...}

type NonResourceAttributesOutput

type NonResourceAttributesOutput struct{ *pulumi.OutputState }

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

func (NonResourceAttributesOutput) ElementType

func (NonResourceAttributesOutput) Path

Path is the URL path of the request

func (NonResourceAttributesOutput) ToNonResourceAttributesOutput

func (o NonResourceAttributesOutput) ToNonResourceAttributesOutput() NonResourceAttributesOutput

func (NonResourceAttributesOutput) ToNonResourceAttributesOutputWithContext

func (o NonResourceAttributesOutput) ToNonResourceAttributesOutputWithContext(ctx context.Context) NonResourceAttributesOutput

func (NonResourceAttributesOutput) ToNonResourceAttributesPtrOutput

func (o NonResourceAttributesOutput) ToNonResourceAttributesPtrOutput() NonResourceAttributesPtrOutput

func (NonResourceAttributesOutput) ToNonResourceAttributesPtrOutputWithContext

func (o NonResourceAttributesOutput) ToNonResourceAttributesPtrOutputWithContext(ctx context.Context) NonResourceAttributesPtrOutput

func (NonResourceAttributesOutput) Verb

Verb is the standard HTTP verb

type NonResourceAttributesPatch added in v3.20.0

type NonResourceAttributesPatch struct {
	// Path is the URL path of the request
	Path *string `pulumi:"path"`
	// Verb is the standard HTTP verb
	Verb *string `pulumi:"verb"`
}

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

type NonResourceAttributesPatchArgs added in v3.20.0

type NonResourceAttributesPatchArgs struct {
	// Path is the URL path of the request
	Path pulumi.StringPtrInput `pulumi:"path"`
	// Verb is the standard HTTP verb
	Verb pulumi.StringPtrInput `pulumi:"verb"`
}

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

func (NonResourceAttributesPatchArgs) ElementType added in v3.20.0

func (NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchOutput added in v3.20.0

func (i NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchOutput() NonResourceAttributesPatchOutput

func (NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchOutputWithContext added in v3.20.0

func (i NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchOutputWithContext(ctx context.Context) NonResourceAttributesPatchOutput

func (NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchPtrOutput added in v3.20.0

func (i NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchPtrOutput() NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (i NonResourceAttributesPatchArgs) ToNonResourceAttributesPatchPtrOutputWithContext(ctx context.Context) NonResourceAttributesPatchPtrOutput

type NonResourceAttributesPatchInput added in v3.20.0

type NonResourceAttributesPatchInput interface {
	pulumi.Input

	ToNonResourceAttributesPatchOutput() NonResourceAttributesPatchOutput
	ToNonResourceAttributesPatchOutputWithContext(context.Context) NonResourceAttributesPatchOutput
}

NonResourceAttributesPatchInput is an input type that accepts NonResourceAttributesPatchArgs and NonResourceAttributesPatchOutput values. You can construct a concrete instance of `NonResourceAttributesPatchInput` via:

NonResourceAttributesPatchArgs{...}

type NonResourceAttributesPatchOutput added in v3.20.0

type NonResourceAttributesPatchOutput struct{ *pulumi.OutputState }

NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface

func (NonResourceAttributesPatchOutput) ElementType added in v3.20.0

func (NonResourceAttributesPatchOutput) Path added in v3.20.0

Path is the URL path of the request

func (NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchOutput added in v3.20.0

func (o NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchOutput() NonResourceAttributesPatchOutput

func (NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchOutputWithContext added in v3.20.0

func (o NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchOutputWithContext(ctx context.Context) NonResourceAttributesPatchOutput

func (NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchPtrOutput added in v3.20.0

func (o NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchPtrOutput() NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (o NonResourceAttributesPatchOutput) ToNonResourceAttributesPatchPtrOutputWithContext(ctx context.Context) NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchOutput) Verb added in v3.20.0

Verb is the standard HTTP verb

type NonResourceAttributesPatchPtrInput added in v3.20.0

type NonResourceAttributesPatchPtrInput interface {
	pulumi.Input

	ToNonResourceAttributesPatchPtrOutput() NonResourceAttributesPatchPtrOutput
	ToNonResourceAttributesPatchPtrOutputWithContext(context.Context) NonResourceAttributesPatchPtrOutput
}

NonResourceAttributesPatchPtrInput is an input type that accepts NonResourceAttributesPatchArgs, NonResourceAttributesPatchPtr and NonResourceAttributesPatchPtrOutput values. You can construct a concrete instance of `NonResourceAttributesPatchPtrInput` via:

        NonResourceAttributesPatchArgs{...}

or:

        nil

func NonResourceAttributesPatchPtr added in v3.20.0

type NonResourceAttributesPatchPtrOutput added in v3.20.0

type NonResourceAttributesPatchPtrOutput struct{ *pulumi.OutputState }

func (NonResourceAttributesPatchPtrOutput) Elem added in v3.20.0

func (NonResourceAttributesPatchPtrOutput) ElementType added in v3.20.0

func (NonResourceAttributesPatchPtrOutput) Path added in v3.20.0

Path is the URL path of the request

func (NonResourceAttributesPatchPtrOutput) ToNonResourceAttributesPatchPtrOutput added in v3.20.0

func (o NonResourceAttributesPatchPtrOutput) ToNonResourceAttributesPatchPtrOutput() NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchPtrOutput) ToNonResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (o NonResourceAttributesPatchPtrOutput) ToNonResourceAttributesPatchPtrOutputWithContext(ctx context.Context) NonResourceAttributesPatchPtrOutput

func (NonResourceAttributesPatchPtrOutput) Verb added in v3.20.0

Verb is the standard HTTP verb

type NonResourceAttributesPtrInput

type NonResourceAttributesPtrInput interface {
	pulumi.Input

	ToNonResourceAttributesPtrOutput() NonResourceAttributesPtrOutput
	ToNonResourceAttributesPtrOutputWithContext(context.Context) NonResourceAttributesPtrOutput
}

NonResourceAttributesPtrInput is an input type that accepts NonResourceAttributesArgs, NonResourceAttributesPtr and NonResourceAttributesPtrOutput values. You can construct a concrete instance of `NonResourceAttributesPtrInput` via:

        NonResourceAttributesArgs{...}

or:

        nil

type NonResourceAttributesPtrOutput

type NonResourceAttributesPtrOutput struct{ *pulumi.OutputState }

func (NonResourceAttributesPtrOutput) Elem

func (NonResourceAttributesPtrOutput) ElementType

func (NonResourceAttributesPtrOutput) Path

Path is the URL path of the request

func (NonResourceAttributesPtrOutput) ToNonResourceAttributesPtrOutput

func (o NonResourceAttributesPtrOutput) ToNonResourceAttributesPtrOutput() NonResourceAttributesPtrOutput

func (NonResourceAttributesPtrOutput) ToNonResourceAttributesPtrOutputWithContext

func (o NonResourceAttributesPtrOutput) ToNonResourceAttributesPtrOutputWithContext(ctx context.Context) NonResourceAttributesPtrOutput

func (NonResourceAttributesPtrOutput) Verb

Verb is the standard HTTP verb

type NonResourceRule

type NonResourceRule struct {
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
	NonResourceURLs []string `pulumi:"nonResourceURLs"`
	// Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
	Verbs []string `pulumi:"verbs"`
}

NonResourceRule holds information that describes a rule for the non-resource

type NonResourceRuleArgs

type NonResourceRuleArgs struct {
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
	NonResourceURLs pulumi.StringArrayInput `pulumi:"nonResourceURLs"`
	// Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
	Verbs pulumi.StringArrayInput `pulumi:"verbs"`
}

NonResourceRule holds information that describes a rule for the non-resource

func (NonResourceRuleArgs) ElementType

func (NonResourceRuleArgs) ElementType() reflect.Type

func (NonResourceRuleArgs) ToNonResourceRuleOutput

func (i NonResourceRuleArgs) ToNonResourceRuleOutput() NonResourceRuleOutput

func (NonResourceRuleArgs) ToNonResourceRuleOutputWithContext

func (i NonResourceRuleArgs) ToNonResourceRuleOutputWithContext(ctx context.Context) NonResourceRuleOutput

type NonResourceRuleArray

type NonResourceRuleArray []NonResourceRuleInput

func (NonResourceRuleArray) ElementType

func (NonResourceRuleArray) ElementType() reflect.Type

func (NonResourceRuleArray) ToNonResourceRuleArrayOutput

func (i NonResourceRuleArray) ToNonResourceRuleArrayOutput() NonResourceRuleArrayOutput

func (NonResourceRuleArray) ToNonResourceRuleArrayOutputWithContext

func (i NonResourceRuleArray) ToNonResourceRuleArrayOutputWithContext(ctx context.Context) NonResourceRuleArrayOutput

type NonResourceRuleArrayInput

type NonResourceRuleArrayInput interface {
	pulumi.Input

	ToNonResourceRuleArrayOutput() NonResourceRuleArrayOutput
	ToNonResourceRuleArrayOutputWithContext(context.Context) NonResourceRuleArrayOutput
}

NonResourceRuleArrayInput is an input type that accepts NonResourceRuleArray and NonResourceRuleArrayOutput values. You can construct a concrete instance of `NonResourceRuleArrayInput` via:

NonResourceRuleArray{ NonResourceRuleArgs{...} }

type NonResourceRuleArrayOutput

type NonResourceRuleArrayOutput struct{ *pulumi.OutputState }

func (NonResourceRuleArrayOutput) ElementType

func (NonResourceRuleArrayOutput) ElementType() reflect.Type

func (NonResourceRuleArrayOutput) Index

func (NonResourceRuleArrayOutput) ToNonResourceRuleArrayOutput

func (o NonResourceRuleArrayOutput) ToNonResourceRuleArrayOutput() NonResourceRuleArrayOutput

func (NonResourceRuleArrayOutput) ToNonResourceRuleArrayOutputWithContext

func (o NonResourceRuleArrayOutput) ToNonResourceRuleArrayOutputWithContext(ctx context.Context) NonResourceRuleArrayOutput

type NonResourceRuleInput

type NonResourceRuleInput interface {
	pulumi.Input

	ToNonResourceRuleOutput() NonResourceRuleOutput
	ToNonResourceRuleOutputWithContext(context.Context) NonResourceRuleOutput
}

NonResourceRuleInput is an input type that accepts NonResourceRuleArgs and NonResourceRuleOutput values. You can construct a concrete instance of `NonResourceRuleInput` via:

NonResourceRuleArgs{...}

type NonResourceRuleOutput

type NonResourceRuleOutput struct{ *pulumi.OutputState }

NonResourceRule holds information that describes a rule for the non-resource

func (NonResourceRuleOutput) ElementType

func (NonResourceRuleOutput) ElementType() reflect.Type

func (NonResourceRuleOutput) NonResourceURLs

func (o NonResourceRuleOutput) NonResourceURLs() pulumi.StringArrayOutput

NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. "*" means all.

func (NonResourceRuleOutput) ToNonResourceRuleOutput

func (o NonResourceRuleOutput) ToNonResourceRuleOutput() NonResourceRuleOutput

func (NonResourceRuleOutput) ToNonResourceRuleOutputWithContext

func (o NonResourceRuleOutput) ToNonResourceRuleOutputWithContext(ctx context.Context) NonResourceRuleOutput

func (NonResourceRuleOutput) Verbs

Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. "*" means all.

type NonResourceRulePatch added in v3.20.0

type NonResourceRulePatch struct {
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
	NonResourceURLs []string `pulumi:"nonResourceURLs"`
	// Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
	Verbs []string `pulumi:"verbs"`
}

NonResourceRule holds information that describes a rule for the non-resource

type NonResourceRulePatchArgs added in v3.20.0

type NonResourceRulePatchArgs struct {
	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path.  "*" means all.
	NonResourceURLs pulumi.StringArrayInput `pulumi:"nonResourceURLs"`
	// Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options.  "*" means all.
	Verbs pulumi.StringArrayInput `pulumi:"verbs"`
}

NonResourceRule holds information that describes a rule for the non-resource

func (NonResourceRulePatchArgs) ElementType added in v3.20.0

func (NonResourceRulePatchArgs) ElementType() reflect.Type

func (NonResourceRulePatchArgs) ToNonResourceRulePatchOutput added in v3.20.0

func (i NonResourceRulePatchArgs) ToNonResourceRulePatchOutput() NonResourceRulePatchOutput

func (NonResourceRulePatchArgs) ToNonResourceRulePatchOutputWithContext added in v3.20.0

func (i NonResourceRulePatchArgs) ToNonResourceRulePatchOutputWithContext(ctx context.Context) NonResourceRulePatchOutput

type NonResourceRulePatchArray added in v3.20.0

type NonResourceRulePatchArray []NonResourceRulePatchInput

func (NonResourceRulePatchArray) ElementType added in v3.20.0

func (NonResourceRulePatchArray) ElementType() reflect.Type

func (NonResourceRulePatchArray) ToNonResourceRulePatchArrayOutput added in v3.20.0

func (i NonResourceRulePatchArray) ToNonResourceRulePatchArrayOutput() NonResourceRulePatchArrayOutput

func (NonResourceRulePatchArray) ToNonResourceRulePatchArrayOutputWithContext added in v3.20.0

func (i NonResourceRulePatchArray) ToNonResourceRulePatchArrayOutputWithContext(ctx context.Context) NonResourceRulePatchArrayOutput

type NonResourceRulePatchArrayInput added in v3.20.0

type NonResourceRulePatchArrayInput interface {
	pulumi.Input

	ToNonResourceRulePatchArrayOutput() NonResourceRulePatchArrayOutput
	ToNonResourceRulePatchArrayOutputWithContext(context.Context) NonResourceRulePatchArrayOutput
}

NonResourceRulePatchArrayInput is an input type that accepts NonResourceRulePatchArray and NonResourceRulePatchArrayOutput values. You can construct a concrete instance of `NonResourceRulePatchArrayInput` via:

NonResourceRulePatchArray{ NonResourceRulePatchArgs{...} }

type NonResourceRulePatchArrayOutput added in v3.20.0

type NonResourceRulePatchArrayOutput struct{ *pulumi.OutputState }

func (NonResourceRulePatchArrayOutput) ElementType added in v3.20.0

func (NonResourceRulePatchArrayOutput) Index added in v3.20.0

func (NonResourceRulePatchArrayOutput) ToNonResourceRulePatchArrayOutput added in v3.20.0

func (o NonResourceRulePatchArrayOutput) ToNonResourceRulePatchArrayOutput() NonResourceRulePatchArrayOutput

func (NonResourceRulePatchArrayOutput) ToNonResourceRulePatchArrayOutputWithContext added in v3.20.0

func (o NonResourceRulePatchArrayOutput) ToNonResourceRulePatchArrayOutputWithContext(ctx context.Context) NonResourceRulePatchArrayOutput

type NonResourceRulePatchInput added in v3.20.0

type NonResourceRulePatchInput interface {
	pulumi.Input

	ToNonResourceRulePatchOutput() NonResourceRulePatchOutput
	ToNonResourceRulePatchOutputWithContext(context.Context) NonResourceRulePatchOutput
}

NonResourceRulePatchInput is an input type that accepts NonResourceRulePatchArgs and NonResourceRulePatchOutput values. You can construct a concrete instance of `NonResourceRulePatchInput` via:

NonResourceRulePatchArgs{...}

type NonResourceRulePatchOutput added in v3.20.0

type NonResourceRulePatchOutput struct{ *pulumi.OutputState }

NonResourceRule holds information that describes a rule for the non-resource

func (NonResourceRulePatchOutput) ElementType added in v3.20.0

func (NonResourceRulePatchOutput) ElementType() reflect.Type

func (NonResourceRulePatchOutput) NonResourceURLs added in v3.20.0

NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path. "*" means all.

func (NonResourceRulePatchOutput) ToNonResourceRulePatchOutput added in v3.20.0

func (o NonResourceRulePatchOutput) ToNonResourceRulePatchOutput() NonResourceRulePatchOutput

func (NonResourceRulePatchOutput) ToNonResourceRulePatchOutputWithContext added in v3.20.0

func (o NonResourceRulePatchOutput) ToNonResourceRulePatchOutputWithContext(ctx context.Context) NonResourceRulePatchOutput

func (NonResourceRulePatchOutput) Verbs added in v3.20.0

Verb is a list of kubernetes non-resource API verbs, like: get, post, put, delete, patch, head, options. "*" means all.

type ResourceAttributes

type ResourceAttributes struct {
	// Group is the API Group of the Resource.  "*" means all.
	Group *string `pulumi:"group"`
	// Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
	Name *string `pulumi:"name"`
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
	Namespace *string `pulumi:"namespace"`
	// Resource is one of the existing resource types.  "*" means all.
	Resource *string `pulumi:"resource"`
	// Subresource is one of the existing resource types.  "" means none.
	Subresource *string `pulumi:"subresource"`
	// Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verb *string `pulumi:"verb"`
	// Version is the API Version of the Resource.  "*" means all.
	Version *string `pulumi:"version"`
}

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

type ResourceAttributesArgs

type ResourceAttributesArgs struct {
	// Group is the API Group of the Resource.  "*" means all.
	Group pulumi.StringPtrInput `pulumi:"group"`
	// Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
	// Resource is one of the existing resource types.  "*" means all.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
	// Subresource is one of the existing resource types.  "" means none.
	Subresource pulumi.StringPtrInput `pulumi:"subresource"`
	// Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verb pulumi.StringPtrInput `pulumi:"verb"`
	// Version is the API Version of the Resource.  "*" means all.
	Version pulumi.StringPtrInput `pulumi:"version"`
}

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

func (ResourceAttributesArgs) ElementType

func (ResourceAttributesArgs) ElementType() reflect.Type

func (ResourceAttributesArgs) ToResourceAttributesOutput

func (i ResourceAttributesArgs) ToResourceAttributesOutput() ResourceAttributesOutput

func (ResourceAttributesArgs) ToResourceAttributesOutputWithContext

func (i ResourceAttributesArgs) ToResourceAttributesOutputWithContext(ctx context.Context) ResourceAttributesOutput

func (ResourceAttributesArgs) ToResourceAttributesPtrOutput

func (i ResourceAttributesArgs) ToResourceAttributesPtrOutput() ResourceAttributesPtrOutput

func (ResourceAttributesArgs) ToResourceAttributesPtrOutputWithContext

func (i ResourceAttributesArgs) ToResourceAttributesPtrOutputWithContext(ctx context.Context) ResourceAttributesPtrOutput

type ResourceAttributesInput

type ResourceAttributesInput interface {
	pulumi.Input

	ToResourceAttributesOutput() ResourceAttributesOutput
	ToResourceAttributesOutputWithContext(context.Context) ResourceAttributesOutput
}

ResourceAttributesInput is an input type that accepts ResourceAttributesArgs and ResourceAttributesOutput values. You can construct a concrete instance of `ResourceAttributesInput` via:

ResourceAttributesArgs{...}

type ResourceAttributesOutput

type ResourceAttributesOutput struct{ *pulumi.OutputState }

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

func (ResourceAttributesOutput) ElementType

func (ResourceAttributesOutput) ElementType() reflect.Type

func (ResourceAttributesOutput) Group

Group is the API Group of the Resource. "*" means all.

func (ResourceAttributesOutput) Name

Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.

func (ResourceAttributesOutput) Namespace

Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview

func (ResourceAttributesOutput) Resource

Resource is one of the existing resource types. "*" means all.

func (ResourceAttributesOutput) Subresource

Subresource is one of the existing resource types. "" means none.

func (ResourceAttributesOutput) ToResourceAttributesOutput

func (o ResourceAttributesOutput) ToResourceAttributesOutput() ResourceAttributesOutput

func (ResourceAttributesOutput) ToResourceAttributesOutputWithContext

func (o ResourceAttributesOutput) ToResourceAttributesOutputWithContext(ctx context.Context) ResourceAttributesOutput

func (ResourceAttributesOutput) ToResourceAttributesPtrOutput

func (o ResourceAttributesOutput) ToResourceAttributesPtrOutput() ResourceAttributesPtrOutput

func (ResourceAttributesOutput) ToResourceAttributesPtrOutputWithContext

func (o ResourceAttributesOutput) ToResourceAttributesPtrOutputWithContext(ctx context.Context) ResourceAttributesPtrOutput

func (ResourceAttributesOutput) Verb

Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.

func (ResourceAttributesOutput) Version

Version is the API Version of the Resource. "*" means all.

type ResourceAttributesPatch added in v3.20.0

type ResourceAttributesPatch struct {
	// Group is the API Group of the Resource.  "*" means all.
	Group *string `pulumi:"group"`
	// Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
	Name *string `pulumi:"name"`
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
	Namespace *string `pulumi:"namespace"`
	// Resource is one of the existing resource types.  "*" means all.
	Resource *string `pulumi:"resource"`
	// Subresource is one of the existing resource types.  "" means none.
	Subresource *string `pulumi:"subresource"`
	// Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verb *string `pulumi:"verb"`
	// Version is the API Version of the Resource.  "*" means all.
	Version *string `pulumi:"version"`
}

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

type ResourceAttributesPatchArgs added in v3.20.0

type ResourceAttributesPatchArgs struct {
	// Group is the API Group of the Resource.  "*" means all.
	Group pulumi.StringPtrInput `pulumi:"group"`
	// Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Namespace is the namespace of the action being requested.  Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
	// Resource is one of the existing resource types.  "*" means all.
	Resource pulumi.StringPtrInput `pulumi:"resource"`
	// Subresource is one of the existing resource types.  "" means none.
	Subresource pulumi.StringPtrInput `pulumi:"subresource"`
	// Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verb pulumi.StringPtrInput `pulumi:"verb"`
	// Version is the API Version of the Resource.  "*" means all.
	Version pulumi.StringPtrInput `pulumi:"version"`
}

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

func (ResourceAttributesPatchArgs) ElementType added in v3.20.0

func (ResourceAttributesPatchArgs) ToResourceAttributesPatchOutput added in v3.20.0

func (i ResourceAttributesPatchArgs) ToResourceAttributesPatchOutput() ResourceAttributesPatchOutput

func (ResourceAttributesPatchArgs) ToResourceAttributesPatchOutputWithContext added in v3.20.0

func (i ResourceAttributesPatchArgs) ToResourceAttributesPatchOutputWithContext(ctx context.Context) ResourceAttributesPatchOutput

func (ResourceAttributesPatchArgs) ToResourceAttributesPatchPtrOutput added in v3.20.0

func (i ResourceAttributesPatchArgs) ToResourceAttributesPatchPtrOutput() ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchArgs) ToResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (i ResourceAttributesPatchArgs) ToResourceAttributesPatchPtrOutputWithContext(ctx context.Context) ResourceAttributesPatchPtrOutput

type ResourceAttributesPatchInput added in v3.20.0

type ResourceAttributesPatchInput interface {
	pulumi.Input

	ToResourceAttributesPatchOutput() ResourceAttributesPatchOutput
	ToResourceAttributesPatchOutputWithContext(context.Context) ResourceAttributesPatchOutput
}

ResourceAttributesPatchInput is an input type that accepts ResourceAttributesPatchArgs and ResourceAttributesPatchOutput values. You can construct a concrete instance of `ResourceAttributesPatchInput` via:

ResourceAttributesPatchArgs{...}

type ResourceAttributesPatchOutput added in v3.20.0

type ResourceAttributesPatchOutput struct{ *pulumi.OutputState }

ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface

func (ResourceAttributesPatchOutput) ElementType added in v3.20.0

func (ResourceAttributesPatchOutput) Group added in v3.20.0

Group is the API Group of the Resource. "*" means all.

func (ResourceAttributesPatchOutput) Name added in v3.20.0

Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.

func (ResourceAttributesPatchOutput) Namespace added in v3.20.0

Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview

func (ResourceAttributesPatchOutput) Resource added in v3.20.0

Resource is one of the existing resource types. "*" means all.

func (ResourceAttributesPatchOutput) Subresource added in v3.20.0

Subresource is one of the existing resource types. "" means none.

func (ResourceAttributesPatchOutput) ToResourceAttributesPatchOutput added in v3.20.0

func (o ResourceAttributesPatchOutput) ToResourceAttributesPatchOutput() ResourceAttributesPatchOutput

func (ResourceAttributesPatchOutput) ToResourceAttributesPatchOutputWithContext added in v3.20.0

func (o ResourceAttributesPatchOutput) ToResourceAttributesPatchOutputWithContext(ctx context.Context) ResourceAttributesPatchOutput

func (ResourceAttributesPatchOutput) ToResourceAttributesPatchPtrOutput added in v3.20.0

func (o ResourceAttributesPatchOutput) ToResourceAttributesPatchPtrOutput() ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchOutput) ToResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (o ResourceAttributesPatchOutput) ToResourceAttributesPatchPtrOutputWithContext(ctx context.Context) ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchOutput) Verb added in v3.20.0

Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.

func (ResourceAttributesPatchOutput) Version added in v3.20.0

Version is the API Version of the Resource. "*" means all.

type ResourceAttributesPatchPtrInput added in v3.20.0

type ResourceAttributesPatchPtrInput interface {
	pulumi.Input

	ToResourceAttributesPatchPtrOutput() ResourceAttributesPatchPtrOutput
	ToResourceAttributesPatchPtrOutputWithContext(context.Context) ResourceAttributesPatchPtrOutput
}

ResourceAttributesPatchPtrInput is an input type that accepts ResourceAttributesPatchArgs, ResourceAttributesPatchPtr and ResourceAttributesPatchPtrOutput values. You can construct a concrete instance of `ResourceAttributesPatchPtrInput` via:

        ResourceAttributesPatchArgs{...}

or:

        nil

func ResourceAttributesPatchPtr added in v3.20.0

func ResourceAttributesPatchPtr(v *ResourceAttributesPatchArgs) ResourceAttributesPatchPtrInput

type ResourceAttributesPatchPtrOutput added in v3.20.0

type ResourceAttributesPatchPtrOutput struct{ *pulumi.OutputState }

func (ResourceAttributesPatchPtrOutput) Elem added in v3.20.0

func (ResourceAttributesPatchPtrOutput) ElementType added in v3.20.0

func (ResourceAttributesPatchPtrOutput) Group added in v3.20.0

Group is the API Group of the Resource. "*" means all.

func (ResourceAttributesPatchPtrOutput) Name added in v3.20.0

Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.

func (ResourceAttributesPatchPtrOutput) Namespace added in v3.20.0

Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview

func (ResourceAttributesPatchPtrOutput) Resource added in v3.20.0

Resource is one of the existing resource types. "*" means all.

func (ResourceAttributesPatchPtrOutput) Subresource added in v3.20.0

Subresource is one of the existing resource types. "" means none.

func (ResourceAttributesPatchPtrOutput) ToResourceAttributesPatchPtrOutput added in v3.20.0

func (o ResourceAttributesPatchPtrOutput) ToResourceAttributesPatchPtrOutput() ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchPtrOutput) ToResourceAttributesPatchPtrOutputWithContext added in v3.20.0

func (o ResourceAttributesPatchPtrOutput) ToResourceAttributesPatchPtrOutputWithContext(ctx context.Context) ResourceAttributesPatchPtrOutput

func (ResourceAttributesPatchPtrOutput) Verb added in v3.20.0

Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.

func (ResourceAttributesPatchPtrOutput) Version added in v3.20.0

Version is the API Version of the Resource. "*" means all.

type ResourceAttributesPtrInput

type ResourceAttributesPtrInput interface {
	pulumi.Input

	ToResourceAttributesPtrOutput() ResourceAttributesPtrOutput
	ToResourceAttributesPtrOutputWithContext(context.Context) ResourceAttributesPtrOutput
}

ResourceAttributesPtrInput is an input type that accepts ResourceAttributesArgs, ResourceAttributesPtr and ResourceAttributesPtrOutput values. You can construct a concrete instance of `ResourceAttributesPtrInput` via:

        ResourceAttributesArgs{...}

or:

        nil

type ResourceAttributesPtrOutput

type ResourceAttributesPtrOutput struct{ *pulumi.OutputState }

func (ResourceAttributesPtrOutput) Elem

func (ResourceAttributesPtrOutput) ElementType

func (ResourceAttributesPtrOutput) Group

Group is the API Group of the Resource. "*" means all.

func (ResourceAttributesPtrOutput) Name

Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all.

func (ResourceAttributesPtrOutput) Namespace

Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces "" (empty) is defaulted for LocalSubjectAccessReviews "" (empty) is empty for cluster-scoped resources "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview

func (ResourceAttributesPtrOutput) Resource

Resource is one of the existing resource types. "*" means all.

func (ResourceAttributesPtrOutput) Subresource

Subresource is one of the existing resource types. "" means none.

func (ResourceAttributesPtrOutput) ToResourceAttributesPtrOutput

func (o ResourceAttributesPtrOutput) ToResourceAttributesPtrOutput() ResourceAttributesPtrOutput

func (ResourceAttributesPtrOutput) ToResourceAttributesPtrOutputWithContext

func (o ResourceAttributesPtrOutput) ToResourceAttributesPtrOutputWithContext(ctx context.Context) ResourceAttributesPtrOutput

func (ResourceAttributesPtrOutput) Verb

Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all.

func (ResourceAttributesPtrOutput) Version

Version is the API Version of the Resource. "*" means all.

type ResourceRule

type ResourceRule struct {
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
	ApiGroups []string `pulumi:"apiGroups"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
	ResourceNames []string `pulumi:"resourceNames"`
	// Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
	//  "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
	Resources []string `pulumi:"resources"`
	// Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verbs []string `pulumi:"verbs"`
}

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

type ResourceRuleArgs

type ResourceRuleArgs struct {
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
	ApiGroups pulumi.StringArrayInput `pulumi:"apiGroups"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
	ResourceNames pulumi.StringArrayInput `pulumi:"resourceNames"`
	// Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
	//  "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
	// Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verbs pulumi.StringArrayInput `pulumi:"verbs"`
}

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (ResourceRuleArgs) ElementType

func (ResourceRuleArgs) ElementType() reflect.Type

func (ResourceRuleArgs) ToResourceRuleOutput

func (i ResourceRuleArgs) ToResourceRuleOutput() ResourceRuleOutput

func (ResourceRuleArgs) ToResourceRuleOutputWithContext

func (i ResourceRuleArgs) ToResourceRuleOutputWithContext(ctx context.Context) ResourceRuleOutput

type ResourceRuleArray

type ResourceRuleArray []ResourceRuleInput

func (ResourceRuleArray) ElementType

func (ResourceRuleArray) ElementType() reflect.Type

func (ResourceRuleArray) ToResourceRuleArrayOutput

func (i ResourceRuleArray) ToResourceRuleArrayOutput() ResourceRuleArrayOutput

func (ResourceRuleArray) ToResourceRuleArrayOutputWithContext

func (i ResourceRuleArray) ToResourceRuleArrayOutputWithContext(ctx context.Context) ResourceRuleArrayOutput

type ResourceRuleArrayInput

type ResourceRuleArrayInput interface {
	pulumi.Input

	ToResourceRuleArrayOutput() ResourceRuleArrayOutput
	ToResourceRuleArrayOutputWithContext(context.Context) ResourceRuleArrayOutput
}

ResourceRuleArrayInput is an input type that accepts ResourceRuleArray and ResourceRuleArrayOutput values. You can construct a concrete instance of `ResourceRuleArrayInput` via:

ResourceRuleArray{ ResourceRuleArgs{...} }

type ResourceRuleArrayOutput

type ResourceRuleArrayOutput struct{ *pulumi.OutputState }

func (ResourceRuleArrayOutput) ElementType

func (ResourceRuleArrayOutput) ElementType() reflect.Type

func (ResourceRuleArrayOutput) Index

func (ResourceRuleArrayOutput) ToResourceRuleArrayOutput

func (o ResourceRuleArrayOutput) ToResourceRuleArrayOutput() ResourceRuleArrayOutput

func (ResourceRuleArrayOutput) ToResourceRuleArrayOutputWithContext

func (o ResourceRuleArrayOutput) ToResourceRuleArrayOutputWithContext(ctx context.Context) ResourceRuleArrayOutput

type ResourceRuleInput

type ResourceRuleInput interface {
	pulumi.Input

	ToResourceRuleOutput() ResourceRuleOutput
	ToResourceRuleOutputWithContext(context.Context) ResourceRuleOutput
}

ResourceRuleInput is an input type that accepts ResourceRuleArgs and ResourceRuleOutput values. You can construct a concrete instance of `ResourceRuleInput` via:

ResourceRuleArgs{...}

type ResourceRuleOutput

type ResourceRuleOutput struct{ *pulumi.OutputState }

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (ResourceRuleOutput) ApiGroups

APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "*" means all.

func (ResourceRuleOutput) ElementType

func (ResourceRuleOutput) ElementType() reflect.Type

func (ResourceRuleOutput) ResourceNames

func (o ResourceRuleOutput) ResourceNames() pulumi.StringArrayOutput

ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. "*" means all.

func (ResourceRuleOutput) Resources

Resources is a list of resources this rule applies to. "*" means all in the specified apiGroups.

"*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.

func (ResourceRuleOutput) ToResourceRuleOutput

func (o ResourceRuleOutput) ToResourceRuleOutput() ResourceRuleOutput

func (ResourceRuleOutput) ToResourceRuleOutputWithContext

func (o ResourceRuleOutput) ToResourceRuleOutputWithContext(ctx context.Context) ResourceRuleOutput

func (ResourceRuleOutput) Verbs

Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. "*" means all.

type ResourceRulePatch added in v3.20.0

type ResourceRulePatch struct {
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
	ApiGroups []string `pulumi:"apiGroups"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
	ResourceNames []string `pulumi:"resourceNames"`
	// Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
	//  "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
	Resources []string `pulumi:"resources"`
	// Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verbs []string `pulumi:"verbs"`
}

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

type ResourceRulePatchArgs added in v3.20.0

type ResourceRulePatchArgs struct {
	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.  "*" means all.
	ApiGroups pulumi.StringArrayInput `pulumi:"apiGroups"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.  "*" means all.
	ResourceNames pulumi.StringArrayInput `pulumi:"resourceNames"`
	// Resources is a list of resources this rule applies to.  "*" means all in the specified apiGroups.
	//  "*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.
	Resources pulumi.StringArrayInput `pulumi:"resources"`
	// Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy.  "*" means all.
	Verbs pulumi.StringArrayInput `pulumi:"verbs"`
}

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (ResourceRulePatchArgs) ElementType added in v3.20.0

func (ResourceRulePatchArgs) ElementType() reflect.Type

func (ResourceRulePatchArgs) ToResourceRulePatchOutput added in v3.20.0

func (i ResourceRulePatchArgs) ToResourceRulePatchOutput() ResourceRulePatchOutput

func (ResourceRulePatchArgs) ToResourceRulePatchOutputWithContext added in v3.20.0

func (i ResourceRulePatchArgs) ToResourceRulePatchOutputWithContext(ctx context.Context) ResourceRulePatchOutput

type ResourceRulePatchArray added in v3.20.0

type ResourceRulePatchArray []ResourceRulePatchInput

func (ResourceRulePatchArray) ElementType added in v3.20.0

func (ResourceRulePatchArray) ElementType() reflect.Type

func (ResourceRulePatchArray) ToResourceRulePatchArrayOutput added in v3.20.0

func (i ResourceRulePatchArray) ToResourceRulePatchArrayOutput() ResourceRulePatchArrayOutput

func (ResourceRulePatchArray) ToResourceRulePatchArrayOutputWithContext added in v3.20.0

func (i ResourceRulePatchArray) ToResourceRulePatchArrayOutputWithContext(ctx context.Context) ResourceRulePatchArrayOutput

type ResourceRulePatchArrayInput added in v3.20.0

type ResourceRulePatchArrayInput interface {
	pulumi.Input

	ToResourceRulePatchArrayOutput() ResourceRulePatchArrayOutput
	ToResourceRulePatchArrayOutputWithContext(context.Context) ResourceRulePatchArrayOutput
}

ResourceRulePatchArrayInput is an input type that accepts ResourceRulePatchArray and ResourceRulePatchArrayOutput values. You can construct a concrete instance of `ResourceRulePatchArrayInput` via:

ResourceRulePatchArray{ ResourceRulePatchArgs{...} }

type ResourceRulePatchArrayOutput added in v3.20.0

type ResourceRulePatchArrayOutput struct{ *pulumi.OutputState }

func (ResourceRulePatchArrayOutput) ElementType added in v3.20.0

func (ResourceRulePatchArrayOutput) Index added in v3.20.0

func (ResourceRulePatchArrayOutput) ToResourceRulePatchArrayOutput added in v3.20.0

func (o ResourceRulePatchArrayOutput) ToResourceRulePatchArrayOutput() ResourceRulePatchArrayOutput

func (ResourceRulePatchArrayOutput) ToResourceRulePatchArrayOutputWithContext added in v3.20.0

func (o ResourceRulePatchArrayOutput) ToResourceRulePatchArrayOutputWithContext(ctx context.Context) ResourceRulePatchArrayOutput

type ResourceRulePatchInput added in v3.20.0

type ResourceRulePatchInput interface {
	pulumi.Input

	ToResourceRulePatchOutput() ResourceRulePatchOutput
	ToResourceRulePatchOutputWithContext(context.Context) ResourceRulePatchOutput
}

ResourceRulePatchInput is an input type that accepts ResourceRulePatchArgs and ResourceRulePatchOutput values. You can construct a concrete instance of `ResourceRulePatchInput` via:

ResourceRulePatchArgs{...}

type ResourceRulePatchOutput added in v3.20.0

type ResourceRulePatchOutput struct{ *pulumi.OutputState }

ResourceRule is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (ResourceRulePatchOutput) ApiGroups added in v3.20.0

APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "*" means all.

func (ResourceRulePatchOutput) ElementType added in v3.20.0

func (ResourceRulePatchOutput) ElementType() reflect.Type

func (ResourceRulePatchOutput) ResourceNames added in v3.20.0

ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed. "*" means all.

func (ResourceRulePatchOutput) Resources added in v3.20.0

Resources is a list of resources this rule applies to. "*" means all in the specified apiGroups.

"*/foo" represents the subresource 'foo' for all resources in the specified apiGroups.

func (ResourceRulePatchOutput) ToResourceRulePatchOutput added in v3.20.0

func (o ResourceRulePatchOutput) ToResourceRulePatchOutput() ResourceRulePatchOutput

func (ResourceRulePatchOutput) ToResourceRulePatchOutputWithContext added in v3.20.0

func (o ResourceRulePatchOutput) ToResourceRulePatchOutputWithContext(ctx context.Context) ResourceRulePatchOutput

func (ResourceRulePatchOutput) Verbs added in v3.20.0

Verb is a list of kubernetes resource API verbs, like: get, list, watch, create, update, delete, proxy. "*" means all.

type SelfSubjectAccessReview

type SelfSubjectAccessReview struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string            `pulumi:"kind"`
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpec `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatus `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

type SelfSubjectAccessReviewArgs

type SelfSubjectAccessReviewArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpecInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrInput `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func (SelfSubjectAccessReviewArgs) ElementType

func (SelfSubjectAccessReviewArgs) ToSelfSubjectAccessReviewOutput added in v3.28.0

func (i SelfSubjectAccessReviewArgs) ToSelfSubjectAccessReviewOutput() SelfSubjectAccessReviewOutput

func (SelfSubjectAccessReviewArgs) ToSelfSubjectAccessReviewOutputWithContext added in v3.28.0

func (i SelfSubjectAccessReviewArgs) ToSelfSubjectAccessReviewOutputWithContext(ctx context.Context) SelfSubjectAccessReviewOutput

type SelfSubjectAccessReviewInput

type SelfSubjectAccessReviewInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewOutput() SelfSubjectAccessReviewOutput
	ToSelfSubjectAccessReviewOutputWithContext(context.Context) SelfSubjectAccessReviewOutput
}

SelfSubjectAccessReviewInput is an input type that accepts SelfSubjectAccessReviewArgs and SelfSubjectAccessReviewOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewInput` via:

SelfSubjectAccessReviewArgs{...}

type SelfSubjectAccessReviewOutput

type SelfSubjectAccessReviewOutput struct{ *pulumi.OutputState }

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func (SelfSubjectAccessReviewOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectAccessReviewOutput) ElementType

func (SelfSubjectAccessReviewOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectAccessReviewOutput) Metadata added in v3.19.1

func (SelfSubjectAccessReviewOutput) Spec added in v3.19.1

Spec holds information about the request being evaluated. user and groups must be empty

func (SelfSubjectAccessReviewOutput) Status added in v3.19.1

Status is filled in by the server and indicates whether the request is allowed or not

func (SelfSubjectAccessReviewOutput) ToSelfSubjectAccessReviewOutput

func (o SelfSubjectAccessReviewOutput) ToSelfSubjectAccessReviewOutput() SelfSubjectAccessReviewOutput

func (SelfSubjectAccessReviewOutput) ToSelfSubjectAccessReviewOutputWithContext

func (o SelfSubjectAccessReviewOutput) ToSelfSubjectAccessReviewOutputWithContext(ctx context.Context) SelfSubjectAccessReviewOutput

type SelfSubjectAccessReviewPatch added in v3.20.0

type SelfSubjectAccessReviewPatch struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string                 `pulumi:"kind"`
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec *SelfSubjectAccessReviewSpecPatch `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatusPatch `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

type SelfSubjectAccessReviewPatchArgs added in v3.20.0

type SelfSubjectAccessReviewPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.  user and groups must be empty
	Spec SelfSubjectAccessReviewSpecPatchPtrInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrInput `pulumi:"status"`
}

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func (SelfSubjectAccessReviewPatchArgs) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchArgs) ToSelfSubjectAccessReviewPatchOutput added in v3.28.0

func (i SelfSubjectAccessReviewPatchArgs) ToSelfSubjectAccessReviewPatchOutput() SelfSubjectAccessReviewPatchOutput

func (SelfSubjectAccessReviewPatchArgs) ToSelfSubjectAccessReviewPatchOutputWithContext added in v3.28.0

func (i SelfSubjectAccessReviewPatchArgs) ToSelfSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchOutput

type SelfSubjectAccessReviewPatchInput added in v3.20.0

type SelfSubjectAccessReviewPatchInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewPatchOutput() SelfSubjectAccessReviewPatchOutput
	ToSelfSubjectAccessReviewPatchOutputWithContext(context.Context) SelfSubjectAccessReviewPatchOutput
}

SelfSubjectAccessReviewPatchInput is an input type that accepts SelfSubjectAccessReviewPatchArgs and SelfSubjectAccessReviewPatchOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewPatchInput` via:

SelfSubjectAccessReviewPatchArgs{...}

type SelfSubjectAccessReviewPatchOutput added in v3.20.0

type SelfSubjectAccessReviewPatchOutput struct{ *pulumi.OutputState }

SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action

func (SelfSubjectAccessReviewPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectAccessReviewPatchOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectAccessReviewPatchOutput) Metadata added in v3.20.0

func (SelfSubjectAccessReviewPatchOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated. user and groups must be empty

func (SelfSubjectAccessReviewPatchOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (SelfSubjectAccessReviewPatchOutput) ToSelfSubjectAccessReviewPatchOutput added in v3.20.0

func (o SelfSubjectAccessReviewPatchOutput) ToSelfSubjectAccessReviewPatchOutput() SelfSubjectAccessReviewPatchOutput

func (SelfSubjectAccessReviewPatchOutput) ToSelfSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewPatchOutput) ToSelfSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewPatchOutput

type SelfSubjectAccessReviewSpec

type SelfSubjectAccessReviewSpec struct {
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes *NonResourceAttributes `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes *ResourceAttributes `pulumi:"resourceAttributes"`
}

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

type SelfSubjectAccessReviewSpecArgs

type SelfSubjectAccessReviewSpecArgs struct {
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes NonResourceAttributesPtrInput `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes ResourceAttributesPtrInput `pulumi:"resourceAttributes"`
}

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SelfSubjectAccessReviewSpecArgs) ElementType

func (SelfSubjectAccessReviewSpecArgs) ToSelfSubjectAccessReviewSpecOutput

func (i SelfSubjectAccessReviewSpecArgs) ToSelfSubjectAccessReviewSpecOutput() SelfSubjectAccessReviewSpecOutput

func (SelfSubjectAccessReviewSpecArgs) ToSelfSubjectAccessReviewSpecOutputWithContext

func (i SelfSubjectAccessReviewSpecArgs) ToSelfSubjectAccessReviewSpecOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecOutput

type SelfSubjectAccessReviewSpecInput

type SelfSubjectAccessReviewSpecInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewSpecOutput() SelfSubjectAccessReviewSpecOutput
	ToSelfSubjectAccessReviewSpecOutputWithContext(context.Context) SelfSubjectAccessReviewSpecOutput
}

SelfSubjectAccessReviewSpecInput is an input type that accepts SelfSubjectAccessReviewSpecArgs and SelfSubjectAccessReviewSpecOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewSpecInput` via:

SelfSubjectAccessReviewSpecArgs{...}

type SelfSubjectAccessReviewSpecOutput

type SelfSubjectAccessReviewSpecOutput struct{ *pulumi.OutputState }

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SelfSubjectAccessReviewSpecOutput) ElementType

func (SelfSubjectAccessReviewSpecOutput) NonResourceAttributes

NonResourceAttributes describes information for a non-resource access request

func (SelfSubjectAccessReviewSpecOutput) ResourceAttributes

ResourceAuthorizationAttributes describes information for a resource access request

func (SelfSubjectAccessReviewSpecOutput) ToSelfSubjectAccessReviewSpecOutput

func (o SelfSubjectAccessReviewSpecOutput) ToSelfSubjectAccessReviewSpecOutput() SelfSubjectAccessReviewSpecOutput

func (SelfSubjectAccessReviewSpecOutput) ToSelfSubjectAccessReviewSpecOutputWithContext

func (o SelfSubjectAccessReviewSpecOutput) ToSelfSubjectAccessReviewSpecOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecOutput

type SelfSubjectAccessReviewSpecPatch added in v3.20.0

type SelfSubjectAccessReviewSpecPatch struct {
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes *NonResourceAttributesPatch `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes *ResourceAttributesPatch `pulumi:"resourceAttributes"`
}

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

type SelfSubjectAccessReviewSpecPatchArgs added in v3.20.0

type SelfSubjectAccessReviewSpecPatchArgs struct {
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes NonResourceAttributesPatchPtrInput `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes ResourceAttributesPatchPtrInput `pulumi:"resourceAttributes"`
}

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SelfSubjectAccessReviewSpecPatchArgs) ElementType added in v3.20.0

func (SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchOutput added in v3.20.0

func (i SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchOutput() SelfSubjectAccessReviewSpecPatchOutput

func (SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchOutputWithContext added in v3.20.0

func (i SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchOutput

func (SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (i SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchPtrOutput() SelfSubjectAccessReviewSpecPatchPtrOutput

func (SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (i SelfSubjectAccessReviewSpecPatchArgs) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchPtrOutput

type SelfSubjectAccessReviewSpecPatchInput added in v3.20.0

type SelfSubjectAccessReviewSpecPatchInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewSpecPatchOutput() SelfSubjectAccessReviewSpecPatchOutput
	ToSelfSubjectAccessReviewSpecPatchOutputWithContext(context.Context) SelfSubjectAccessReviewSpecPatchOutput
}

SelfSubjectAccessReviewSpecPatchInput is an input type that accepts SelfSubjectAccessReviewSpecPatchArgs and SelfSubjectAccessReviewSpecPatchOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewSpecPatchInput` via:

SelfSubjectAccessReviewSpecPatchArgs{...}

type SelfSubjectAccessReviewSpecPatchOutput added in v3.20.0

type SelfSubjectAccessReviewSpecPatchOutput struct{ *pulumi.OutputState }

SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SelfSubjectAccessReviewSpecPatchOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewSpecPatchOutput) NonResourceAttributes added in v3.20.0

NonResourceAttributes describes information for a non-resource access request

func (SelfSubjectAccessReviewSpecPatchOutput) ResourceAttributes added in v3.20.0

ResourceAuthorizationAttributes describes information for a resource access request

func (SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchOutput added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchOutput() SelfSubjectAccessReviewSpecPatchOutput

func (SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchOutput

func (SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutput() SelfSubjectAccessReviewSpecPatchPtrOutput

func (SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchPtrOutput

type SelfSubjectAccessReviewSpecPatchPtrInput added in v3.20.0

type SelfSubjectAccessReviewSpecPatchPtrInput interface {
	pulumi.Input

	ToSelfSubjectAccessReviewSpecPatchPtrOutput() SelfSubjectAccessReviewSpecPatchPtrOutput
	ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext(context.Context) SelfSubjectAccessReviewSpecPatchPtrOutput
}

SelfSubjectAccessReviewSpecPatchPtrInput is an input type that accepts SelfSubjectAccessReviewSpecPatchArgs, SelfSubjectAccessReviewSpecPatchPtr and SelfSubjectAccessReviewSpecPatchPtrOutput values. You can construct a concrete instance of `SelfSubjectAccessReviewSpecPatchPtrInput` via:

        SelfSubjectAccessReviewSpecPatchArgs{...}

or:

        nil

type SelfSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

type SelfSubjectAccessReviewSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (SelfSubjectAccessReviewSpecPatchPtrOutput) Elem added in v3.20.0

func (SelfSubjectAccessReviewSpecPatchPtrOutput) ElementType added in v3.20.0

func (SelfSubjectAccessReviewSpecPatchPtrOutput) NonResourceAttributes added in v3.20.0

NonResourceAttributes describes information for a non-resource access request

func (SelfSubjectAccessReviewSpecPatchPtrOutput) ResourceAttributes added in v3.20.0

ResourceAuthorizationAttributes describes information for a resource access request

func (SelfSubjectAccessReviewSpecPatchPtrOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchPtrOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutput() SelfSubjectAccessReviewSpecPatchPtrOutput

func (SelfSubjectAccessReviewSpecPatchPtrOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SelfSubjectAccessReviewSpecPatchPtrOutput) ToSelfSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectAccessReviewSpecPatchPtrOutput

type SelfSubjectRulesReview

type SelfSubjectRulesReview struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string            `pulumi:"kind"`
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpec `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status *SubjectRulesReviewStatus `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

type SelfSubjectRulesReviewArgs

type SelfSubjectRulesReviewArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpecInput `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status SubjectRulesReviewStatusPtrInput `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func (SelfSubjectRulesReviewArgs) ElementType

func (SelfSubjectRulesReviewArgs) ElementType() reflect.Type

func (SelfSubjectRulesReviewArgs) ToSelfSubjectRulesReviewOutput added in v3.28.0

func (i SelfSubjectRulesReviewArgs) ToSelfSubjectRulesReviewOutput() SelfSubjectRulesReviewOutput

func (SelfSubjectRulesReviewArgs) ToSelfSubjectRulesReviewOutputWithContext added in v3.28.0

func (i SelfSubjectRulesReviewArgs) ToSelfSubjectRulesReviewOutputWithContext(ctx context.Context) SelfSubjectRulesReviewOutput

type SelfSubjectRulesReviewInput

type SelfSubjectRulesReviewInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewOutput() SelfSubjectRulesReviewOutput
	ToSelfSubjectRulesReviewOutputWithContext(context.Context) SelfSubjectRulesReviewOutput
}

SelfSubjectRulesReviewInput is an input type that accepts SelfSubjectRulesReviewArgs and SelfSubjectRulesReviewOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewInput` via:

SelfSubjectRulesReviewArgs{...}

type SelfSubjectRulesReviewOutput

type SelfSubjectRulesReviewOutput struct{ *pulumi.OutputState }

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func (SelfSubjectRulesReviewOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectRulesReviewOutput) ElementType

func (SelfSubjectRulesReviewOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectRulesReviewOutput) Metadata added in v3.19.1

func (SelfSubjectRulesReviewOutput) Spec added in v3.19.1

Spec holds information about the request being evaluated.

func (SelfSubjectRulesReviewOutput) Status added in v3.19.1

Status is filled in by the server and indicates the set of actions a user can perform.

func (SelfSubjectRulesReviewOutput) ToSelfSubjectRulesReviewOutput

func (o SelfSubjectRulesReviewOutput) ToSelfSubjectRulesReviewOutput() SelfSubjectRulesReviewOutput

func (SelfSubjectRulesReviewOutput) ToSelfSubjectRulesReviewOutputWithContext

func (o SelfSubjectRulesReviewOutput) ToSelfSubjectRulesReviewOutputWithContext(ctx context.Context) SelfSubjectRulesReviewOutput

type SelfSubjectRulesReviewPatch added in v3.20.0

type SelfSubjectRulesReviewPatch struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string                 `pulumi:"kind"`
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec *SelfSubjectRulesReviewSpecPatch `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status *SubjectRulesReviewStatusPatch `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

type SelfSubjectRulesReviewPatchArgs added in v3.20.0

type SelfSubjectRulesReviewPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated.
	Spec SelfSubjectRulesReviewSpecPatchPtrInput `pulumi:"spec"`
	// Status is filled in by the server and indicates the set of actions a user can perform.
	Status SubjectRulesReviewStatusPatchPtrInput `pulumi:"status"`
}

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func (SelfSubjectRulesReviewPatchArgs) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchArgs) ToSelfSubjectRulesReviewPatchOutput added in v3.28.0

func (i SelfSubjectRulesReviewPatchArgs) ToSelfSubjectRulesReviewPatchOutput() SelfSubjectRulesReviewPatchOutput

func (SelfSubjectRulesReviewPatchArgs) ToSelfSubjectRulesReviewPatchOutputWithContext added in v3.28.0

func (i SelfSubjectRulesReviewPatchArgs) ToSelfSubjectRulesReviewPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchOutput

type SelfSubjectRulesReviewPatchInput added in v3.20.0

type SelfSubjectRulesReviewPatchInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewPatchOutput() SelfSubjectRulesReviewPatchOutput
	ToSelfSubjectRulesReviewPatchOutputWithContext(context.Context) SelfSubjectRulesReviewPatchOutput
}

SelfSubjectRulesReviewPatchInput is an input type that accepts SelfSubjectRulesReviewPatchArgs and SelfSubjectRulesReviewPatchOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewPatchInput` via:

SelfSubjectRulesReviewPatchArgs{...}

type SelfSubjectRulesReviewPatchOutput added in v3.20.0

type SelfSubjectRulesReviewPatchOutput struct{ *pulumi.OutputState }

SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.

func (SelfSubjectRulesReviewPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SelfSubjectRulesReviewPatchOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SelfSubjectRulesReviewPatchOutput) Metadata added in v3.20.0

func (SelfSubjectRulesReviewPatchOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated.

func (SelfSubjectRulesReviewPatchOutput) Status added in v3.20.0

Status is filled in by the server and indicates the set of actions a user can perform.

func (SelfSubjectRulesReviewPatchOutput) ToSelfSubjectRulesReviewPatchOutput added in v3.20.0

func (o SelfSubjectRulesReviewPatchOutput) ToSelfSubjectRulesReviewPatchOutput() SelfSubjectRulesReviewPatchOutput

func (SelfSubjectRulesReviewPatchOutput) ToSelfSubjectRulesReviewPatchOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewPatchOutput) ToSelfSubjectRulesReviewPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewPatchOutput

type SelfSubjectRulesReviewSpec

type SelfSubjectRulesReviewSpec struct {
	// Namespace to evaluate rules for. Required.
	Namespace *string `pulumi:"namespace"`
}

type SelfSubjectRulesReviewSpecArgs

type SelfSubjectRulesReviewSpecArgs struct {
	// Namespace to evaluate rules for. Required.
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
}

func (SelfSubjectRulesReviewSpecArgs) ElementType

func (SelfSubjectRulesReviewSpecArgs) ToSelfSubjectRulesReviewSpecOutput

func (i SelfSubjectRulesReviewSpecArgs) ToSelfSubjectRulesReviewSpecOutput() SelfSubjectRulesReviewSpecOutput

func (SelfSubjectRulesReviewSpecArgs) ToSelfSubjectRulesReviewSpecOutputWithContext

func (i SelfSubjectRulesReviewSpecArgs) ToSelfSubjectRulesReviewSpecOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecOutput

type SelfSubjectRulesReviewSpecInput

type SelfSubjectRulesReviewSpecInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewSpecOutput() SelfSubjectRulesReviewSpecOutput
	ToSelfSubjectRulesReviewSpecOutputWithContext(context.Context) SelfSubjectRulesReviewSpecOutput
}

SelfSubjectRulesReviewSpecInput is an input type that accepts SelfSubjectRulesReviewSpecArgs and SelfSubjectRulesReviewSpecOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewSpecInput` via:

SelfSubjectRulesReviewSpecArgs{...}

type SelfSubjectRulesReviewSpecOutput

type SelfSubjectRulesReviewSpecOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewSpecOutput) ElementType

func (SelfSubjectRulesReviewSpecOutput) Namespace

Namespace to evaluate rules for. Required.

func (SelfSubjectRulesReviewSpecOutput) ToSelfSubjectRulesReviewSpecOutput

func (o SelfSubjectRulesReviewSpecOutput) ToSelfSubjectRulesReviewSpecOutput() SelfSubjectRulesReviewSpecOutput

func (SelfSubjectRulesReviewSpecOutput) ToSelfSubjectRulesReviewSpecOutputWithContext

func (o SelfSubjectRulesReviewSpecOutput) ToSelfSubjectRulesReviewSpecOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecOutput

type SelfSubjectRulesReviewSpecPatch added in v3.20.0

type SelfSubjectRulesReviewSpecPatch struct {
	// Namespace to evaluate rules for. Required.
	Namespace *string `pulumi:"namespace"`
}

type SelfSubjectRulesReviewSpecPatchArgs added in v3.20.0

type SelfSubjectRulesReviewSpecPatchArgs struct {
	// Namespace to evaluate rules for. Required.
	Namespace pulumi.StringPtrInput `pulumi:"namespace"`
}

func (SelfSubjectRulesReviewSpecPatchArgs) ElementType added in v3.20.0

func (SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchOutput added in v3.20.0

func (i SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchOutput() SelfSubjectRulesReviewSpecPatchOutput

func (SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchOutputWithContext added in v3.20.0

func (i SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchOutput

func (SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchPtrOutput added in v3.20.0

func (i SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchPtrOutput() SelfSubjectRulesReviewSpecPatchPtrOutput

func (SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (i SelfSubjectRulesReviewSpecPatchArgs) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchPtrOutput

type SelfSubjectRulesReviewSpecPatchInput added in v3.20.0

type SelfSubjectRulesReviewSpecPatchInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewSpecPatchOutput() SelfSubjectRulesReviewSpecPatchOutput
	ToSelfSubjectRulesReviewSpecPatchOutputWithContext(context.Context) SelfSubjectRulesReviewSpecPatchOutput
}

SelfSubjectRulesReviewSpecPatchInput is an input type that accepts SelfSubjectRulesReviewSpecPatchArgs and SelfSubjectRulesReviewSpecPatchOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewSpecPatchInput` via:

SelfSubjectRulesReviewSpecPatchArgs{...}

type SelfSubjectRulesReviewSpecPatchOutput added in v3.20.0

type SelfSubjectRulesReviewSpecPatchOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewSpecPatchOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewSpecPatchOutput) Namespace added in v3.20.0

Namespace to evaluate rules for. Required.

func (SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchOutput added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchOutput() SelfSubjectRulesReviewSpecPatchOutput

func (SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchOutput

func (SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutput added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutput() SelfSubjectRulesReviewSpecPatchPtrOutput

func (SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchPtrOutput

type SelfSubjectRulesReviewSpecPatchPtrInput added in v3.20.0

type SelfSubjectRulesReviewSpecPatchPtrInput interface {
	pulumi.Input

	ToSelfSubjectRulesReviewSpecPatchPtrOutput() SelfSubjectRulesReviewSpecPatchPtrOutput
	ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext(context.Context) SelfSubjectRulesReviewSpecPatchPtrOutput
}

SelfSubjectRulesReviewSpecPatchPtrInput is an input type that accepts SelfSubjectRulesReviewSpecPatchArgs, SelfSubjectRulesReviewSpecPatchPtr and SelfSubjectRulesReviewSpecPatchPtrOutput values. You can construct a concrete instance of `SelfSubjectRulesReviewSpecPatchPtrInput` via:

        SelfSubjectRulesReviewSpecPatchArgs{...}

or:

        nil

type SelfSubjectRulesReviewSpecPatchPtrOutput added in v3.20.0

type SelfSubjectRulesReviewSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (SelfSubjectRulesReviewSpecPatchPtrOutput) Elem added in v3.20.0

func (SelfSubjectRulesReviewSpecPatchPtrOutput) ElementType added in v3.20.0

func (SelfSubjectRulesReviewSpecPatchPtrOutput) Namespace added in v3.20.0

Namespace to evaluate rules for. Required.

func (SelfSubjectRulesReviewSpecPatchPtrOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutput added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchPtrOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutput() SelfSubjectRulesReviewSpecPatchPtrOutput

func (SelfSubjectRulesReviewSpecPatchPtrOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SelfSubjectRulesReviewSpecPatchPtrOutput) ToSelfSubjectRulesReviewSpecPatchPtrOutputWithContext(ctx context.Context) SelfSubjectRulesReviewSpecPatchPtrOutput

type SubjectAccessReview

type SubjectAccessReview struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string            `pulumi:"kind"`
	Metadata *metav1.ObjectMeta `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpec `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatus `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

type SubjectAccessReviewArgs

type SubjectAccessReviewArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput     `pulumi:"kind"`
	Metadata metav1.ObjectMetaPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpecInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPtrInput `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

func (SubjectAccessReviewArgs) ElementType

func (SubjectAccessReviewArgs) ElementType() reflect.Type

func (SubjectAccessReviewArgs) ToSubjectAccessReviewOutput added in v3.28.0

func (i SubjectAccessReviewArgs) ToSubjectAccessReviewOutput() SubjectAccessReviewOutput

func (SubjectAccessReviewArgs) ToSubjectAccessReviewOutputWithContext added in v3.28.0

func (i SubjectAccessReviewArgs) ToSubjectAccessReviewOutputWithContext(ctx context.Context) SubjectAccessReviewOutput

type SubjectAccessReviewInput

type SubjectAccessReviewInput interface {
	pulumi.Input

	ToSubjectAccessReviewOutput() SubjectAccessReviewOutput
	ToSubjectAccessReviewOutputWithContext(context.Context) SubjectAccessReviewOutput
}

SubjectAccessReviewInput is an input type that accepts SubjectAccessReviewArgs and SubjectAccessReviewOutput values. You can construct a concrete instance of `SubjectAccessReviewInput` via:

SubjectAccessReviewArgs{...}

type SubjectAccessReviewOutput

type SubjectAccessReviewOutput struct{ *pulumi.OutputState }

SubjectAccessReview checks whether or not a user or group can perform an action.

func (SubjectAccessReviewOutput) ApiVersion added in v3.19.1

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SubjectAccessReviewOutput) ElementType

func (SubjectAccessReviewOutput) ElementType() reflect.Type

func (SubjectAccessReviewOutput) Kind added in v3.19.1

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SubjectAccessReviewOutput) Metadata added in v3.19.1

func (SubjectAccessReviewOutput) Spec added in v3.19.1

Spec holds information about the request being evaluated

func (SubjectAccessReviewOutput) Status added in v3.19.1

Status is filled in by the server and indicates whether the request is allowed or not

func (SubjectAccessReviewOutput) ToSubjectAccessReviewOutput

func (o SubjectAccessReviewOutput) ToSubjectAccessReviewOutput() SubjectAccessReviewOutput

func (SubjectAccessReviewOutput) ToSubjectAccessReviewOutputWithContext

func (o SubjectAccessReviewOutput) ToSubjectAccessReviewOutputWithContext(ctx context.Context) SubjectAccessReviewOutput

type SubjectAccessReviewPatch added in v3.20.0

type SubjectAccessReviewPatch struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion *string `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     *string                 `pulumi:"kind"`
	Metadata *metav1.ObjectMetaPatch `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec *SubjectAccessReviewSpecPatch `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status *SubjectAccessReviewStatusPatch `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

type SubjectAccessReviewPatchArgs added in v3.20.0

type SubjectAccessReviewPatchArgs struct {
	// APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
	ApiVersion pulumi.StringPtrInput `pulumi:"apiVersion"`
	// Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
	Kind     pulumi.StringPtrInput          `pulumi:"kind"`
	Metadata metav1.ObjectMetaPatchPtrInput `pulumi:"metadata"`
	// Spec holds information about the request being evaluated
	Spec SubjectAccessReviewSpecPatchPtrInput `pulumi:"spec"`
	// Status is filled in by the server and indicates whether the request is allowed or not
	Status SubjectAccessReviewStatusPatchPtrInput `pulumi:"status"`
}

SubjectAccessReview checks whether or not a user or group can perform an action.

func (SubjectAccessReviewPatchArgs) ElementType added in v3.20.0

func (SubjectAccessReviewPatchArgs) ToSubjectAccessReviewPatchOutput added in v3.28.0

func (i SubjectAccessReviewPatchArgs) ToSubjectAccessReviewPatchOutput() SubjectAccessReviewPatchOutput

func (SubjectAccessReviewPatchArgs) ToSubjectAccessReviewPatchOutputWithContext added in v3.28.0

func (i SubjectAccessReviewPatchArgs) ToSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SubjectAccessReviewPatchOutput

type SubjectAccessReviewPatchInput added in v3.20.0

type SubjectAccessReviewPatchInput interface {
	pulumi.Input

	ToSubjectAccessReviewPatchOutput() SubjectAccessReviewPatchOutput
	ToSubjectAccessReviewPatchOutputWithContext(context.Context) SubjectAccessReviewPatchOutput
}

SubjectAccessReviewPatchInput is an input type that accepts SubjectAccessReviewPatchArgs and SubjectAccessReviewPatchOutput values. You can construct a concrete instance of `SubjectAccessReviewPatchInput` via:

SubjectAccessReviewPatchArgs{...}

type SubjectAccessReviewPatchOutput added in v3.20.0

type SubjectAccessReviewPatchOutput struct{ *pulumi.OutputState }

SubjectAccessReview checks whether or not a user or group can perform an action.

func (SubjectAccessReviewPatchOutput) ApiVersion added in v3.20.0

APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

func (SubjectAccessReviewPatchOutput) ElementType added in v3.20.0

func (SubjectAccessReviewPatchOutput) Kind added in v3.20.0

Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

func (SubjectAccessReviewPatchOutput) Metadata added in v3.20.0

func (SubjectAccessReviewPatchOutput) Spec added in v3.20.0

Spec holds information about the request being evaluated

func (SubjectAccessReviewPatchOutput) Status added in v3.20.0

Status is filled in by the server and indicates whether the request is allowed or not

func (SubjectAccessReviewPatchOutput) ToSubjectAccessReviewPatchOutput added in v3.20.0

func (o SubjectAccessReviewPatchOutput) ToSubjectAccessReviewPatchOutput() SubjectAccessReviewPatchOutput

func (SubjectAccessReviewPatchOutput) ToSubjectAccessReviewPatchOutputWithContext added in v3.20.0

func (o SubjectAccessReviewPatchOutput) ToSubjectAccessReviewPatchOutputWithContext(ctx context.Context) SubjectAccessReviewPatchOutput

type SubjectAccessReviewSpec

type SubjectAccessReviewSpec struct {
	// Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.
	Extra map[string][]string `pulumi:"extra"`
	// Groups is the groups you're testing for.
	Group []string `pulumi:"group"`
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes *NonResourceAttributes `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes *ResourceAttributes `pulumi:"resourceAttributes"`
	// UID information about the requesting user.
	Uid *string `pulumi:"uid"`
	// User is the user you're testing for. If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups
	User *string `pulumi:"user"`
}

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

type SubjectAccessReviewSpecArgs

type SubjectAccessReviewSpecArgs struct {
	// Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.
	Extra pulumi.StringArrayMapInput `pulumi:"extra"`
	// Groups is the groups you're testing for.
	Group pulumi.StringArrayInput `pulumi:"group"`
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes NonResourceAttributesPtrInput `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes ResourceAttributesPtrInput `pulumi:"resourceAttributes"`
	// UID information about the requesting user.
	Uid pulumi.StringPtrInput `pulumi:"uid"`
	// User is the user you're testing for. If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups
	User pulumi.StringPtrInput `pulumi:"user"`
}

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SubjectAccessReviewSpecArgs) ElementType

func (SubjectAccessReviewSpecArgs) ToSubjectAccessReviewSpecOutput

func (i SubjectAccessReviewSpecArgs) ToSubjectAccessReviewSpecOutput() SubjectAccessReviewSpecOutput

func (SubjectAccessReviewSpecArgs) ToSubjectAccessReviewSpecOutputWithContext

func (i SubjectAccessReviewSpecArgs) ToSubjectAccessReviewSpecOutputWithContext(ctx context.Context) SubjectAccessReviewSpecOutput

type SubjectAccessReviewSpecInput

type SubjectAccessReviewSpecInput interface {
	pulumi.Input

	ToSubjectAccessReviewSpecOutput() SubjectAccessReviewSpecOutput
	ToSubjectAccessReviewSpecOutputWithContext(context.Context) SubjectAccessReviewSpecOutput
}

SubjectAccessReviewSpecInput is an input type that accepts SubjectAccessReviewSpecArgs and SubjectAccessReviewSpecOutput values. You can construct a concrete instance of `SubjectAccessReviewSpecInput` via:

SubjectAccessReviewSpecArgs{...}

type SubjectAccessReviewSpecOutput

type SubjectAccessReviewSpecOutput struct{ *pulumi.OutputState }

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SubjectAccessReviewSpecOutput) ElementType

func (SubjectAccessReviewSpecOutput) Extra

Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.

func (SubjectAccessReviewSpecOutput) Group

Groups is the groups you're testing for.

func (SubjectAccessReviewSpecOutput) NonResourceAttributes

NonResourceAttributes describes information for a non-resource access request

func (SubjectAccessReviewSpecOutput) ResourceAttributes

ResourceAuthorizationAttributes describes information for a resource access request

func (SubjectAccessReviewSpecOutput) ToSubjectAccessReviewSpecOutput

func (o SubjectAccessReviewSpecOutput) ToSubjectAccessReviewSpecOutput() SubjectAccessReviewSpecOutput

func (SubjectAccessReviewSpecOutput) ToSubjectAccessReviewSpecOutputWithContext

func (o SubjectAccessReviewSpecOutput) ToSubjectAccessReviewSpecOutputWithContext(ctx context.Context) SubjectAccessReviewSpecOutput

func (SubjectAccessReviewSpecOutput) Uid

UID information about the requesting user.

func (SubjectAccessReviewSpecOutput) User

User is the user you're testing for. If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups

type SubjectAccessReviewSpecPatch added in v3.20.0

type SubjectAccessReviewSpecPatch struct {
	// Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.
	Extra map[string][]string `pulumi:"extra"`
	// Groups is the groups you're testing for.
	Group []string `pulumi:"group"`
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes *NonResourceAttributesPatch `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes *ResourceAttributesPatch `pulumi:"resourceAttributes"`
	// UID information about the requesting user.
	Uid *string `pulumi:"uid"`
	// User is the user you're testing for. If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups
	User *string `pulumi:"user"`
}

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

type SubjectAccessReviewSpecPatchArgs added in v3.20.0

type SubjectAccessReviewSpecPatchArgs struct {
	// Extra corresponds to the user.Info.GetExtra() method from the authenticator.  Since that is input to the authorizer it needs a reflection here.
	Extra pulumi.StringArrayMapInput `pulumi:"extra"`
	// Groups is the groups you're testing for.
	Group pulumi.StringArrayInput `pulumi:"group"`
	// NonResourceAttributes describes information for a non-resource access request
	NonResourceAttributes NonResourceAttributesPatchPtrInput `pulumi:"nonResourceAttributes"`
	// ResourceAuthorizationAttributes describes information for a resource access request
	ResourceAttributes ResourceAttributesPatchPtrInput `pulumi:"resourceAttributes"`
	// UID information about the requesting user.
	Uid pulumi.StringPtrInput `pulumi:"uid"`
	// User is the user you're testing for. If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups
	User pulumi.StringPtrInput `pulumi:"user"`
}

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SubjectAccessReviewSpecPatchArgs) ElementType added in v3.20.0

func (SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchOutput added in v3.20.0

func (i SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchOutput() SubjectAccessReviewSpecPatchOutput

func (SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchOutputWithContext added in v3.20.0

func (i SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchOutput

func (SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (i SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchPtrOutput() SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (i SubjectAccessReviewSpecPatchArgs) ToSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchPtrOutput

type SubjectAccessReviewSpecPatchInput added in v3.20.0

type SubjectAccessReviewSpecPatchInput interface {
	pulumi.Input

	ToSubjectAccessReviewSpecPatchOutput() SubjectAccessReviewSpecPatchOutput
	ToSubjectAccessReviewSpecPatchOutputWithContext(context.Context) SubjectAccessReviewSpecPatchOutput
}

SubjectAccessReviewSpecPatchInput is an input type that accepts SubjectAccessReviewSpecPatchArgs and SubjectAccessReviewSpecPatchOutput values. You can construct a concrete instance of `SubjectAccessReviewSpecPatchInput` via:

SubjectAccessReviewSpecPatchArgs{...}

type SubjectAccessReviewSpecPatchOutput added in v3.20.0

type SubjectAccessReviewSpecPatchOutput struct{ *pulumi.OutputState }

SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set

func (SubjectAccessReviewSpecPatchOutput) ElementType added in v3.20.0

func (SubjectAccessReviewSpecPatchOutput) Extra added in v3.20.0

Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.

func (SubjectAccessReviewSpecPatchOutput) Group added in v3.20.0

Groups is the groups you're testing for.

func (SubjectAccessReviewSpecPatchOutput) NonResourceAttributes added in v3.20.0

NonResourceAttributes describes information for a non-resource access request

func (SubjectAccessReviewSpecPatchOutput) ResourceAttributes added in v3.20.0

ResourceAuthorizationAttributes describes information for a resource access request

func (SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchOutput added in v3.20.0

func (o SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchOutput() SubjectAccessReviewSpecPatchOutput

func (SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchOutputWithContext added in v3.20.0

func (o SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchOutput

func (SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (o SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchPtrOutput() SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SubjectAccessReviewSpecPatchOutput) ToSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchOutput) Uid added in v3.20.0

UID information about the requesting user.

func (SubjectAccessReviewSpecPatchOutput) User added in v3.20.0

User is the user you're testing for. If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups

type SubjectAccessReviewSpecPatchPtrInput added in v3.20.0

type SubjectAccessReviewSpecPatchPtrInput interface {
	pulumi.Input

	ToSubjectAccessReviewSpecPatchPtrOutput() SubjectAccessReviewSpecPatchPtrOutput
	ToSubjectAccessReviewSpecPatchPtrOutputWithContext(context.Context) SubjectAccessReviewSpecPatchPtrOutput
}

SubjectAccessReviewSpecPatchPtrInput is an input type that accepts SubjectAccessReviewSpecPatchArgs, SubjectAccessReviewSpecPatchPtr and SubjectAccessReviewSpecPatchPtrOutput values. You can construct a concrete instance of `SubjectAccessReviewSpecPatchPtrInput` via:

        SubjectAccessReviewSpecPatchArgs{...}

or:

        nil

func SubjectAccessReviewSpecPatchPtr added in v3.20.0

type SubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

type SubjectAccessReviewSpecPatchPtrOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewSpecPatchPtrOutput) Elem added in v3.20.0

func (SubjectAccessReviewSpecPatchPtrOutput) ElementType added in v3.20.0

func (SubjectAccessReviewSpecPatchPtrOutput) Extra added in v3.20.0

Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer it needs a reflection here.

func (SubjectAccessReviewSpecPatchPtrOutput) Group added in v3.20.0

Groups is the groups you're testing for.

func (SubjectAccessReviewSpecPatchPtrOutput) NonResourceAttributes added in v3.20.0

NonResourceAttributes describes information for a non-resource access request

func (SubjectAccessReviewSpecPatchPtrOutput) ResourceAttributes added in v3.20.0

ResourceAuthorizationAttributes describes information for a resource access request

func (SubjectAccessReviewSpecPatchPtrOutput) ToSubjectAccessReviewSpecPatchPtrOutput added in v3.20.0

func (o SubjectAccessReviewSpecPatchPtrOutput) ToSubjectAccessReviewSpecPatchPtrOutput() SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchPtrOutput) ToSubjectAccessReviewSpecPatchPtrOutputWithContext added in v3.20.0

func (o SubjectAccessReviewSpecPatchPtrOutput) ToSubjectAccessReviewSpecPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewSpecPatchPtrOutput

func (SubjectAccessReviewSpecPatchPtrOutput) Uid added in v3.20.0

UID information about the requesting user.

func (SubjectAccessReviewSpecPatchPtrOutput) User added in v3.20.0

User is the user you're testing for. If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups

type SubjectAccessReviewStatus

type SubjectAccessReviewStatus struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed bool `pulumi:"allowed"`
	// Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
	Denied *bool `pulumi:"denied"`
	// EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
	EvaluationError *string `pulumi:"evaluationError"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason *string `pulumi:"reason"`
}

SubjectAccessReviewStatus

type SubjectAccessReviewStatusArgs

type SubjectAccessReviewStatusArgs struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed pulumi.BoolInput `pulumi:"allowed"`
	// Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
	Denied pulumi.BoolPtrInput `pulumi:"denied"`
	// EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
	EvaluationError pulumi.StringPtrInput `pulumi:"evaluationError"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason pulumi.StringPtrInput `pulumi:"reason"`
}

SubjectAccessReviewStatus

func (SubjectAccessReviewStatusArgs) ElementType

func (SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusOutput

func (i SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusOutput() SubjectAccessReviewStatusOutput

func (SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusOutputWithContext

func (i SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusOutputWithContext(ctx context.Context) SubjectAccessReviewStatusOutput

func (SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusPtrOutput

func (i SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusPtrOutput() SubjectAccessReviewStatusPtrOutput

func (SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusPtrOutputWithContext

func (i SubjectAccessReviewStatusArgs) ToSubjectAccessReviewStatusPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPtrOutput

type SubjectAccessReviewStatusInput

type SubjectAccessReviewStatusInput interface {
	pulumi.Input

	ToSubjectAccessReviewStatusOutput() SubjectAccessReviewStatusOutput
	ToSubjectAccessReviewStatusOutputWithContext(context.Context) SubjectAccessReviewStatusOutput
}

SubjectAccessReviewStatusInput is an input type that accepts SubjectAccessReviewStatusArgs and SubjectAccessReviewStatusOutput values. You can construct a concrete instance of `SubjectAccessReviewStatusInput` via:

SubjectAccessReviewStatusArgs{...}

type SubjectAccessReviewStatusOutput

type SubjectAccessReviewStatusOutput struct{ *pulumi.OutputState }

SubjectAccessReviewStatus

func (SubjectAccessReviewStatusOutput) Allowed

Allowed is required. True if the action would be allowed, false otherwise.

func (SubjectAccessReviewStatusOutput) Denied

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

func (SubjectAccessReviewStatusOutput) ElementType

func (SubjectAccessReviewStatusOutput) EvaluationError

EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.

func (SubjectAccessReviewStatusOutput) Reason

Reason is optional. It indicates why a request was allowed or denied.

func (SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusOutput

func (o SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusOutput() SubjectAccessReviewStatusOutput

func (SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusOutputWithContext

func (o SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusOutputWithContext(ctx context.Context) SubjectAccessReviewStatusOutput

func (SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusPtrOutput

func (o SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusPtrOutput() SubjectAccessReviewStatusPtrOutput

func (SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusPtrOutputWithContext

func (o SubjectAccessReviewStatusOutput) ToSubjectAccessReviewStatusPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPtrOutput

type SubjectAccessReviewStatusPatch added in v3.20.0

type SubjectAccessReviewStatusPatch struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed *bool `pulumi:"allowed"`
	// Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
	Denied *bool `pulumi:"denied"`
	// EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
	EvaluationError *string `pulumi:"evaluationError"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason *string `pulumi:"reason"`
}

SubjectAccessReviewStatus

type SubjectAccessReviewStatusPatchArgs added in v3.20.0

type SubjectAccessReviewStatusPatchArgs struct {
	// Allowed is required. True if the action would be allowed, false otherwise.
	Allowed pulumi.BoolPtrInput `pulumi:"allowed"`
	// Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.
	Denied pulumi.BoolPtrInput `pulumi:"denied"`
	// EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.
	EvaluationError pulumi.StringPtrInput `pulumi:"evaluationError"`
	// Reason is optional.  It indicates why a request was allowed or denied.
	Reason pulumi.StringPtrInput `pulumi:"reason"`
}

SubjectAccessReviewStatus

func (SubjectAccessReviewStatusPatchArgs) ElementType added in v3.20.0

func (SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchOutput added in v3.20.0

func (i SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchOutput() SubjectAccessReviewStatusPatchOutput

func (SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchOutputWithContext added in v3.20.0

func (i SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchOutput

func (SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchPtrOutput added in v3.20.0

func (i SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchPtrOutput() SubjectAccessReviewStatusPatchPtrOutput

func (SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (i SubjectAccessReviewStatusPatchArgs) ToSubjectAccessReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchPtrOutput

type SubjectAccessReviewStatusPatchInput added in v3.20.0

type SubjectAccessReviewStatusPatchInput interface {
	pulumi.Input

	ToSubjectAccessReviewStatusPatchOutput() SubjectAccessReviewStatusPatchOutput
	ToSubjectAccessReviewStatusPatchOutputWithContext(context.Context) SubjectAccessReviewStatusPatchOutput
}

SubjectAccessReviewStatusPatchInput is an input type that accepts SubjectAccessReviewStatusPatchArgs and SubjectAccessReviewStatusPatchOutput values. You can construct a concrete instance of `SubjectAccessReviewStatusPatchInput` via:

SubjectAccessReviewStatusPatchArgs{...}

type SubjectAccessReviewStatusPatchOutput added in v3.20.0

type SubjectAccessReviewStatusPatchOutput struct{ *pulumi.OutputState }

SubjectAccessReviewStatus

func (SubjectAccessReviewStatusPatchOutput) Allowed added in v3.20.0

Allowed is required. True if the action would be allowed, false otherwise.

func (SubjectAccessReviewStatusPatchOutput) Denied added in v3.20.0

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

func (SubjectAccessReviewStatusPatchOutput) ElementType added in v3.20.0

func (SubjectAccessReviewStatusPatchOutput) EvaluationError added in v3.20.0

EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.

func (SubjectAccessReviewStatusPatchOutput) Reason added in v3.20.0

Reason is optional. It indicates why a request was allowed or denied.

func (SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchOutput added in v3.20.0

func (o SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchOutput() SubjectAccessReviewStatusPatchOutput

func (SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchOutputWithContext added in v3.20.0

func (o SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchOutput

func (SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchPtrOutput added in v3.20.0

func (o SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchPtrOutput() SubjectAccessReviewStatusPatchPtrOutput

func (SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (o SubjectAccessReviewStatusPatchOutput) ToSubjectAccessReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchPtrOutput

type SubjectAccessReviewStatusPatchPtrInput added in v3.20.0

type SubjectAccessReviewStatusPatchPtrInput interface {
	pulumi.Input

	ToSubjectAccessReviewStatusPatchPtrOutput() SubjectAccessReviewStatusPatchPtrOutput
	ToSubjectAccessReviewStatusPatchPtrOutputWithContext(context.Context) SubjectAccessReviewStatusPatchPtrOutput
}

SubjectAccessReviewStatusPatchPtrInput is an input type that accepts SubjectAccessReviewStatusPatchArgs, SubjectAccessReviewStatusPatchPtr and SubjectAccessReviewStatusPatchPtrOutput values. You can construct a concrete instance of `SubjectAccessReviewStatusPatchPtrInput` via:

        SubjectAccessReviewStatusPatchArgs{...}

or:

        nil

type SubjectAccessReviewStatusPatchPtrOutput added in v3.20.0

type SubjectAccessReviewStatusPatchPtrOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewStatusPatchPtrOutput) Allowed added in v3.20.0

Allowed is required. True if the action would be allowed, false otherwise.

func (SubjectAccessReviewStatusPatchPtrOutput) Denied added in v3.20.0

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

func (SubjectAccessReviewStatusPatchPtrOutput) Elem added in v3.20.0

func (SubjectAccessReviewStatusPatchPtrOutput) ElementType added in v3.20.0

func (SubjectAccessReviewStatusPatchPtrOutput) EvaluationError added in v3.20.0

EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.

func (SubjectAccessReviewStatusPatchPtrOutput) Reason added in v3.20.0

Reason is optional. It indicates why a request was allowed or denied.

func (SubjectAccessReviewStatusPatchPtrOutput) ToSubjectAccessReviewStatusPatchPtrOutput added in v3.20.0

func (o SubjectAccessReviewStatusPatchPtrOutput) ToSubjectAccessReviewStatusPatchPtrOutput() SubjectAccessReviewStatusPatchPtrOutput

func (SubjectAccessReviewStatusPatchPtrOutput) ToSubjectAccessReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (o SubjectAccessReviewStatusPatchPtrOutput) ToSubjectAccessReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPatchPtrOutput

type SubjectAccessReviewStatusPtrInput

type SubjectAccessReviewStatusPtrInput interface {
	pulumi.Input

	ToSubjectAccessReviewStatusPtrOutput() SubjectAccessReviewStatusPtrOutput
	ToSubjectAccessReviewStatusPtrOutputWithContext(context.Context) SubjectAccessReviewStatusPtrOutput
}

SubjectAccessReviewStatusPtrInput is an input type that accepts SubjectAccessReviewStatusArgs, SubjectAccessReviewStatusPtr and SubjectAccessReviewStatusPtrOutput values. You can construct a concrete instance of `SubjectAccessReviewStatusPtrInput` via:

        SubjectAccessReviewStatusArgs{...}

or:

        nil

type SubjectAccessReviewStatusPtrOutput

type SubjectAccessReviewStatusPtrOutput struct{ *pulumi.OutputState }

func (SubjectAccessReviewStatusPtrOutput) Allowed

Allowed is required. True if the action would be allowed, false otherwise.

func (SubjectAccessReviewStatusPtrOutput) Denied

Denied is optional. True if the action would be denied, otherwise false. If both allowed is false and denied is false, then the authorizer has no opinion on whether to authorize the action. Denied may not be true if Allowed is true.

func (SubjectAccessReviewStatusPtrOutput) Elem

func (SubjectAccessReviewStatusPtrOutput) ElementType

func (SubjectAccessReviewStatusPtrOutput) EvaluationError

EvaluationError is an indication that some error occurred during the authorization check. It is entirely possible to get an error and be able to continue determine authorization status in spite of it. For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request.

func (SubjectAccessReviewStatusPtrOutput) Reason

Reason is optional. It indicates why a request was allowed or denied.

func (SubjectAccessReviewStatusPtrOutput) ToSubjectAccessReviewStatusPtrOutput

func (o SubjectAccessReviewStatusPtrOutput) ToSubjectAccessReviewStatusPtrOutput() SubjectAccessReviewStatusPtrOutput

func (SubjectAccessReviewStatusPtrOutput) ToSubjectAccessReviewStatusPtrOutputWithContext

func (o SubjectAccessReviewStatusPtrOutput) ToSubjectAccessReviewStatusPtrOutputWithContext(ctx context.Context) SubjectAccessReviewStatusPtrOutput

type SubjectRulesReviewStatus

type SubjectRulesReviewStatus struct {
	// EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
	EvaluationError *string `pulumi:"evaluationError"`
	// Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
	Incomplete bool `pulumi:"incomplete"`
	// NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	NonResourceRules []NonResourceRule `pulumi:"nonResourceRules"`
	// ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	ResourceRules []ResourceRule `pulumi:"resourceRules"`
}

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

type SubjectRulesReviewStatusArgs

type SubjectRulesReviewStatusArgs struct {
	// EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
	EvaluationError pulumi.StringPtrInput `pulumi:"evaluationError"`
	// Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
	Incomplete pulumi.BoolInput `pulumi:"incomplete"`
	// NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	NonResourceRules NonResourceRuleArrayInput `pulumi:"nonResourceRules"`
	// ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	ResourceRules ResourceRuleArrayInput `pulumi:"resourceRules"`
}

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

func (SubjectRulesReviewStatusArgs) ElementType

func (SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusOutput

func (i SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusOutput() SubjectRulesReviewStatusOutput

func (SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusOutputWithContext

func (i SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusOutputWithContext(ctx context.Context) SubjectRulesReviewStatusOutput

func (SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusPtrOutput

func (i SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusPtrOutput() SubjectRulesReviewStatusPtrOutput

func (SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusPtrOutputWithContext

func (i SubjectRulesReviewStatusArgs) ToSubjectRulesReviewStatusPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPtrOutput

type SubjectRulesReviewStatusInput

type SubjectRulesReviewStatusInput interface {
	pulumi.Input

	ToSubjectRulesReviewStatusOutput() SubjectRulesReviewStatusOutput
	ToSubjectRulesReviewStatusOutputWithContext(context.Context) SubjectRulesReviewStatusOutput
}

SubjectRulesReviewStatusInput is an input type that accepts SubjectRulesReviewStatusArgs and SubjectRulesReviewStatusOutput values. You can construct a concrete instance of `SubjectRulesReviewStatusInput` via:

SubjectRulesReviewStatusArgs{...}

type SubjectRulesReviewStatusOutput

type SubjectRulesReviewStatusOutput struct{ *pulumi.OutputState }

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

func (SubjectRulesReviewStatusOutput) ElementType

func (SubjectRulesReviewStatusOutput) EvaluationError

EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.

func (SubjectRulesReviewStatusOutput) Incomplete

Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.

func (SubjectRulesReviewStatusOutput) NonResourceRules

NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusOutput) ResourceRules

ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusOutput

func (o SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusOutput() SubjectRulesReviewStatusOutput

func (SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusOutputWithContext

func (o SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusOutputWithContext(ctx context.Context) SubjectRulesReviewStatusOutput

func (SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusPtrOutput

func (o SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusPtrOutput() SubjectRulesReviewStatusPtrOutput

func (SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusPtrOutputWithContext

func (o SubjectRulesReviewStatusOutput) ToSubjectRulesReviewStatusPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPtrOutput

type SubjectRulesReviewStatusPatch added in v3.20.0

type SubjectRulesReviewStatusPatch struct {
	// EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
	EvaluationError *string `pulumi:"evaluationError"`
	// Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
	Incomplete *bool `pulumi:"incomplete"`
	// NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	NonResourceRules []NonResourceRulePatch `pulumi:"nonResourceRules"`
	// ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	ResourceRules []ResourceRulePatch `pulumi:"resourceRules"`
}

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

type SubjectRulesReviewStatusPatchArgs added in v3.20.0

type SubjectRulesReviewStatusPatchArgs struct {
	// EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.
	EvaluationError pulumi.StringPtrInput `pulumi:"evaluationError"`
	// Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.
	Incomplete pulumi.BoolPtrInput `pulumi:"incomplete"`
	// NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	NonResourceRules NonResourceRulePatchArrayInput `pulumi:"nonResourceRules"`
	// ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.
	ResourceRules ResourceRulePatchArrayInput `pulumi:"resourceRules"`
}

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

func (SubjectRulesReviewStatusPatchArgs) ElementType added in v3.20.0

func (SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchOutput added in v3.20.0

func (i SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchOutput() SubjectRulesReviewStatusPatchOutput

func (SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchOutputWithContext added in v3.20.0

func (i SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchOutput

func (SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchPtrOutput added in v3.20.0

func (i SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchPtrOutput() SubjectRulesReviewStatusPatchPtrOutput

func (SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (i SubjectRulesReviewStatusPatchArgs) ToSubjectRulesReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchPtrOutput

type SubjectRulesReviewStatusPatchInput added in v3.20.0

type SubjectRulesReviewStatusPatchInput interface {
	pulumi.Input

	ToSubjectRulesReviewStatusPatchOutput() SubjectRulesReviewStatusPatchOutput
	ToSubjectRulesReviewStatusPatchOutputWithContext(context.Context) SubjectRulesReviewStatusPatchOutput
}

SubjectRulesReviewStatusPatchInput is an input type that accepts SubjectRulesReviewStatusPatchArgs and SubjectRulesReviewStatusPatchOutput values. You can construct a concrete instance of `SubjectRulesReviewStatusPatchInput` via:

SubjectRulesReviewStatusPatchArgs{...}

type SubjectRulesReviewStatusPatchOutput added in v3.20.0

type SubjectRulesReviewStatusPatchOutput struct{ *pulumi.OutputState }

SubjectRulesReviewStatus contains the result of a rules check. This check can be incomplete depending on the set of authorizers the server is configured with and any errors experienced during evaluation. Because authorization rules are additive, if a rule appears in a list it's safe to assume the subject has that permission, even if that list is incomplete.

func (SubjectRulesReviewStatusPatchOutput) ElementType added in v3.20.0

func (SubjectRulesReviewStatusPatchOutput) EvaluationError added in v3.20.0

EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.

func (SubjectRulesReviewStatusPatchOutput) Incomplete added in v3.20.0

Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.

func (SubjectRulesReviewStatusPatchOutput) NonResourceRules added in v3.20.0

NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPatchOutput) ResourceRules added in v3.20.0

ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchOutput added in v3.20.0

func (o SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchOutput() SubjectRulesReviewStatusPatchOutput

func (SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchOutputWithContext added in v3.20.0

func (o SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchOutput

func (SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchPtrOutput added in v3.20.0

func (o SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchPtrOutput() SubjectRulesReviewStatusPatchPtrOutput

func (SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (o SubjectRulesReviewStatusPatchOutput) ToSubjectRulesReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchPtrOutput

type SubjectRulesReviewStatusPatchPtrInput added in v3.20.0

type SubjectRulesReviewStatusPatchPtrInput interface {
	pulumi.Input

	ToSubjectRulesReviewStatusPatchPtrOutput() SubjectRulesReviewStatusPatchPtrOutput
	ToSubjectRulesReviewStatusPatchPtrOutputWithContext(context.Context) SubjectRulesReviewStatusPatchPtrOutput
}

SubjectRulesReviewStatusPatchPtrInput is an input type that accepts SubjectRulesReviewStatusPatchArgs, SubjectRulesReviewStatusPatchPtr and SubjectRulesReviewStatusPatchPtrOutput values. You can construct a concrete instance of `SubjectRulesReviewStatusPatchPtrInput` via:

        SubjectRulesReviewStatusPatchArgs{...}

or:

        nil

type SubjectRulesReviewStatusPatchPtrOutput added in v3.20.0

type SubjectRulesReviewStatusPatchPtrOutput struct{ *pulumi.OutputState }

func (SubjectRulesReviewStatusPatchPtrOutput) Elem added in v3.20.0

func (SubjectRulesReviewStatusPatchPtrOutput) ElementType added in v3.20.0

func (SubjectRulesReviewStatusPatchPtrOutput) EvaluationError added in v3.20.0

EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.

func (SubjectRulesReviewStatusPatchPtrOutput) Incomplete added in v3.20.0

Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.

func (SubjectRulesReviewStatusPatchPtrOutput) NonResourceRules added in v3.20.0

NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPatchPtrOutput) ResourceRules added in v3.20.0

ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPatchPtrOutput) ToSubjectRulesReviewStatusPatchPtrOutput added in v3.20.0

func (o SubjectRulesReviewStatusPatchPtrOutput) ToSubjectRulesReviewStatusPatchPtrOutput() SubjectRulesReviewStatusPatchPtrOutput

func (SubjectRulesReviewStatusPatchPtrOutput) ToSubjectRulesReviewStatusPatchPtrOutputWithContext added in v3.20.0

func (o SubjectRulesReviewStatusPatchPtrOutput) ToSubjectRulesReviewStatusPatchPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPatchPtrOutput

type SubjectRulesReviewStatusPtrInput

type SubjectRulesReviewStatusPtrInput interface {
	pulumi.Input

	ToSubjectRulesReviewStatusPtrOutput() SubjectRulesReviewStatusPtrOutput
	ToSubjectRulesReviewStatusPtrOutputWithContext(context.Context) SubjectRulesReviewStatusPtrOutput
}

SubjectRulesReviewStatusPtrInput is an input type that accepts SubjectRulesReviewStatusArgs, SubjectRulesReviewStatusPtr and SubjectRulesReviewStatusPtrOutput values. You can construct a concrete instance of `SubjectRulesReviewStatusPtrInput` via:

        SubjectRulesReviewStatusArgs{...}

or:

        nil

type SubjectRulesReviewStatusPtrOutput

type SubjectRulesReviewStatusPtrOutput struct{ *pulumi.OutputState }

func (SubjectRulesReviewStatusPtrOutput) Elem

func (SubjectRulesReviewStatusPtrOutput) ElementType

func (SubjectRulesReviewStatusPtrOutput) EvaluationError

EvaluationError can appear in combination with Rules. It indicates an error occurred during rule evaluation, such as an authorizer that doesn't support rule evaluation, and that ResourceRules and/or NonResourceRules may be incomplete.

func (SubjectRulesReviewStatusPtrOutput) Incomplete

Incomplete is true when the rules returned by this call are incomplete. This is most commonly encountered when an authorizer, such as an external authorizer, doesn't support rules evaluation.

func (SubjectRulesReviewStatusPtrOutput) NonResourceRules

NonResourceRules is the list of actions the subject is allowed to perform on non-resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPtrOutput) ResourceRules

ResourceRules is the list of actions the subject is allowed to perform on resources. The list ordering isn't significant, may contain duplicates, and possibly be incomplete.

func (SubjectRulesReviewStatusPtrOutput) ToSubjectRulesReviewStatusPtrOutput

func (o SubjectRulesReviewStatusPtrOutput) ToSubjectRulesReviewStatusPtrOutput() SubjectRulesReviewStatusPtrOutput

func (SubjectRulesReviewStatusPtrOutput) ToSubjectRulesReviewStatusPtrOutputWithContext

func (o SubjectRulesReviewStatusPtrOutput) ToSubjectRulesReviewStatusPtrOutputWithContext(ctx context.Context) SubjectRulesReviewStatusPtrOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL