Documentation ¶
Overview ¶
+groupName=authorization.k8s.io
Package v1beta1 is a generated protocol buffer package. It is generated from these files: k8s.io/kubernetes/vendor/k8s.io/api/authorization/v1beta1/generated.proto It has these top-level messages: ExtraValue LocalSubjectAccessReview NonResourceAttributes ResourceAttributes SelfSubjectAccessReview SelfSubjectAccessReviewSpec SubjectAccessReview SubjectAccessReviewSpec SubjectAccessReviewStatus
Index ¶
- Constants
- Variables
- func RegisterDeepCopies(scheme *runtime.Scheme) errordeprecated
- func Resource(resource string) schema.GroupResource
- type ExtraValue
- func (*ExtraValue) Descriptor() ([]byte, []int)
- func (m ExtraValue) Marshal() (dAtA []byte, err error)
- func (m ExtraValue) MarshalTo(dAtA []byte) (int, error)
- func (*ExtraValue) ProtoMessage()
- func (m *ExtraValue) Reset()
- func (m ExtraValue) Size() (n int)
- func (t ExtraValue) String() string
- func (m *ExtraValue) Unmarshal(dAtA []byte) error
- type LocalSubjectAccessReview
- func (in *LocalSubjectAccessReview) DeepCopy() *LocalSubjectAccessReview
- func (in *LocalSubjectAccessReview) DeepCopyInto(out *LocalSubjectAccessReview)
- func (in *LocalSubjectAccessReview) DeepCopyObject() runtime.Object
- func (*LocalSubjectAccessReview) Descriptor() ([]byte, []int)
- func (m *LocalSubjectAccessReview) Marshal() (dAtA []byte, err error)
- func (m *LocalSubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
- func (*LocalSubjectAccessReview) ProtoMessage()
- func (m *LocalSubjectAccessReview) Reset()
- func (m *LocalSubjectAccessReview) Size() (n int)
- func (this *LocalSubjectAccessReview) String() string
- func (LocalSubjectAccessReview) SwaggerDoc() map[string]string
- func (m *LocalSubjectAccessReview) Unmarshal(dAtA []byte) error
- type NonResourceAttributes
- func (in *NonResourceAttributes) DeepCopy() *NonResourceAttributes
- func (in *NonResourceAttributes) DeepCopyInto(out *NonResourceAttributes)
- func (*NonResourceAttributes) Descriptor() ([]byte, []int)
- func (m *NonResourceAttributes) Marshal() (dAtA []byte, err error)
- func (m *NonResourceAttributes) MarshalTo(dAtA []byte) (int, error)
- func (*NonResourceAttributes) ProtoMessage()
- func (m *NonResourceAttributes) Reset()
- func (m *NonResourceAttributes) Size() (n int)
- func (this *NonResourceAttributes) String() string
- func (NonResourceAttributes) SwaggerDoc() map[string]string
- func (m *NonResourceAttributes) Unmarshal(dAtA []byte) error
- type ResourceAttributes
- func (in *ResourceAttributes) DeepCopy() *ResourceAttributes
- func (in *ResourceAttributes) DeepCopyInto(out *ResourceAttributes)
- func (*ResourceAttributes) Descriptor() ([]byte, []int)
- func (m *ResourceAttributes) Marshal() (dAtA []byte, err error)
- func (m *ResourceAttributes) MarshalTo(dAtA []byte) (int, error)
- func (*ResourceAttributes) ProtoMessage()
- func (m *ResourceAttributes) Reset()
- func (m *ResourceAttributes) Size() (n int)
- func (this *ResourceAttributes) String() string
- func (ResourceAttributes) SwaggerDoc() map[string]string
- func (m *ResourceAttributes) Unmarshal(dAtA []byte) error
- type SelfSubjectAccessReview
- func (in *SelfSubjectAccessReview) DeepCopy() *SelfSubjectAccessReview
- func (in *SelfSubjectAccessReview) DeepCopyInto(out *SelfSubjectAccessReview)
- func (in *SelfSubjectAccessReview) DeepCopyObject() runtime.Object
- func (*SelfSubjectAccessReview) Descriptor() ([]byte, []int)
- func (m *SelfSubjectAccessReview) Marshal() (dAtA []byte, err error)
- func (m *SelfSubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
- func (*SelfSubjectAccessReview) ProtoMessage()
- func (m *SelfSubjectAccessReview) Reset()
- func (m *SelfSubjectAccessReview) Size() (n int)
- func (this *SelfSubjectAccessReview) String() string
- func (SelfSubjectAccessReview) SwaggerDoc() map[string]string
- func (m *SelfSubjectAccessReview) Unmarshal(dAtA []byte) error
- type SelfSubjectAccessReviewSpec
- func (in *SelfSubjectAccessReviewSpec) DeepCopy() *SelfSubjectAccessReviewSpec
- func (in *SelfSubjectAccessReviewSpec) DeepCopyInto(out *SelfSubjectAccessReviewSpec)
- func (*SelfSubjectAccessReviewSpec) Descriptor() ([]byte, []int)
- func (m *SelfSubjectAccessReviewSpec) Marshal() (dAtA []byte, err error)
- func (m *SelfSubjectAccessReviewSpec) MarshalTo(dAtA []byte) (int, error)
- func (*SelfSubjectAccessReviewSpec) ProtoMessage()
- func (m *SelfSubjectAccessReviewSpec) Reset()
- func (m *SelfSubjectAccessReviewSpec) Size() (n int)
- func (this *SelfSubjectAccessReviewSpec) String() string
- func (SelfSubjectAccessReviewSpec) SwaggerDoc() map[string]string
- func (m *SelfSubjectAccessReviewSpec) Unmarshal(dAtA []byte) error
- type SubjectAccessReview
- func (in *SubjectAccessReview) DeepCopy() *SubjectAccessReview
- func (in *SubjectAccessReview) DeepCopyInto(out *SubjectAccessReview)
- func (in *SubjectAccessReview) DeepCopyObject() runtime.Object
- func (*SubjectAccessReview) Descriptor() ([]byte, []int)
- func (m *SubjectAccessReview) Marshal() (dAtA []byte, err error)
- func (m *SubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
- func (*SubjectAccessReview) ProtoMessage()
- func (m *SubjectAccessReview) Reset()
- func (m *SubjectAccessReview) Size() (n int)
- func (this *SubjectAccessReview) String() string
- func (SubjectAccessReview) SwaggerDoc() map[string]string
- func (m *SubjectAccessReview) Unmarshal(dAtA []byte) error
- type SubjectAccessReviewSpec
- func (in *SubjectAccessReviewSpec) DeepCopy() *SubjectAccessReviewSpec
- func (in *SubjectAccessReviewSpec) DeepCopyInto(out *SubjectAccessReviewSpec)
- func (*SubjectAccessReviewSpec) Descriptor() ([]byte, []int)
- func (m *SubjectAccessReviewSpec) Marshal() (dAtA []byte, err error)
- func (m *SubjectAccessReviewSpec) MarshalTo(dAtA []byte) (int, error)
- func (*SubjectAccessReviewSpec) ProtoMessage()
- func (m *SubjectAccessReviewSpec) Reset()
- func (m *SubjectAccessReviewSpec) Size() (n int)
- func (this *SubjectAccessReviewSpec) String() string
- func (SubjectAccessReviewSpec) SwaggerDoc() map[string]string
- func (m *SubjectAccessReviewSpec) Unmarshal(dAtA []byte) error
- type SubjectAccessReviewStatus
- func (in *SubjectAccessReviewStatus) DeepCopy() *SubjectAccessReviewStatus
- func (in *SubjectAccessReviewStatus) DeepCopyInto(out *SubjectAccessReviewStatus)
- func (*SubjectAccessReviewStatus) Descriptor() ([]byte, []int)
- func (m *SubjectAccessReviewStatus) Marshal() (dAtA []byte, err error)
- func (m *SubjectAccessReviewStatus) MarshalTo(dAtA []byte) (int, error)
- func (*SubjectAccessReviewStatus) ProtoMessage()
- func (m *SubjectAccessReviewStatus) Reset()
- func (m *SubjectAccessReviewStatus) Size() (n int)
- func (this *SubjectAccessReviewStatus) String() string
- func (SubjectAccessReviewStatus) SwaggerDoc() map[string]string
- func (m *SubjectAccessReviewStatus) Unmarshal(dAtA []byte) error
Constants ¶
const GroupName = "authorization.k8s.io"
GroupName is the group name use in this package
Variables ¶
var ( ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling") ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow") )
var ( // TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api. // localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes. SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes) AddToScheme = localSchemeBuilder.AddToScheme )
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1beta1"}
SchemeGroupVersion is group version used to register these objects
Functions ¶
func RegisterDeepCopies
deprecated
func Resource ¶
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
Types ¶
type ExtraValue ¶
type ExtraValue []string
ExtraValue masks the value so protobuf can generate +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false
func (*ExtraValue) Descriptor ¶
func (*ExtraValue) Descriptor() ([]byte, []int)
func (ExtraValue) Marshal ¶
func (m ExtraValue) Marshal() (dAtA []byte, err error)
func (*ExtraValue) ProtoMessage ¶
func (*ExtraValue) ProtoMessage()
func (*ExtraValue) Reset ¶
func (m *ExtraValue) Reset()
func (ExtraValue) Size ¶
func (m ExtraValue) Size() (n int)
func (ExtraValue) String ¶
func (t ExtraValue) String() string
func (*ExtraValue) Unmarshal ¶
func (m *ExtraValue) Unmarshal(dAtA []byte) error
type LocalSubjectAccessReview ¶
type LocalSubjectAccessReview struct { metav1.TypeMeta `json:",inline"` // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Spec holds information about the request being evaluated. spec.namespace must be equal to the namespace // you made the request against. If empty, it is defaulted. Spec SubjectAccessReviewSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"` // Status is filled in by the server and indicates whether the request is allowed or not // +optional Status SubjectAccessReviewStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"` }
LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
func (*LocalSubjectAccessReview) DeepCopy ¶
func (in *LocalSubjectAccessReview) DeepCopy() *LocalSubjectAccessReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LocalSubjectAccessReview.
func (*LocalSubjectAccessReview) DeepCopyInto ¶
func (in *LocalSubjectAccessReview) DeepCopyInto(out *LocalSubjectAccessReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*LocalSubjectAccessReview) DeepCopyObject ¶
func (in *LocalSubjectAccessReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*LocalSubjectAccessReview) Descriptor ¶
func (*LocalSubjectAccessReview) Descriptor() ([]byte, []int)
func (*LocalSubjectAccessReview) Marshal ¶
func (m *LocalSubjectAccessReview) Marshal() (dAtA []byte, err error)
func (*LocalSubjectAccessReview) MarshalTo ¶
func (m *LocalSubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
func (*LocalSubjectAccessReview) ProtoMessage ¶
func (*LocalSubjectAccessReview) ProtoMessage()
func (*LocalSubjectAccessReview) Reset ¶
func (m *LocalSubjectAccessReview) Reset()
func (*LocalSubjectAccessReview) Size ¶
func (m *LocalSubjectAccessReview) Size() (n int)
func (*LocalSubjectAccessReview) String ¶
func (this *LocalSubjectAccessReview) String() string
func (LocalSubjectAccessReview) SwaggerDoc ¶
func (LocalSubjectAccessReview) SwaggerDoc() map[string]string
func (*LocalSubjectAccessReview) Unmarshal ¶
func (m *LocalSubjectAccessReview) Unmarshal(dAtA []byte) error
type NonResourceAttributes ¶
type NonResourceAttributes struct { // Path is the URL path of the request // +optional Path string `json:"path,omitempty" protobuf:"bytes,1,opt,name=path"` // Verb is the standard HTTP verb // +optional Verb string `json:"verb,omitempty" protobuf:"bytes,2,opt,name=verb"` }
NonResourceAttributes includes the authorization attributes available for non-resource requests to the Authorizer interface
func (*NonResourceAttributes) DeepCopy ¶
func (in *NonResourceAttributes) DeepCopy() *NonResourceAttributes
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NonResourceAttributes.
func (*NonResourceAttributes) DeepCopyInto ¶
func (in *NonResourceAttributes) DeepCopyInto(out *NonResourceAttributes)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NonResourceAttributes) Descriptor ¶
func (*NonResourceAttributes) Descriptor() ([]byte, []int)
func (*NonResourceAttributes) Marshal ¶
func (m *NonResourceAttributes) Marshal() (dAtA []byte, err error)
func (*NonResourceAttributes) MarshalTo ¶
func (m *NonResourceAttributes) MarshalTo(dAtA []byte) (int, error)
func (*NonResourceAttributes) ProtoMessage ¶
func (*NonResourceAttributes) ProtoMessage()
func (*NonResourceAttributes) Reset ¶
func (m *NonResourceAttributes) Reset()
func (*NonResourceAttributes) Size ¶
func (m *NonResourceAttributes) Size() (n int)
func (*NonResourceAttributes) String ¶
func (this *NonResourceAttributes) String() string
func (NonResourceAttributes) SwaggerDoc ¶
func (NonResourceAttributes) SwaggerDoc() map[string]string
func (*NonResourceAttributes) Unmarshal ¶
func (m *NonResourceAttributes) Unmarshal(dAtA []byte) error
type ResourceAttributes ¶
type ResourceAttributes struct { // Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces // "" (empty) is defaulted for LocalSubjectAccessReviews // "" (empty) is empty for cluster-scoped resources // "" (empty) means "all" for namespace scoped resources from a SubjectAccessReview or SelfSubjectAccessReview // +optional Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"` // Verb is a kubernetes resource API verb, like: get, list, watch, create, update, delete, proxy. "*" means all. // +optional Verb string `json:"verb,omitempty" protobuf:"bytes,2,opt,name=verb"` // Group is the API Group of the Resource. "*" means all. // +optional Group string `json:"group,omitempty" protobuf:"bytes,3,opt,name=group"` // Version is the API Version of the Resource. "*" means all. // +optional Version string `json:"version,omitempty" protobuf:"bytes,4,opt,name=version"` // Resource is one of the existing resource types. "*" means all. // +optional Resource string `json:"resource,omitempty" protobuf:"bytes,5,opt,name=resource"` // Subresource is one of the existing resource types. "" means none. // +optional Subresource string `json:"subresource,omitempty" protobuf:"bytes,6,opt,name=subresource"` // Name is the name of the resource being requested for a "get" or deleted for a "delete". "" (empty) means all. // +optional Name string `json:"name,omitempty" protobuf:"bytes,7,opt,name=name"` }
ResourceAttributes includes the authorization attributes available for resource requests to the Authorizer interface
func (*ResourceAttributes) DeepCopy ¶
func (in *ResourceAttributes) DeepCopy() *ResourceAttributes
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ResourceAttributes.
func (*ResourceAttributes) DeepCopyInto ¶
func (in *ResourceAttributes) DeepCopyInto(out *ResourceAttributes)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ResourceAttributes) Descriptor ¶
func (*ResourceAttributes) Descriptor() ([]byte, []int)
func (*ResourceAttributes) Marshal ¶
func (m *ResourceAttributes) Marshal() (dAtA []byte, err error)
func (*ResourceAttributes) MarshalTo ¶
func (m *ResourceAttributes) MarshalTo(dAtA []byte) (int, error)
func (*ResourceAttributes) ProtoMessage ¶
func (*ResourceAttributes) ProtoMessage()
func (*ResourceAttributes) Reset ¶
func (m *ResourceAttributes) Reset()
func (*ResourceAttributes) Size ¶
func (m *ResourceAttributes) Size() (n int)
func (*ResourceAttributes) String ¶
func (this *ResourceAttributes) String() string
func (ResourceAttributes) SwaggerDoc ¶
func (ResourceAttributes) SwaggerDoc() map[string]string
func (*ResourceAttributes) Unmarshal ¶
func (m *ResourceAttributes) Unmarshal(dAtA []byte) error
type SelfSubjectAccessReview ¶
type SelfSubjectAccessReview struct { metav1.TypeMeta `json:",inline"` // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Spec holds information about the request being evaluated. user and groups must be empty Spec SelfSubjectAccessReviewSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"` // Status is filled in by the server and indicates whether the request is allowed or not // +optional Status SubjectAccessReviewStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"` }
SelfSubjectAccessReview checks whether or the current user can perform an action. Not filling in a spec.namespace means "in all namespaces". Self is a special case, because users should always be able to check whether they can perform an action
func (*SelfSubjectAccessReview) DeepCopy ¶
func (in *SelfSubjectAccessReview) DeepCopy() *SelfSubjectAccessReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SelfSubjectAccessReview.
func (*SelfSubjectAccessReview) DeepCopyInto ¶
func (in *SelfSubjectAccessReview) DeepCopyInto(out *SelfSubjectAccessReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SelfSubjectAccessReview) DeepCopyObject ¶
func (in *SelfSubjectAccessReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*SelfSubjectAccessReview) Descriptor ¶
func (*SelfSubjectAccessReview) Descriptor() ([]byte, []int)
func (*SelfSubjectAccessReview) Marshal ¶
func (m *SelfSubjectAccessReview) Marshal() (dAtA []byte, err error)
func (*SelfSubjectAccessReview) MarshalTo ¶
func (m *SelfSubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
func (*SelfSubjectAccessReview) ProtoMessage ¶
func (*SelfSubjectAccessReview) ProtoMessage()
func (*SelfSubjectAccessReview) Reset ¶
func (m *SelfSubjectAccessReview) Reset()
func (*SelfSubjectAccessReview) Size ¶
func (m *SelfSubjectAccessReview) Size() (n int)
func (*SelfSubjectAccessReview) String ¶
func (this *SelfSubjectAccessReview) String() string
func (SelfSubjectAccessReview) SwaggerDoc ¶
func (SelfSubjectAccessReview) SwaggerDoc() map[string]string
func (*SelfSubjectAccessReview) Unmarshal ¶
func (m *SelfSubjectAccessReview) Unmarshal(dAtA []byte) error
type SelfSubjectAccessReviewSpec ¶
type SelfSubjectAccessReviewSpec struct { // ResourceAuthorizationAttributes describes information for a resource access request // +optional ResourceAttributes *ResourceAttributes `json:"resourceAttributes,omitempty" protobuf:"bytes,1,opt,name=resourceAttributes"` // NonResourceAttributes describes information for a non-resource access request // +optional NonResourceAttributes *NonResourceAttributes `json:"nonResourceAttributes,omitempty" protobuf:"bytes,2,opt,name=nonResourceAttributes"` }
SelfSubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set
func (*SelfSubjectAccessReviewSpec) DeepCopy ¶
func (in *SelfSubjectAccessReviewSpec) DeepCopy() *SelfSubjectAccessReviewSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SelfSubjectAccessReviewSpec.
func (*SelfSubjectAccessReviewSpec) DeepCopyInto ¶
func (in *SelfSubjectAccessReviewSpec) DeepCopyInto(out *SelfSubjectAccessReviewSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SelfSubjectAccessReviewSpec) Descriptor ¶
func (*SelfSubjectAccessReviewSpec) Descriptor() ([]byte, []int)
func (*SelfSubjectAccessReviewSpec) Marshal ¶
func (m *SelfSubjectAccessReviewSpec) Marshal() (dAtA []byte, err error)
func (*SelfSubjectAccessReviewSpec) MarshalTo ¶
func (m *SelfSubjectAccessReviewSpec) MarshalTo(dAtA []byte) (int, error)
func (*SelfSubjectAccessReviewSpec) ProtoMessage ¶
func (*SelfSubjectAccessReviewSpec) ProtoMessage()
func (*SelfSubjectAccessReviewSpec) Reset ¶
func (m *SelfSubjectAccessReviewSpec) Reset()
func (*SelfSubjectAccessReviewSpec) Size ¶
func (m *SelfSubjectAccessReviewSpec) Size() (n int)
func (*SelfSubjectAccessReviewSpec) String ¶
func (this *SelfSubjectAccessReviewSpec) String() string
func (SelfSubjectAccessReviewSpec) SwaggerDoc ¶
func (SelfSubjectAccessReviewSpec) SwaggerDoc() map[string]string
func (*SelfSubjectAccessReviewSpec) Unmarshal ¶
func (m *SelfSubjectAccessReviewSpec) Unmarshal(dAtA []byte) error
type SubjectAccessReview ¶
type SubjectAccessReview struct { metav1.TypeMeta `json:",inline"` // +optional metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"` // Spec holds information about the request being evaluated Spec SubjectAccessReviewSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"` // Status is filled in by the server and indicates whether the request is allowed or not // +optional Status SubjectAccessReviewStatus `json:"status,omitempty" protobuf:"bytes,3,opt,name=status"` }
SubjectAccessReview checks whether or not a user or group can perform an action.
func (*SubjectAccessReview) DeepCopy ¶
func (in *SubjectAccessReview) DeepCopy() *SubjectAccessReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubjectAccessReview.
func (*SubjectAccessReview) DeepCopyInto ¶
func (in *SubjectAccessReview) DeepCopyInto(out *SubjectAccessReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SubjectAccessReview) DeepCopyObject ¶
func (in *SubjectAccessReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*SubjectAccessReview) Descriptor ¶
func (*SubjectAccessReview) Descriptor() ([]byte, []int)
func (*SubjectAccessReview) Marshal ¶
func (m *SubjectAccessReview) Marshal() (dAtA []byte, err error)
func (*SubjectAccessReview) MarshalTo ¶
func (m *SubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
func (*SubjectAccessReview) ProtoMessage ¶
func (*SubjectAccessReview) ProtoMessage()
func (*SubjectAccessReview) Reset ¶
func (m *SubjectAccessReview) Reset()
func (*SubjectAccessReview) Size ¶
func (m *SubjectAccessReview) Size() (n int)
func (*SubjectAccessReview) String ¶
func (this *SubjectAccessReview) String() string
func (SubjectAccessReview) SwaggerDoc ¶
func (SubjectAccessReview) SwaggerDoc() map[string]string
func (*SubjectAccessReview) Unmarshal ¶
func (m *SubjectAccessReview) Unmarshal(dAtA []byte) error
type SubjectAccessReviewSpec ¶
type SubjectAccessReviewSpec struct { // ResourceAuthorizationAttributes describes information for a resource access request // +optional ResourceAttributes *ResourceAttributes `json:"resourceAttributes,omitempty" protobuf:"bytes,1,opt,name=resourceAttributes"` // NonResourceAttributes describes information for a non-resource access request // +optional NonResourceAttributes *NonResourceAttributes `json:"nonResourceAttributes,omitempty" protobuf:"bytes,2,opt,name=nonResourceAttributes"` // User is the user you're testing for. // If you specify "User" but not "Group", then is it interpreted as "What if User were not a member of any groups // +optional User string `json:"user,omitempty" protobuf:"bytes,3,opt,name=user"` // Groups is the groups you're testing for. // +optional Groups []string `json:"group,omitempty" protobuf:"bytes,4,rep,name=group"` // Extra corresponds to the user.Info.GetExtra() method from the authenticator. Since that is input to the authorizer // it needs a reflection here. // +optional Extra map[string]ExtraValue `json:"extra,omitempty" protobuf:"bytes,5,rep,name=extra"` // UID information about the requesting user. // +optional UID string `json:"uid,omitempty" protobuf:"bytes,6,opt,name=uid"` }
SubjectAccessReviewSpec is a description of the access request. Exactly one of ResourceAuthorizationAttributes and NonResourceAuthorizationAttributes must be set
func (*SubjectAccessReviewSpec) DeepCopy ¶
func (in *SubjectAccessReviewSpec) DeepCopy() *SubjectAccessReviewSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubjectAccessReviewSpec.
func (*SubjectAccessReviewSpec) DeepCopyInto ¶
func (in *SubjectAccessReviewSpec) DeepCopyInto(out *SubjectAccessReviewSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SubjectAccessReviewSpec) Descriptor ¶
func (*SubjectAccessReviewSpec) Descriptor() ([]byte, []int)
func (*SubjectAccessReviewSpec) Marshal ¶
func (m *SubjectAccessReviewSpec) Marshal() (dAtA []byte, err error)
func (*SubjectAccessReviewSpec) MarshalTo ¶
func (m *SubjectAccessReviewSpec) MarshalTo(dAtA []byte) (int, error)
func (*SubjectAccessReviewSpec) ProtoMessage ¶
func (*SubjectAccessReviewSpec) ProtoMessage()
func (*SubjectAccessReviewSpec) Reset ¶
func (m *SubjectAccessReviewSpec) Reset()
func (*SubjectAccessReviewSpec) Size ¶
func (m *SubjectAccessReviewSpec) Size() (n int)
func (*SubjectAccessReviewSpec) String ¶
func (this *SubjectAccessReviewSpec) String() string
func (SubjectAccessReviewSpec) SwaggerDoc ¶
func (SubjectAccessReviewSpec) SwaggerDoc() map[string]string
func (*SubjectAccessReviewSpec) Unmarshal ¶
func (m *SubjectAccessReviewSpec) Unmarshal(dAtA []byte) error
type SubjectAccessReviewStatus ¶
type SubjectAccessReviewStatus struct { // Allowed is required. True if the action would be allowed, false otherwise. Allowed bool `json:"allowed" protobuf:"varint,1,opt,name=allowed"` // Reason is optional. It indicates why a request was allowed or denied. // +optional Reason string `json:"reason,omitempty" protobuf:"bytes,2,opt,name=reason"` // EvaluationError is an indication that some error occurred during the authorization check. // It is entirely possible to get an error and be able to continue determine authorization status in spite of it. // For instance, RBAC can be missing a role, but enough roles are still present and bound to reason about the request. // +optional EvaluationError string `json:"evaluationError,omitempty" protobuf:"bytes,3,opt,name=evaluationError"` }
SubjectAccessReviewStatus
func (*SubjectAccessReviewStatus) DeepCopy ¶
func (in *SubjectAccessReviewStatus) DeepCopy() *SubjectAccessReviewStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubjectAccessReviewStatus.
func (*SubjectAccessReviewStatus) DeepCopyInto ¶
func (in *SubjectAccessReviewStatus) DeepCopyInto(out *SubjectAccessReviewStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SubjectAccessReviewStatus) Descriptor ¶
func (*SubjectAccessReviewStatus) Descriptor() ([]byte, []int)
func (*SubjectAccessReviewStatus) Marshal ¶
func (m *SubjectAccessReviewStatus) Marshal() (dAtA []byte, err error)
func (*SubjectAccessReviewStatus) MarshalTo ¶
func (m *SubjectAccessReviewStatus) MarshalTo(dAtA []byte) (int, error)
func (*SubjectAccessReviewStatus) ProtoMessage ¶
func (*SubjectAccessReviewStatus) ProtoMessage()
func (*SubjectAccessReviewStatus) Reset ¶
func (m *SubjectAccessReviewStatus) Reset()
func (*SubjectAccessReviewStatus) Size ¶
func (m *SubjectAccessReviewStatus) Size() (n int)
func (*SubjectAccessReviewStatus) String ¶
func (this *SubjectAccessReviewStatus) String() string
func (SubjectAccessReviewStatus) SwaggerDoc ¶
func (SubjectAccessReviewStatus) SwaggerDoc() map[string]string
func (*SubjectAccessReviewStatus) Unmarshal ¶
func (m *SubjectAccessReviewStatus) Unmarshal(dAtA []byte) error