const (
// GroupKind is string representation of kind used in role binding subjects that represents the "group".
GroupKind = "Group"
// UserKind is string representation of kind used in role binding subjects that represents the "user".
UserKind = "User"
ScopesKey = "scopes.authorization.openshift.io"
)
var (
ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow")
ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
var (
GroupName = "authorization.openshift.io"
GroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1"}
// Install is a function which adds this version to a scheme
Install = schemeBuilder.AddToScheme
// SchemeGroupVersion generated code relies on this name
// Deprecated
SchemeGroupVersion = GroupVersion
// AddToScheme exists solely to keep the old generators creating valid code
// DEPRECATED
AddToScheme = schemeBuilder.AddToScheme
)
var (
DeprecatedInstallWithoutGroup = legacySchemeBuilder.AddToScheme
)
func Resource(resource string) schema.GroupResource
Resource generated code relies on this being here, but it logically belongs to the group DEPRECATED
Action describes a request to the API server
type Action struct {
// Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces
Namespace string `json:"namespace" protobuf:"bytes,1,opt,name=namespace"`
// Verb is one of: get, list, watch, create, update, delete
Verb string `json:"verb" protobuf:"bytes,2,opt,name=verb"`
// Group is the API group of the resource
// Serialized as resourceAPIGroup to avoid confusion with the 'groups' field when inlined
Group string `json:"resourceAPIGroup" protobuf:"bytes,3,opt,name=resourceAPIGroup"`
// Version is the API version of the resource
// Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined
Version string `json:"resourceAPIVersion" protobuf:"bytes,4,opt,name=resourceAPIVersion"`
// Resource is one of the existing resource types
Resource string `json:"resource" protobuf:"bytes,5,opt,name=resource"`
// ResourceName is the name of the resource being requested for a "get" or deleted for a "delete"
ResourceName string `json:"resourceName" protobuf:"bytes,6,opt,name=resourceName"`
// Path is the path of a non resource URL
Path string `json:"path" protobuf:"bytes,8,opt,name=path"`
// IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hierarchy)
IsNonResourceURL bool `json:"isNonResourceURL" protobuf:"varint,9,opt,name=isNonResourceURL"`
// Content is the actual content of the request for create and update
// +kubebuilder:pruning:PreserveUnknownFields
Content kruntime.RawExtension `json:"content,omitempty" protobuf:"bytes,7,opt,name=content"`
}
func (in *Action) DeepCopy() *Action
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Action.
func (in *Action) DeepCopyInto(out *Action)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Action) Descriptor() ([]byte, []int)
func (m *Action) Marshal() (dAtA []byte, err error)
func (m *Action) MarshalTo(dAtA []byte) (int, error)
func (m *Action) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*Action) ProtoMessage()
func (m *Action) Reset()
func (m *Action) Size() (n int)
func (this *Action) String() string
func (Action) SwaggerDoc() map[string]string
func (m *Action) Unmarshal(dAtA []byte) error
func (m *Action) XXX_DiscardUnknown()
func (m *Action) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *Action) XXX_Merge(src proto.Message)
func (m *Action) XXX_Size() int
func (m *Action) XXX_Unmarshal(b []byte) error
ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type ClusterRole struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Rules holds all the PolicyRules for this ClusterRole
Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
// AggregationRule is an optional field that describes how to build the Rules for this ClusterRole.
// If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be
// stomped by the controller.
AggregationRule *rbacv1.AggregationRule `json:"aggregationRule,omitempty" protobuf:"bytes,3,opt,name=aggregationRule"`
}
func (c *ClusterRole) DecodeNestedObjects(d runtime.Decoder) error
func (in *ClusterRole) DeepCopy() *ClusterRole
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRole.
func (in *ClusterRole) DeepCopyInto(out *ClusterRole)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ClusterRole) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ClusterRole) Descriptor() ([]byte, []int)
func (c *ClusterRole) EncodeNestedObjects(e runtime.Encoder) error
func (m *ClusterRole) Marshal() (dAtA []byte, err error)
func (m *ClusterRole) MarshalTo(dAtA []byte) (int, error)
func (m *ClusterRole) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ClusterRole) ProtoMessage()
func (m *ClusterRole) Reset()
func (m *ClusterRole) Size() (n int)
func (this *ClusterRole) String() string
func (ClusterRole) SwaggerDoc() map[string]string
func (m *ClusterRole) Unmarshal(dAtA []byte) error
func (m *ClusterRole) XXX_DiscardUnknown()
func (m *ClusterRole) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ClusterRole) XXX_Merge(src proto.Message)
func (m *ClusterRole) XXX_Size() int
func (m *ClusterRole) XXX_Unmarshal(b []byte) error
ClusterRoleBinding references a ClusterRole, but not contain it. It can reference any ClusterRole in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. ClusterRoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type ClusterRoleBinding struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// UserNames holds all the usernames directly bound to the role.
// This field should only be specified when supporting legacy clients and servers.
// See Subjects for further details.
// +k8s:conversion-gen=false
// +optional
UserNames OptionalNames `json:"userNames" protobuf:"bytes,2,rep,name=userNames"`
// GroupNames holds all the groups directly bound to the role.
// This field should only be specified when supporting legacy clients and servers.
// See Subjects for further details.
// +k8s:conversion-gen=false
// +optional
GroupNames OptionalNames `json:"groupNames" protobuf:"bytes,3,rep,name=groupNames"`
// Subjects hold object references to authorize with this rule.
// This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers.
// Thus newer clients that do not need to support backwards compatibility should send
// only fully qualified Subjects and should omit the UserNames and GroupNames fields.
// Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.
Subjects []corev1.ObjectReference `json:"subjects" protobuf:"bytes,4,rep,name=subjects"`
// RoleRef can only reference the current namespace and the global namespace.
// If the ClusterRoleRef cannot be resolved, the Authorizer must return an error.
// Since Policy is a singleton, this is sufficient knowledge to locate a role.
RoleRef corev1.ObjectReference `json:"roleRef" protobuf:"bytes,5,opt,name=roleRef"`
}
func (in *ClusterRoleBinding) DeepCopy() *ClusterRoleBinding
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleBinding.
func (in *ClusterRoleBinding) DeepCopyInto(out *ClusterRoleBinding)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ClusterRoleBinding) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ClusterRoleBinding) Descriptor() ([]byte, []int)
func (m *ClusterRoleBinding) Marshal() (dAtA []byte, err error)
func (m *ClusterRoleBinding) MarshalTo(dAtA []byte) (int, error)
func (m *ClusterRoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ClusterRoleBinding) ProtoMessage()
func (m *ClusterRoleBinding) Reset()
func (m *ClusterRoleBinding) Size() (n int)
func (this *ClusterRoleBinding) String() string
func (ClusterRoleBinding) SwaggerDoc() map[string]string
func (m *ClusterRoleBinding) Unmarshal(dAtA []byte) error
func (m *ClusterRoleBinding) XXX_DiscardUnknown()
func (m *ClusterRoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ClusterRoleBinding) XXX_Merge(src proto.Message)
func (m *ClusterRoleBinding) XXX_Size() int
func (m *ClusterRoleBinding) XXX_Unmarshal(b []byte) error
ClusterRoleBindingList is a collection of ClusterRoleBindings
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type ClusterRoleBindingList struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of ClusterRoleBindings
Items []ClusterRoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *ClusterRoleBindingList) DeepCopy() *ClusterRoleBindingList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleBindingList.
func (in *ClusterRoleBindingList) DeepCopyInto(out *ClusterRoleBindingList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ClusterRoleBindingList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ClusterRoleBindingList) Descriptor() ([]byte, []int)
func (m *ClusterRoleBindingList) Marshal() (dAtA []byte, err error)
func (m *ClusterRoleBindingList) MarshalTo(dAtA []byte) (int, error)
func (m *ClusterRoleBindingList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ClusterRoleBindingList) ProtoMessage()
func (m *ClusterRoleBindingList) Reset()
func (m *ClusterRoleBindingList) Size() (n int)
func (this *ClusterRoleBindingList) String() string
func (ClusterRoleBindingList) SwaggerDoc() map[string]string
func (m *ClusterRoleBindingList) Unmarshal(dAtA []byte) error
func (m *ClusterRoleBindingList) XXX_DiscardUnknown()
func (m *ClusterRoleBindingList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ClusterRoleBindingList) XXX_Merge(src proto.Message)
func (m *ClusterRoleBindingList) XXX_Size() int
func (m *ClusterRoleBindingList) XXX_Unmarshal(b []byte) error
ClusterRoleList is a collection of ClusterRoles
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type ClusterRoleList struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of ClusterRoles
Items []ClusterRole `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (c *ClusterRoleList) DecodeNestedObjects(d runtime.Decoder) error
func (in *ClusterRoleList) DeepCopy() *ClusterRoleList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleList.
func (in *ClusterRoleList) DeepCopyInto(out *ClusterRoleList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ClusterRoleList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ClusterRoleList) Descriptor() ([]byte, []int)
func (c *ClusterRoleList) EncodeNestedObjects(e runtime.Encoder) error
func (m *ClusterRoleList) Marshal() (dAtA []byte, err error)
func (m *ClusterRoleList) MarshalTo(dAtA []byte) (int, error)
func (m *ClusterRoleList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ClusterRoleList) ProtoMessage()
func (m *ClusterRoleList) Reset()
func (m *ClusterRoleList) Size() (n int)
func (this *ClusterRoleList) String() string
func (ClusterRoleList) SwaggerDoc() map[string]string
func (m *ClusterRoleList) Unmarshal(dAtA []byte) error
func (m *ClusterRoleList) XXX_DiscardUnknown()
func (m *ClusterRoleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ClusterRoleList) XXX_Merge(src proto.Message)
func (m *ClusterRoleList) XXX_Size() int
func (m *ClusterRoleList) XXX_Unmarshal(b []byte) error
GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.
type GroupRestriction struct {
// Groups is a list of groups used to match against an individual user's
// groups. If the user is a member of one of the whitelisted groups, the user
// is allowed to be bound to a role.
// +nullable
Groups []string `json:"groups" protobuf:"bytes,1,rep,name=groups"`
// Selectors specifies a list of label selectors over group labels.
// +nullable
Selectors []metav1.LabelSelector `json:"labels" protobuf:"bytes,2,rep,name=labels"`
}
func (in *GroupRestriction) DeepCopy() *GroupRestriction
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new GroupRestriction.
func (in *GroupRestriction) DeepCopyInto(out *GroupRestriction)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*GroupRestriction) Descriptor() ([]byte, []int)
func (m *GroupRestriction) Marshal() (dAtA []byte, err error)
func (m *GroupRestriction) MarshalTo(dAtA []byte) (int, error)
func (m *GroupRestriction) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*GroupRestriction) ProtoMessage()
func (m *GroupRestriction) Reset()
func (m *GroupRestriction) Size() (n int)
func (this *GroupRestriction) String() string
func (GroupRestriction) SwaggerDoc() map[string]string
func (m *GroupRestriction) Unmarshal(dAtA []byte) error
func (m *GroupRestriction) XXX_DiscardUnknown()
func (m *GroupRestriction) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *GroupRestriction) XXX_Merge(src proto.Message)
func (m *GroupRestriction) XXX_Size() int
func (m *GroupRestriction) XXX_Unmarshal(b []byte) error
IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type IsPersonalSubjectAccessReview struct {
metav1.TypeMeta `json:",inline"`
}
func (in *IsPersonalSubjectAccessReview) DeepCopy() *IsPersonalSubjectAccessReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new IsPersonalSubjectAccessReview.
func (in *IsPersonalSubjectAccessReview) DeepCopyInto(out *IsPersonalSubjectAccessReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *IsPersonalSubjectAccessReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*IsPersonalSubjectAccessReview) Descriptor() ([]byte, []int)
func (m *IsPersonalSubjectAccessReview) Marshal() (dAtA []byte, err error)
func (m *IsPersonalSubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
func (m *IsPersonalSubjectAccessReview) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*IsPersonalSubjectAccessReview) ProtoMessage()
func (m *IsPersonalSubjectAccessReview) Reset()
func (m *IsPersonalSubjectAccessReview) Size() (n int)
func (this *IsPersonalSubjectAccessReview) String() string
func (IsPersonalSubjectAccessReview) SwaggerDoc() map[string]string
func (m *IsPersonalSubjectAccessReview) Unmarshal(dAtA []byte) error
func (m *IsPersonalSubjectAccessReview) XXX_DiscardUnknown()
func (m *IsPersonalSubjectAccessReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *IsPersonalSubjectAccessReview) XXX_Merge(src proto.Message)
func (m *IsPersonalSubjectAccessReview) XXX_Size() int
func (m *IsPersonalSubjectAccessReview) XXX_Unmarshal(b []byte) error
LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type LocalResourceAccessReview struct {
metav1.TypeMeta `json:",inline"`
// Action describes the action being tested. The Namespace element is FORCED to the current namespace.
Action `json:",inline" protobuf:"bytes,1,opt,name=Action"`
}
func (in *LocalResourceAccessReview) DeepCopy() *LocalResourceAccessReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LocalResourceAccessReview.
func (in *LocalResourceAccessReview) DeepCopyInto(out *LocalResourceAccessReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *LocalResourceAccessReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*LocalResourceAccessReview) Descriptor() ([]byte, []int)
func (m *LocalResourceAccessReview) Marshal() (dAtA []byte, err error)
func (m *LocalResourceAccessReview) MarshalTo(dAtA []byte) (int, error)
func (m *LocalResourceAccessReview) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*LocalResourceAccessReview) ProtoMessage()
func (m *LocalResourceAccessReview) Reset()
func (m *LocalResourceAccessReview) Size() (n int)
func (this *LocalResourceAccessReview) String() string
func (LocalResourceAccessReview) SwaggerDoc() map[string]string
func (m *LocalResourceAccessReview) Unmarshal(dAtA []byte) error
func (m *LocalResourceAccessReview) XXX_DiscardUnknown()
func (m *LocalResourceAccessReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *LocalResourceAccessReview) XXX_Merge(src proto.Message)
func (m *LocalResourceAccessReview) XXX_Size() int
func (m *LocalResourceAccessReview) XXX_Unmarshal(b []byte) error
LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type LocalSubjectAccessReview struct {
metav1.TypeMeta `json:",inline"`
// Action describes the action being tested. The Namespace element is FORCED to the current namespace.
Action `json:",inline" protobuf:"bytes,1,opt,name=Action"`
// User is optional. If both User and Groups are empty, the current authenticated user is used.
User string `json:"user" protobuf:"bytes,2,opt,name=user"`
// Groups is optional. Groups is the list of groups to which the User belongs.
// +k8s:conversion-gen=false
GroupsSlice []string `json:"groups" protobuf:"bytes,3,rep,name=groups"`
// Scopes to use for the evaluation. Empty means "use the unscoped (full) permissions of the user/groups".
// Nil for a self-SAR, means "use the scopes on this request".
// Nil for a regular SAR, means the same as empty.
// +k8s:conversion-gen=false
Scopes OptionalScopes `json:"scopes" protobuf:"bytes,4,rep,name=scopes"`
}
func (in *LocalSubjectAccessReview) DeepCopy() *LocalSubjectAccessReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new LocalSubjectAccessReview.
func (in *LocalSubjectAccessReview) DeepCopyInto(out *LocalSubjectAccessReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *LocalSubjectAccessReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*LocalSubjectAccessReview) Descriptor() ([]byte, []int)
func (m *LocalSubjectAccessReview) Marshal() (dAtA []byte, err error)
func (m *LocalSubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
func (m *LocalSubjectAccessReview) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*LocalSubjectAccessReview) ProtoMessage()
func (m *LocalSubjectAccessReview) Reset()
func (m *LocalSubjectAccessReview) Size() (n int)
func (this *LocalSubjectAccessReview) String() string
func (LocalSubjectAccessReview) SwaggerDoc() map[string]string
func (m *LocalSubjectAccessReview) Unmarshal(dAtA []byte) error
func (m *LocalSubjectAccessReview) XXX_DiscardUnknown()
func (m *LocalSubjectAccessReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *LocalSubjectAccessReview) XXX_Merge(src proto.Message)
func (m *LocalSubjectAccessReview) XXX_Size() int
func (m *LocalSubjectAccessReview) XXX_Unmarshal(b []byte) error
NamedClusterRole relates a name with a cluster role
type NamedClusterRole struct {
// Name is the name of the cluster role
Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
// Role is the cluster role being named
Role ClusterRole `json:"role" protobuf:"bytes,2,opt,name=role"`
}
func (in *NamedClusterRole) DeepCopy() *NamedClusterRole
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NamedClusterRole.
func (in *NamedClusterRole) DeepCopyInto(out *NamedClusterRole)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NamedClusterRole) Descriptor() ([]byte, []int)
func (m *NamedClusterRole) Marshal() (dAtA []byte, err error)
func (m *NamedClusterRole) MarshalTo(dAtA []byte) (int, error)
func (m *NamedClusterRole) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NamedClusterRole) ProtoMessage()
func (m *NamedClusterRole) Reset()
func (m *NamedClusterRole) Size() (n int)
func (this *NamedClusterRole) String() string
func (NamedClusterRole) SwaggerDoc() map[string]string
func (m *NamedClusterRole) Unmarshal(dAtA []byte) error
func (m *NamedClusterRole) XXX_DiscardUnknown()
func (m *NamedClusterRole) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NamedClusterRole) XXX_Merge(src proto.Message)
func (m *NamedClusterRole) XXX_Size() int
func (m *NamedClusterRole) XXX_Unmarshal(b []byte) error
NamedClusterRoleBinding relates a name with a cluster role binding
type NamedClusterRoleBinding struct {
// Name is the name of the cluster role binding
Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
// RoleBinding is the cluster role binding being named
RoleBinding ClusterRoleBinding `json:"roleBinding" protobuf:"bytes,2,opt,name=roleBinding"`
}
func (in *NamedClusterRoleBinding) DeepCopy() *NamedClusterRoleBinding
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NamedClusterRoleBinding.
func (in *NamedClusterRoleBinding) DeepCopyInto(out *NamedClusterRoleBinding)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NamedClusterRoleBinding) Descriptor() ([]byte, []int)
func (m *NamedClusterRoleBinding) Marshal() (dAtA []byte, err error)
func (m *NamedClusterRoleBinding) MarshalTo(dAtA []byte) (int, error)
func (m *NamedClusterRoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NamedClusterRoleBinding) ProtoMessage()
func (m *NamedClusterRoleBinding) Reset()
func (m *NamedClusterRoleBinding) Size() (n int)
func (this *NamedClusterRoleBinding) String() string
func (NamedClusterRoleBinding) SwaggerDoc() map[string]string
func (m *NamedClusterRoleBinding) Unmarshal(dAtA []byte) error
func (m *NamedClusterRoleBinding) XXX_DiscardUnknown()
func (m *NamedClusterRoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NamedClusterRoleBinding) XXX_Merge(src proto.Message)
func (m *NamedClusterRoleBinding) XXX_Size() int
func (m *NamedClusterRoleBinding) XXX_Unmarshal(b []byte) error
NamedRole relates a Role with a name
type NamedRole struct {
// Name is the name of the role
Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
// Role is the role being named
Role Role `json:"role" protobuf:"bytes,2,opt,name=role"`
}
func (in *NamedRole) DeepCopy() *NamedRole
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NamedRole.
func (in *NamedRole) DeepCopyInto(out *NamedRole)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NamedRole) Descriptor() ([]byte, []int)
func (m *NamedRole) Marshal() (dAtA []byte, err error)
func (m *NamedRole) MarshalTo(dAtA []byte) (int, error)
func (m *NamedRole) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NamedRole) ProtoMessage()
func (m *NamedRole) Reset()
func (m *NamedRole) Size() (n int)
func (this *NamedRole) String() string
func (NamedRole) SwaggerDoc() map[string]string
func (m *NamedRole) Unmarshal(dAtA []byte) error
func (m *NamedRole) XXX_DiscardUnknown()
func (m *NamedRole) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NamedRole) XXX_Merge(src proto.Message)
func (m *NamedRole) XXX_Size() int
func (m *NamedRole) XXX_Unmarshal(b []byte) error
NamedRoleBinding relates a role binding with a name
type NamedRoleBinding struct {
// Name is the name of the role binding
Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
// RoleBinding is the role binding being named
RoleBinding RoleBinding `json:"roleBinding" protobuf:"bytes,2,opt,name=roleBinding"`
}
func (in *NamedRoleBinding) DeepCopy() *NamedRoleBinding
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new NamedRoleBinding.
func (in *NamedRoleBinding) DeepCopyInto(out *NamedRoleBinding)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*NamedRoleBinding) Descriptor() ([]byte, []int)
func (m *NamedRoleBinding) Marshal() (dAtA []byte, err error)
func (m *NamedRoleBinding) MarshalTo(dAtA []byte) (int, error)
func (m *NamedRoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*NamedRoleBinding) ProtoMessage()
func (m *NamedRoleBinding) Reset()
func (m *NamedRoleBinding) Size() (n int)
func (this *NamedRoleBinding) String() string
func (NamedRoleBinding) SwaggerDoc() map[string]string
func (m *NamedRoleBinding) Unmarshal(dAtA []byte) error
func (m *NamedRoleBinding) XXX_DiscardUnknown()
func (m *NamedRoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *NamedRoleBinding) XXX_Merge(src proto.Message)
func (m *NamedRoleBinding) XXX_Size() int
func (m *NamedRoleBinding) XXX_Unmarshal(b []byte) error
OptionalNames is an array that may also be left nil to distinguish between set and unset. +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false
type OptionalNames []string
func (in OptionalNames) DeepCopy() OptionalNames
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OptionalNames.
func (in OptionalNames) DeepCopyInto(out *OptionalNames)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*OptionalNames) Descriptor() ([]byte, []int)
func (m OptionalNames) Marshal() (dAtA []byte, err error)
func (m OptionalNames) MarshalTo(dAtA []byte) (int, error)
func (m OptionalNames) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*OptionalNames) ProtoMessage()
func (m *OptionalNames) Reset()
func (m OptionalNames) Size() (n int)
func (t OptionalNames) String() string
func (m *OptionalNames) Unmarshal(dAtA []byte) error
func (m *OptionalNames) XXX_DiscardUnknown()
func (m *OptionalNames) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *OptionalNames) XXX_Merge(src proto.Message)
func (m *OptionalNames) XXX_Size() int
func (m *OptionalNames) XXX_Unmarshal(b []byte) error
OptionalScopes is an array that may also be left nil to distinguish between set and unset. +protobuf.nullable=true +protobuf.options.(gogoproto.goproto_stringer)=false
type OptionalScopes []string
func (in OptionalScopes) DeepCopy() OptionalScopes
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new OptionalScopes.
func (in OptionalScopes) DeepCopyInto(out *OptionalScopes)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*OptionalScopes) Descriptor() ([]byte, []int)
func (m OptionalScopes) Marshal() (dAtA []byte, err error)
func (m OptionalScopes) MarshalTo(dAtA []byte) (int, error)
func (m OptionalScopes) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*OptionalScopes) ProtoMessage()
func (m *OptionalScopes) Reset()
func (m OptionalScopes) Size() (n int)
func (t OptionalScopes) String() string
func (m *OptionalScopes) Unmarshal(dAtA []byte) error
func (m *OptionalScopes) XXX_DiscardUnknown()
func (m *OptionalScopes) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *OptionalScopes) XXX_Merge(src proto.Message)
func (m *OptionalScopes) XXX_Size() int
func (m *OptionalScopes) XXX_Unmarshal(b []byte) error
PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.
type PolicyRule struct {
// Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.
Verbs []string `json:"verbs" protobuf:"bytes,1,rep,name=verbs"`
// AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports.
// If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.
// +kubebuilder:pruning:PreserveUnknownFields
AttributeRestrictions kruntime.RawExtension `json:"attributeRestrictions,omitempty" protobuf:"bytes,2,opt,name=attributeRestrictions"`
// APIGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed.
// That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request
// will be allowed
// +optional
// +nullable
APIGroups []string `json:"apiGroups,omitempty" protobuf:"bytes,3,rep,name=apiGroups"`
// Resources is a list of resources this rule applies to. ResourceAll represents all resources.
Resources []string `json:"resources" protobuf:"bytes,4,rep,name=resources"`
// ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.
ResourceNames []string `json:"resourceNames,omitempty" protobuf:"bytes,5,rep,name=resourceNames"`
// NonResourceURLsSlice is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path
// This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.
NonResourceURLsSlice []string `json:"nonResourceURLs,omitempty" protobuf:"bytes,6,rep,name=nonResourceURLs"`
}
func (c *PolicyRule) DecodeNestedObjects(d runtime.Decoder) error
func (in *PolicyRule) DeepCopy() *PolicyRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRule.
func (in *PolicyRule) DeepCopyInto(out *PolicyRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*PolicyRule) Descriptor() ([]byte, []int)
func (c *PolicyRule) EncodeNestedObjects(e runtime.Encoder) error
func (m *PolicyRule) Marshal() (dAtA []byte, err error)
func (m *PolicyRule) MarshalTo(dAtA []byte) (int, error)
func (m *PolicyRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*PolicyRule) ProtoMessage()
func (m *PolicyRule) Reset()
func (m *PolicyRule) Size() (n int)
func (this *PolicyRule) String() string
func (PolicyRule) SwaggerDoc() map[string]string
func (m *PolicyRule) Unmarshal(dAtA []byte) error
func (m *PolicyRule) XXX_DiscardUnknown()
func (m *PolicyRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *PolicyRule) XXX_Merge(src proto.Message)
func (m *PolicyRule) XXX_Size() int
func (m *PolicyRule) XXX_Unmarshal(b []byte) error
ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type ResourceAccessReview struct {
metav1.TypeMeta `json:",inline"`
// Action describes the action being tested.
Action `json:",inline" protobuf:"bytes,1,opt,name=Action"`
}
func (in *ResourceAccessReview) DeepCopy() *ResourceAccessReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ResourceAccessReview.
func (in *ResourceAccessReview) DeepCopyInto(out *ResourceAccessReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ResourceAccessReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ResourceAccessReview) Descriptor() ([]byte, []int)
func (m *ResourceAccessReview) Marshal() (dAtA []byte, err error)
func (m *ResourceAccessReview) MarshalTo(dAtA []byte) (int, error)
func (m *ResourceAccessReview) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ResourceAccessReview) ProtoMessage()
func (m *ResourceAccessReview) Reset()
func (m *ResourceAccessReview) Size() (n int)
func (this *ResourceAccessReview) String() string
func (ResourceAccessReview) SwaggerDoc() map[string]string
func (m *ResourceAccessReview) Unmarshal(dAtA []byte) error
func (m *ResourceAccessReview) XXX_DiscardUnknown()
func (m *ResourceAccessReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ResourceAccessReview) XXX_Merge(src proto.Message)
func (m *ResourceAccessReview) XXX_Size() int
func (m *ResourceAccessReview) XXX_Unmarshal(b []byte) error
ResourceAccessReviewResponse describes who can perform the action
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type ResourceAccessReviewResponse struct {
metav1.TypeMeta `json:",inline"`
// Namespace is the namespace used for the access review
Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`
// UsersSlice is the list of users who can perform the action
// +k8s:conversion-gen=false
UsersSlice []string `json:"users" protobuf:"bytes,2,rep,name=users"`
// GroupsSlice is the list of groups who can perform the action
// +k8s:conversion-gen=false
GroupsSlice []string `json:"groups" protobuf:"bytes,3,rep,name=groups"`
// EvaluationError is an indication that some error occurred during resolution, but partial results can still be returned.
// It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is
// most common when a bound role is missing, but enough roles are still present and bound to reason about the request.
EvaluationError string `json:"evalutionError" protobuf:"bytes,4,opt,name=evalutionError"`
}
func (in *ResourceAccessReviewResponse) DeepCopy() *ResourceAccessReviewResponse
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ResourceAccessReviewResponse.
func (in *ResourceAccessReviewResponse) DeepCopyInto(out *ResourceAccessReviewResponse)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ResourceAccessReviewResponse) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ResourceAccessReviewResponse) Descriptor() ([]byte, []int)
func (m *ResourceAccessReviewResponse) Marshal() (dAtA []byte, err error)
func (m *ResourceAccessReviewResponse) MarshalTo(dAtA []byte) (int, error)
func (m *ResourceAccessReviewResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ResourceAccessReviewResponse) ProtoMessage()
func (m *ResourceAccessReviewResponse) Reset()
func (m *ResourceAccessReviewResponse) Size() (n int)
func (this *ResourceAccessReviewResponse) String() string
func (ResourceAccessReviewResponse) SwaggerDoc() map[string]string
func (m *ResourceAccessReviewResponse) Unmarshal(dAtA []byte) error
func (m *ResourceAccessReviewResponse) XXX_DiscardUnknown()
func (m *ResourceAccessReviewResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ResourceAccessReviewResponse) XXX_Merge(src proto.Message)
func (m *ResourceAccessReviewResponse) XXX_Size() int
func (m *ResourceAccessReviewResponse) XXX_Unmarshal(b []byte) error
Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type Role struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Rules holds all the PolicyRules for this Role
Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
}
func (c *Role) DecodeNestedObjects(d runtime.Decoder) error
func (in *Role) DeepCopy() *Role
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Role.
func (in *Role) DeepCopyInto(out *Role)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *Role) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*Role) Descriptor() ([]byte, []int)
func (c *Role) EncodeNestedObjects(e runtime.Encoder) error
func (m *Role) Marshal() (dAtA []byte, err error)
func (m *Role) MarshalTo(dAtA []byte) (int, error)
func (m *Role) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*Role) ProtoMessage()
func (m *Role) Reset()
func (m *Role) Size() (n int)
func (this *Role) String() string
func (Role) SwaggerDoc() map[string]string
func (m *Role) Unmarshal(dAtA []byte) error
func (m *Role) XXX_DiscardUnknown()
func (m *Role) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *Role) XXX_Merge(src proto.Message)
func (m *Role) XXX_Size() int
func (m *Role) XXX_Unmarshal(b []byte) error
RoleBinding references a Role, but not contain it. It can reference any Role in the same namespace or in the global namespace. It adds who information via (Users and Groups) OR Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace (excepting the master namespace which has power in all namespaces).
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type RoleBinding struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// UserNames holds all the usernames directly bound to the role.
// This field should only be specified when supporting legacy clients and servers.
// See Subjects for further details.
// +k8s:conversion-gen=false
// +optional
UserNames OptionalNames `json:"userNames" protobuf:"bytes,2,rep,name=userNames"`
// GroupNames holds all the groups directly bound to the role.
// This field should only be specified when supporting legacy clients and servers.
// See Subjects for further details.
// +k8s:conversion-gen=false
// +optional
GroupNames OptionalNames `json:"groupNames" protobuf:"bytes,3,rep,name=groupNames"`
// Subjects hold object references to authorize with this rule.
// This field is ignored if UserNames or GroupNames are specified to support legacy clients and servers.
// Thus newer clients that do not need to support backwards compatibility should send
// only fully qualified Subjects and should omit the UserNames and GroupNames fields.
// Clients that need to support backwards compatibility can use this field to build the UserNames and GroupNames.
Subjects []corev1.ObjectReference `json:"subjects" protobuf:"bytes,4,rep,name=subjects"`
// RoleRef can only reference the current namespace and the global namespace.
// If the RoleRef cannot be resolved, the Authorizer must return an error.
// Since Policy is a singleton, this is sufficient knowledge to locate a role.
RoleRef corev1.ObjectReference `json:"roleRef" protobuf:"bytes,5,opt,name=roleRef"`
}
func (in *RoleBinding) DeepCopy() *RoleBinding
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBinding.
func (in *RoleBinding) DeepCopyInto(out *RoleBinding)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *RoleBinding) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*RoleBinding) Descriptor() ([]byte, []int)
func (m *RoleBinding) Marshal() (dAtA []byte, err error)
func (m *RoleBinding) MarshalTo(dAtA []byte) (int, error)
func (m *RoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleBinding) ProtoMessage()
func (m *RoleBinding) Reset()
func (m *RoleBinding) Size() (n int)
func (this *RoleBinding) String() string
func (RoleBinding) SwaggerDoc() map[string]string
func (m *RoleBinding) Unmarshal(dAtA []byte) error
func (m *RoleBinding) XXX_DiscardUnknown()
func (m *RoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleBinding) XXX_Merge(src proto.Message)
func (m *RoleBinding) XXX_Size() int
func (m *RoleBinding) XXX_Unmarshal(b []byte) error
RoleBindingList is a collection of RoleBindings
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type RoleBindingList struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of RoleBindings
Items []RoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *RoleBindingList) DeepCopy() *RoleBindingList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBindingList.
func (in *RoleBindingList) DeepCopyInto(out *RoleBindingList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *RoleBindingList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*RoleBindingList) Descriptor() ([]byte, []int)
func (m *RoleBindingList) Marshal() (dAtA []byte, err error)
func (m *RoleBindingList) MarshalTo(dAtA []byte) (int, error)
func (m *RoleBindingList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleBindingList) ProtoMessage()
func (m *RoleBindingList) Reset()
func (m *RoleBindingList) Size() (n int)
func (this *RoleBindingList) String() string
func (RoleBindingList) SwaggerDoc() map[string]string
func (m *RoleBindingList) Unmarshal(dAtA []byte) error
func (m *RoleBindingList) XXX_DiscardUnknown()
func (m *RoleBindingList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleBindingList) XXX_Merge(src proto.Message)
func (m *RoleBindingList) XXX_Size() int
func (m *RoleBindingList) XXX_Unmarshal(b []byte) error
RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs. If any one of those RoleBindingRestriction objects matches a subject, rolebindings on that subject in the namespace are allowed.
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type RoleBindingRestriction struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard object's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ObjectMeta `json:"metadata" protobuf:"bytes,1,opt,name=metadata"`
// Spec defines the matcher.
Spec RoleBindingRestrictionSpec `json:"spec" protobuf:"bytes,2,opt,name=spec"`
}
func (in *RoleBindingRestriction) DeepCopy() *RoleBindingRestriction
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBindingRestriction.
func (in *RoleBindingRestriction) DeepCopyInto(out *RoleBindingRestriction)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *RoleBindingRestriction) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*RoleBindingRestriction) Descriptor() ([]byte, []int)
func (m *RoleBindingRestriction) Marshal() (dAtA []byte, err error)
func (m *RoleBindingRestriction) MarshalTo(dAtA []byte) (int, error)
func (m *RoleBindingRestriction) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleBindingRestriction) ProtoMessage()
func (m *RoleBindingRestriction) Reset()
func (m *RoleBindingRestriction) Size() (n int)
func (this *RoleBindingRestriction) String() string
func (RoleBindingRestriction) SwaggerDoc() map[string]string
func (m *RoleBindingRestriction) Unmarshal(dAtA []byte) error
func (m *RoleBindingRestriction) XXX_DiscardUnknown()
func (m *RoleBindingRestriction) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleBindingRestriction) XXX_Merge(src proto.Message)
func (m *RoleBindingRestriction) XXX_Size() int
func (m *RoleBindingRestriction) XXX_Unmarshal(b []byte) error
RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type RoleBindingRestrictionList struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of RoleBindingRestriction objects.
Items []RoleBindingRestriction `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *RoleBindingRestrictionList) DeepCopy() *RoleBindingRestrictionList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBindingRestrictionList.
func (in *RoleBindingRestrictionList) DeepCopyInto(out *RoleBindingRestrictionList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *RoleBindingRestrictionList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*RoleBindingRestrictionList) Descriptor() ([]byte, []int)
func (m *RoleBindingRestrictionList) Marshal() (dAtA []byte, err error)
func (m *RoleBindingRestrictionList) MarshalTo(dAtA []byte) (int, error)
func (m *RoleBindingRestrictionList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleBindingRestrictionList) ProtoMessage()
func (m *RoleBindingRestrictionList) Reset()
func (m *RoleBindingRestrictionList) Size() (n int)
func (this *RoleBindingRestrictionList) String() string
func (RoleBindingRestrictionList) SwaggerDoc() map[string]string
func (m *RoleBindingRestrictionList) Unmarshal(dAtA []byte) error
func (m *RoleBindingRestrictionList) XXX_DiscardUnknown()
func (m *RoleBindingRestrictionList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleBindingRestrictionList) XXX_Merge(src proto.Message)
func (m *RoleBindingRestrictionList) XXX_Size() int
func (m *RoleBindingRestrictionList) XXX_Unmarshal(b []byte) error
RoleBindingRestrictionSpec defines a rolebinding restriction. Exactly one field must be non-nil.
type RoleBindingRestrictionSpec struct {
// UserRestriction matches against user subjects.
// +nullable
UserRestriction *UserRestriction `json:"userrestriction" protobuf:"bytes,1,opt,name=userrestriction"`
// GroupRestriction matches against group subjects.
// +nullable
GroupRestriction *GroupRestriction `json:"grouprestriction" protobuf:"bytes,2,opt,name=grouprestriction"`
// ServiceAccountRestriction matches against service-account subjects.
// +nullable
ServiceAccountRestriction *ServiceAccountRestriction `json:"serviceaccountrestriction" protobuf:"bytes,3,opt,name=serviceaccountrestriction"`
}
func (in *RoleBindingRestrictionSpec) DeepCopy() *RoleBindingRestrictionSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBindingRestrictionSpec.
func (in *RoleBindingRestrictionSpec) DeepCopyInto(out *RoleBindingRestrictionSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*RoleBindingRestrictionSpec) Descriptor() ([]byte, []int)
func (m *RoleBindingRestrictionSpec) Marshal() (dAtA []byte, err error)
func (m *RoleBindingRestrictionSpec) MarshalTo(dAtA []byte) (int, error)
func (m *RoleBindingRestrictionSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleBindingRestrictionSpec) ProtoMessage()
func (m *RoleBindingRestrictionSpec) Reset()
func (m *RoleBindingRestrictionSpec) Size() (n int)
func (this *RoleBindingRestrictionSpec) String() string
func (RoleBindingRestrictionSpec) SwaggerDoc() map[string]string
func (m *RoleBindingRestrictionSpec) Unmarshal(dAtA []byte) error
func (m *RoleBindingRestrictionSpec) XXX_DiscardUnknown()
func (m *RoleBindingRestrictionSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleBindingRestrictionSpec) XXX_Merge(src proto.Message)
func (m *RoleBindingRestrictionSpec) XXX_Size() int
func (m *RoleBindingRestrictionSpec) XXX_Unmarshal(b []byte) error
RoleList is a collection of Roles
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type RoleList struct {
metav1.TypeMeta `json:",inline"`
// metadata is the standard list's metadata.
// More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of Roles
Items []Role `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (c *RoleList) DecodeNestedObjects(d runtime.Decoder) error
func (in *RoleList) DeepCopy() *RoleList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleList.
func (in *RoleList) DeepCopyInto(out *RoleList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *RoleList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*RoleList) Descriptor() ([]byte, []int)
func (c *RoleList) EncodeNestedObjects(e runtime.Encoder) error
func (m *RoleList) Marshal() (dAtA []byte, err error)
func (m *RoleList) MarshalTo(dAtA []byte) (int, error)
func (m *RoleList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleList) ProtoMessage()
func (m *RoleList) Reset()
func (m *RoleList) Size() (n int)
func (this *RoleList) String() string
func (RoleList) SwaggerDoc() map[string]string
func (m *RoleList) Unmarshal(dAtA []byte) error
func (m *RoleList) XXX_DiscardUnknown()
func (m *RoleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleList) XXX_Merge(src proto.Message)
func (m *RoleList) XXX_Size() int
func (m *RoleList) XXX_Unmarshal(b []byte) error
SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type SelfSubjectRulesReview struct {
metav1.TypeMeta `json:",inline"`
// Spec adds information about how to conduct the check
Spec SelfSubjectRulesReviewSpec `json:"spec" protobuf:"bytes,1,opt,name=spec"`
// Status is completed by the server to tell which permissions you have
Status SubjectRulesReviewStatus `json:"status,omitempty" protobuf:"bytes,2,opt,name=status"`
}
func (c *SelfSubjectRulesReview) DecodeNestedObjects(d runtime.Decoder) error
func (in *SelfSubjectRulesReview) DeepCopy() *SelfSubjectRulesReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SelfSubjectRulesReview.
func (in *SelfSubjectRulesReview) DeepCopyInto(out *SelfSubjectRulesReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *SelfSubjectRulesReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*SelfSubjectRulesReview) Descriptor() ([]byte, []int)
func (c *SelfSubjectRulesReview) EncodeNestedObjects(e runtime.Encoder) error
func (m *SelfSubjectRulesReview) Marshal() (dAtA []byte, err error)
func (m *SelfSubjectRulesReview) MarshalTo(dAtA []byte) (int, error)
func (m *SelfSubjectRulesReview) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*SelfSubjectRulesReview) ProtoMessage()
func (m *SelfSubjectRulesReview) Reset()
func (m *SelfSubjectRulesReview) Size() (n int)
func (this *SelfSubjectRulesReview) String() string
func (SelfSubjectRulesReview) SwaggerDoc() map[string]string
func (m *SelfSubjectRulesReview) Unmarshal(dAtA []byte) error
func (m *SelfSubjectRulesReview) XXX_DiscardUnknown()
func (m *SelfSubjectRulesReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *SelfSubjectRulesReview) XXX_Merge(src proto.Message)
func (m *SelfSubjectRulesReview) XXX_Size() int
func (m *SelfSubjectRulesReview) XXX_Unmarshal(b []byte) error
SelfSubjectRulesReviewSpec adds information about how to conduct the check
type SelfSubjectRulesReviewSpec struct {
// Scopes to use for the evaluation. Empty means "use the unscoped (full) permissions of the user/groups".
// Nil means "use the scopes on this request".
// +k8s:conversion-gen=false
Scopes OptionalScopes `json:"scopes" protobuf:"bytes,1,rep,name=scopes"`
}
func (in *SelfSubjectRulesReviewSpec) DeepCopy() *SelfSubjectRulesReviewSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SelfSubjectRulesReviewSpec.
func (in *SelfSubjectRulesReviewSpec) DeepCopyInto(out *SelfSubjectRulesReviewSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SelfSubjectRulesReviewSpec) Descriptor() ([]byte, []int)
func (m *SelfSubjectRulesReviewSpec) Marshal() (dAtA []byte, err error)
func (m *SelfSubjectRulesReviewSpec) MarshalTo(dAtA []byte) (int, error)
func (m *SelfSubjectRulesReviewSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*SelfSubjectRulesReviewSpec) ProtoMessage()
func (m *SelfSubjectRulesReviewSpec) Reset()
func (m *SelfSubjectRulesReviewSpec) Size() (n int)
func (this *SelfSubjectRulesReviewSpec) String() string
func (SelfSubjectRulesReviewSpec) SwaggerDoc() map[string]string
func (m *SelfSubjectRulesReviewSpec) Unmarshal(dAtA []byte) error
func (m *SelfSubjectRulesReviewSpec) XXX_DiscardUnknown()
func (m *SelfSubjectRulesReviewSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *SelfSubjectRulesReviewSpec) XXX_Merge(src proto.Message)
func (m *SelfSubjectRulesReviewSpec) XXX_Size() int
func (m *SelfSubjectRulesReviewSpec) XXX_Unmarshal(b []byte) error
ServiceAccountReference specifies a service account and namespace by their names.
type ServiceAccountReference struct {
// Name is the name of the service account.
Name string `json:"name" protobuf:"bytes,1,opt,name=name"`
// Namespace is the namespace of the service account. Service accounts from
// inside the whitelisted namespaces are allowed to be bound to roles. If
// Namespace is empty, then the namespace of the RoleBindingRestriction in
// which the ServiceAccountReference is embedded is used.
Namespace string `json:"namespace" protobuf:"bytes,2,opt,name=namespace"`
}
func (in *ServiceAccountReference) DeepCopy() *ServiceAccountReference
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceAccountReference.
func (in *ServiceAccountReference) DeepCopyInto(out *ServiceAccountReference)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ServiceAccountReference) Descriptor() ([]byte, []int)
func (m *ServiceAccountReference) Marshal() (dAtA []byte, err error)
func (m *ServiceAccountReference) MarshalTo(dAtA []byte) (int, error)
func (m *ServiceAccountReference) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ServiceAccountReference) ProtoMessage()
func (m *ServiceAccountReference) Reset()
func (m *ServiceAccountReference) Size() (n int)
func (this *ServiceAccountReference) String() string
func (ServiceAccountReference) SwaggerDoc() map[string]string
func (m *ServiceAccountReference) Unmarshal(dAtA []byte) error
func (m *ServiceAccountReference) XXX_DiscardUnknown()
func (m *ServiceAccountReference) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ServiceAccountReference) XXX_Merge(src proto.Message)
func (m *ServiceAccountReference) XXX_Size() int
func (m *ServiceAccountReference) XXX_Unmarshal(b []byte) error
ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.
type ServiceAccountRestriction struct {
// ServiceAccounts specifies a list of literal service-account names.
ServiceAccounts []ServiceAccountReference `json:"serviceaccounts" protobuf:"bytes,1,rep,name=serviceaccounts"`
// Namespaces specifies a list of literal namespace names.
Namespaces []string `json:"namespaces" protobuf:"bytes,2,rep,name=namespaces"`
}
func (in *ServiceAccountRestriction) DeepCopy() *ServiceAccountRestriction
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServiceAccountRestriction.
func (in *ServiceAccountRestriction) DeepCopyInto(out *ServiceAccountRestriction)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*ServiceAccountRestriction) Descriptor() ([]byte, []int)
func (m *ServiceAccountRestriction) Marshal() (dAtA []byte, err error)
func (m *ServiceAccountRestriction) MarshalTo(dAtA []byte) (int, error)
func (m *ServiceAccountRestriction) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ServiceAccountRestriction) ProtoMessage()
func (m *ServiceAccountRestriction) Reset()
func (m *ServiceAccountRestriction) Size() (n int)
func (this *ServiceAccountRestriction) String() string
func (ServiceAccountRestriction) SwaggerDoc() map[string]string
func (m *ServiceAccountRestriction) Unmarshal(dAtA []byte) error
func (m *ServiceAccountRestriction) XXX_DiscardUnknown()
func (m *ServiceAccountRestriction) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ServiceAccountRestriction) XXX_Merge(src proto.Message)
func (m *ServiceAccountRestriction) XXX_Size() int
func (m *ServiceAccountRestriction) XXX_Unmarshal(b []byte) error
SubjectAccessReview is an object for requesting information about whether a user or group can perform an action
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type SubjectAccessReview struct {
metav1.TypeMeta `json:",inline"`
// Action describes the action being tested.
Action `json:",inline" protobuf:"bytes,1,opt,name=Action"`
// User is optional. If both User and Groups are empty, the current authenticated user is used.
User string `json:"user" protobuf:"bytes,2,opt,name=user"`
// GroupsSlice is optional. Groups is the list of groups to which the User belongs.
// +k8s:conversion-gen=false
GroupsSlice []string `json:"groups" protobuf:"bytes,3,rep,name=groups"`
// Scopes to use for the evaluation. Empty means "use the unscoped (full) permissions of the user/groups".
// Nil for a self-SAR, means "use the scopes on this request".
// Nil for a regular SAR, means the same as empty.
// +k8s:conversion-gen=false
Scopes OptionalScopes `json:"scopes" protobuf:"bytes,4,rep,name=scopes"`
}
func (in *SubjectAccessReview) DeepCopy() *SubjectAccessReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubjectAccessReview.
func (in *SubjectAccessReview) DeepCopyInto(out *SubjectAccessReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *SubjectAccessReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*SubjectAccessReview) Descriptor() ([]byte, []int)
func (m *SubjectAccessReview) Marshal() (dAtA []byte, err error)
func (m *SubjectAccessReview) MarshalTo(dAtA []byte) (int, error)
func (m *SubjectAccessReview) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*SubjectAccessReview) ProtoMessage()
func (m *SubjectAccessReview) Reset()
func (m *SubjectAccessReview) Size() (n int)
func (this *SubjectAccessReview) String() string
func (SubjectAccessReview) SwaggerDoc() map[string]string
func (m *SubjectAccessReview) Unmarshal(dAtA []byte) error
func (m *SubjectAccessReview) XXX_DiscardUnknown()
func (m *SubjectAccessReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *SubjectAccessReview) XXX_Merge(src proto.Message)
func (m *SubjectAccessReview) XXX_Size() int
func (m *SubjectAccessReview) XXX_Unmarshal(b []byte) error
SubjectAccessReviewResponse describes whether or not a user or group can perform an action
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type SubjectAccessReviewResponse struct {
metav1.TypeMeta `json:",inline"`
// Namespace is the namespace used for the access review
Namespace string `json:"namespace,omitempty" protobuf:"bytes,1,opt,name=namespace"`
// Allowed is required. True if the action would be allowed, false otherwise.
Allowed bool `json:"allowed" protobuf:"varint,2,opt,name=allowed"`
// Reason is optional. It indicates why a request was allowed or denied.
Reason string `json:"reason,omitempty" protobuf:"bytes,3,opt,name=reason"`
// EvaluationError is an indication that some error occurred during the authorization check.
// It is entirely possible to get an error and be able to continue determine authorization status in spite of it. This is
// most common when a bound role is missing, but enough roles are still present and bound to reason about the request.
EvaluationError string `json:"evaluationError,omitempty" protobuf:"bytes,4,opt,name=evaluationError"`
}
func (in *SubjectAccessReviewResponse) DeepCopy() *SubjectAccessReviewResponse
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubjectAccessReviewResponse.
func (in *SubjectAccessReviewResponse) DeepCopyInto(out *SubjectAccessReviewResponse)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *SubjectAccessReviewResponse) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*SubjectAccessReviewResponse) Descriptor() ([]byte, []int)
func (m *SubjectAccessReviewResponse) Marshal() (dAtA []byte, err error)
func (m *SubjectAccessReviewResponse) MarshalTo(dAtA []byte) (int, error)
func (m *SubjectAccessReviewResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*SubjectAccessReviewResponse) ProtoMessage()
func (m *SubjectAccessReviewResponse) Reset()
func (m *SubjectAccessReviewResponse) Size() (n int)
func (this *SubjectAccessReviewResponse) String() string
func (SubjectAccessReviewResponse) SwaggerDoc() map[string]string
func (m *SubjectAccessReviewResponse) Unmarshal(dAtA []byte) error
func (m *SubjectAccessReviewResponse) XXX_DiscardUnknown()
func (m *SubjectAccessReviewResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *SubjectAccessReviewResponse) XXX_Merge(src proto.Message)
func (m *SubjectAccessReviewResponse) XXX_Size() int
func (m *SubjectAccessReviewResponse) XXX_Unmarshal(b []byte) error
SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace
Compatibility level 1: Stable within a major release for a minimum of 12 months or 3 minor releases (whichever is longer). +openshift:compatibility-gen:level=1
type SubjectRulesReview struct {
metav1.TypeMeta `json:",inline"`
// Spec adds information about how to conduct the check
Spec SubjectRulesReviewSpec `json:"spec" protobuf:"bytes,1,opt,name=spec"`
// Status is completed by the server to tell which permissions you have
Status SubjectRulesReviewStatus `json:"status,omitempty" protobuf:"bytes,2,opt,name=status"`
}
func (c *SubjectRulesReview) DecodeNestedObjects(d runtime.Decoder) error
func (in *SubjectRulesReview) DeepCopy() *SubjectRulesReview
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubjectRulesReview.
func (in *SubjectRulesReview) DeepCopyInto(out *SubjectRulesReview)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *SubjectRulesReview) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*SubjectRulesReview) Descriptor() ([]byte, []int)
func (c *SubjectRulesReview) EncodeNestedObjects(e runtime.Encoder) error
func (m *SubjectRulesReview) Marshal() (dAtA []byte, err error)
func (m *SubjectRulesReview) MarshalTo(dAtA []byte) (int, error)
func (m *SubjectRulesReview) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*SubjectRulesReview) ProtoMessage()
func (m *SubjectRulesReview) Reset()
func (m *SubjectRulesReview) Size() (n int)
func (this *SubjectRulesReview) String() string
func (SubjectRulesReview) SwaggerDoc() map[string]string
func (m *SubjectRulesReview) Unmarshal(dAtA []byte) error
func (m *SubjectRulesReview) XXX_DiscardUnknown()
func (m *SubjectRulesReview) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *SubjectRulesReview) XXX_Merge(src proto.Message)
func (m *SubjectRulesReview) XXX_Size() int
func (m *SubjectRulesReview) XXX_Unmarshal(b []byte) error
SubjectRulesReviewSpec adds information about how to conduct the check
type SubjectRulesReviewSpec struct {
// User is optional. At least one of User and Groups must be specified.
User string `json:"user" protobuf:"bytes,1,opt,name=user"`
// Groups is optional. Groups is the list of groups to which the User belongs. At least one of User and Groups must be specified.
Groups []string `json:"groups" protobuf:"bytes,2,rep,name=groups"`
// Scopes to use for the evaluation. Empty means "use the unscoped (full) permissions of the user/groups".
Scopes OptionalScopes `json:"scopes" protobuf:"bytes,3,opt,name=scopes"`
}
func (in *SubjectRulesReviewSpec) DeepCopy() *SubjectRulesReviewSpec
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubjectRulesReviewSpec.
func (in *SubjectRulesReviewSpec) DeepCopyInto(out *SubjectRulesReviewSpec)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SubjectRulesReviewSpec) Descriptor() ([]byte, []int)
func (m *SubjectRulesReviewSpec) Marshal() (dAtA []byte, err error)
func (m *SubjectRulesReviewSpec) MarshalTo(dAtA []byte) (int, error)
func (m *SubjectRulesReviewSpec) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*SubjectRulesReviewSpec) ProtoMessage()
func (m *SubjectRulesReviewSpec) Reset()
func (m *SubjectRulesReviewSpec) Size() (n int)
func (this *SubjectRulesReviewSpec) String() string
func (SubjectRulesReviewSpec) SwaggerDoc() map[string]string
func (m *SubjectRulesReviewSpec) Unmarshal(dAtA []byte) error
func (m *SubjectRulesReviewSpec) XXX_DiscardUnknown()
func (m *SubjectRulesReviewSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *SubjectRulesReviewSpec) XXX_Merge(src proto.Message)
func (m *SubjectRulesReviewSpec) XXX_Size() int
func (m *SubjectRulesReviewSpec) XXX_Unmarshal(b []byte) error
SubjectRulesReviewStatus is contains the result of a rules check
type SubjectRulesReviewStatus struct {
// Rules is the list of rules (no particular sort) that are allowed for the subject
Rules []PolicyRule `json:"rules" protobuf:"bytes,1,rep,name=rules"`
// EvaluationError can appear in combination with Rules. It means some error happened during evaluation
// that may have prevented additional rules from being populated.
EvaluationError string `json:"evaluationError,omitempty" protobuf:"bytes,2,opt,name=evaluationError"`
}
func (in *SubjectRulesReviewStatus) DeepCopy() *SubjectRulesReviewStatus
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new SubjectRulesReviewStatus.
func (in *SubjectRulesReviewStatus) DeepCopyInto(out *SubjectRulesReviewStatus)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*SubjectRulesReviewStatus) Descriptor() ([]byte, []int)
func (m *SubjectRulesReviewStatus) Marshal() (dAtA []byte, err error)
func (m *SubjectRulesReviewStatus) MarshalTo(dAtA []byte) (int, error)
func (m *SubjectRulesReviewStatus) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*SubjectRulesReviewStatus) ProtoMessage()
func (m *SubjectRulesReviewStatus) Reset()
func (m *SubjectRulesReviewStatus) Size() (n int)
func (this *SubjectRulesReviewStatus) String() string
func (SubjectRulesReviewStatus) SwaggerDoc() map[string]string
func (m *SubjectRulesReviewStatus) Unmarshal(dAtA []byte) error
func (m *SubjectRulesReviewStatus) XXX_DiscardUnknown()
func (m *SubjectRulesReviewStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *SubjectRulesReviewStatus) XXX_Merge(src proto.Message)
func (m *SubjectRulesReviewStatus) XXX_Size() int
func (m *SubjectRulesReviewStatus) XXX_Unmarshal(b []byte) error
UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.
type UserRestriction struct {
// Users specifies a list of literal user names.
Users []string `json:"users" protobuf:"bytes,1,rep,name=users"`
// Groups specifies a list of literal group names.
// +nullable
Groups []string `json:"groups" protobuf:"bytes,2,rep,name=groups"`
// Selectors specifies a list of label selectors over user labels.
// +nullable
Selectors []metav1.LabelSelector `json:"labels" protobuf:"bytes,3,rep,name=labels"`
}
func (in *UserRestriction) DeepCopy() *UserRestriction
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new UserRestriction.
func (in *UserRestriction) DeepCopyInto(out *UserRestriction)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*UserRestriction) Descriptor() ([]byte, []int)
func (m *UserRestriction) Marshal() (dAtA []byte, err error)
func (m *UserRestriction) MarshalTo(dAtA []byte) (int, error)
func (m *UserRestriction) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*UserRestriction) ProtoMessage()
func (m *UserRestriction) Reset()
func (m *UserRestriction) Size() (n int)
func (this *UserRestriction) String() string
func (UserRestriction) SwaggerDoc() map[string]string
func (m *UserRestriction) Unmarshal(dAtA []byte) error
func (m *UserRestriction) XXX_DiscardUnknown()
func (m *UserRestriction) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *UserRestriction) XXX_Merge(src proto.Message)
func (m *UserRestriction) XXX_Size() int
func (m *UserRestriction) XXX_Unmarshal(b []byte) error