const (
APIGroupAll = "*"
ResourceAll = "*"
VerbAll = "*"
NonResourceAll = "*"
GroupKind = "Group"
ServiceAccountKind = "ServiceAccount"
UserKind = "User"
// AutoUpdateAnnotationKey is the name of an annotation which prevents reconciliation if set to "false"
AutoUpdateAnnotationKey = "rbac.authorization.kubernetes.io/autoupdate"
)
const GroupName = "rbac.authorization.k8s.io"
var (
ErrInvalidLengthGenerated = fmt.Errorf("proto: negative length found during unmarshaling")
ErrIntOverflowGenerated = fmt.Errorf("proto: integer overflow")
ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
var (
// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)
AddToScheme = localSchemeBuilder.AddToScheme
)
SchemeGroupVersion is group version used to register these objects
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1"}
func Resource(resource string) schema.GroupResource
Resource takes an unqualified resource and returns a Group qualified GroupResource
AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole
type AggregationRule struct {
// ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules.
// If any of the selectors match, then the ClusterRole's permissions will be added
// +optional
// +listType=atomic
ClusterRoleSelectors []metav1.LabelSelector `json:"clusterRoleSelectors,omitempty" protobuf:"bytes,1,rep,name=clusterRoleSelectors"`
}
func (in *AggregationRule) DeepCopy() *AggregationRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AggregationRule.
func (in *AggregationRule) DeepCopyInto(out *AggregationRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*AggregationRule) Descriptor() ([]byte, []int)
func (m *AggregationRule) Marshal() (dAtA []byte, err error)
func (m *AggregationRule) MarshalTo(dAtA []byte) (int, error)
func (m *AggregationRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*AggregationRule) ProtoMessage()
func (m *AggregationRule) Reset()
func (m *AggregationRule) Size() (n int)
func (this *AggregationRule) String() string
func (AggregationRule) SwaggerDoc() map[string]string
func (m *AggregationRule) Unmarshal(dAtA []byte) error
func (m *AggregationRule) XXX_DiscardUnknown()
func (m *AggregationRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *AggregationRule) XXX_Merge(src proto.Message)
func (m *AggregationRule) XXX_Size() int
func (m *AggregationRule) XXX_Unmarshal(b []byte) error
ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.
type ClusterRole struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// +optional
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Rules holds all the PolicyRules for this ClusterRole
// +optional
// +listType=atomic
Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
// AggregationRule is an optional field that describes how to build the Rules for this ClusterRole.
// If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be
// stomped by the controller.
// +optional
AggregationRule *AggregationRule `json:"aggregationRule,omitempty" protobuf:"bytes,3,opt,name=aggregationRule"`
}
func (in *ClusterRole) DeepCopy() *ClusterRole
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRole.
func (in *ClusterRole) DeepCopyInto(out *ClusterRole)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ClusterRole) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ClusterRole) Descriptor() ([]byte, []int)
func (m *ClusterRole) Marshal() (dAtA []byte, err error)
func (m *ClusterRole) MarshalTo(dAtA []byte) (int, error)
func (m *ClusterRole) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ClusterRole) ProtoMessage()
func (m *ClusterRole) Reset()
func (m *ClusterRole) Size() (n int)
func (this *ClusterRole) String() string
func (ClusterRole) SwaggerDoc() map[string]string
func (m *ClusterRole) Unmarshal(dAtA []byte) error
func (m *ClusterRole) XXX_DiscardUnknown()
func (m *ClusterRole) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ClusterRole) XXX_Merge(src proto.Message)
func (m *ClusterRole) XXX_Size() int
func (m *ClusterRole) XXX_Unmarshal(b []byte) error
ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.
type ClusterRoleBinding struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// +optional
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Subjects holds references to the objects the role applies to.
// +optional
// +listType=atomic
Subjects []Subject `json:"subjects,omitempty" protobuf:"bytes,2,rep,name=subjects"`
// RoleRef can only reference a ClusterRole in the global namespace.
// If the RoleRef cannot be resolved, the Authorizer must return an error.
// This field is immutable.
RoleRef RoleRef `json:"roleRef" protobuf:"bytes,3,opt,name=roleRef"`
}
func (in *ClusterRoleBinding) DeepCopy() *ClusterRoleBinding
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleBinding.
func (in *ClusterRoleBinding) DeepCopyInto(out *ClusterRoleBinding)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ClusterRoleBinding) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ClusterRoleBinding) Descriptor() ([]byte, []int)
func (m *ClusterRoleBinding) Marshal() (dAtA []byte, err error)
func (m *ClusterRoleBinding) MarshalTo(dAtA []byte) (int, error)
func (m *ClusterRoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ClusterRoleBinding) ProtoMessage()
func (m *ClusterRoleBinding) Reset()
func (m *ClusterRoleBinding) Size() (n int)
func (this *ClusterRoleBinding) String() string
func (ClusterRoleBinding) SwaggerDoc() map[string]string
func (m *ClusterRoleBinding) Unmarshal(dAtA []byte) error
func (m *ClusterRoleBinding) XXX_DiscardUnknown()
func (m *ClusterRoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ClusterRoleBinding) XXX_Merge(src proto.Message)
func (m *ClusterRoleBinding) XXX_Size() int
func (m *ClusterRoleBinding) XXX_Unmarshal(b []byte) error
ClusterRoleBindingList is a collection of ClusterRoleBindings
type ClusterRoleBindingList struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// +optional
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of ClusterRoleBindings
Items []ClusterRoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *ClusterRoleBindingList) DeepCopy() *ClusterRoleBindingList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleBindingList.
func (in *ClusterRoleBindingList) DeepCopyInto(out *ClusterRoleBindingList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ClusterRoleBindingList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ClusterRoleBindingList) Descriptor() ([]byte, []int)
func (m *ClusterRoleBindingList) Marshal() (dAtA []byte, err error)
func (m *ClusterRoleBindingList) MarshalTo(dAtA []byte) (int, error)
func (m *ClusterRoleBindingList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ClusterRoleBindingList) ProtoMessage()
func (m *ClusterRoleBindingList) Reset()
func (m *ClusterRoleBindingList) Size() (n int)
func (this *ClusterRoleBindingList) String() string
func (ClusterRoleBindingList) SwaggerDoc() map[string]string
func (m *ClusterRoleBindingList) Unmarshal(dAtA []byte) error
func (m *ClusterRoleBindingList) XXX_DiscardUnknown()
func (m *ClusterRoleBindingList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ClusterRoleBindingList) XXX_Merge(src proto.Message)
func (m *ClusterRoleBindingList) XXX_Size() int
func (m *ClusterRoleBindingList) XXX_Unmarshal(b []byte) error
ClusterRoleList is a collection of ClusterRoles
type ClusterRoleList struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// +optional
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of ClusterRoles
Items []ClusterRole `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *ClusterRoleList) DeepCopy() *ClusterRoleList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleList.
func (in *ClusterRoleList) DeepCopyInto(out *ClusterRoleList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *ClusterRoleList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*ClusterRoleList) Descriptor() ([]byte, []int)
func (m *ClusterRoleList) Marshal() (dAtA []byte, err error)
func (m *ClusterRoleList) MarshalTo(dAtA []byte) (int, error)
func (m *ClusterRoleList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*ClusterRoleList) ProtoMessage()
func (m *ClusterRoleList) Reset()
func (m *ClusterRoleList) Size() (n int)
func (this *ClusterRoleList) String() string
func (ClusterRoleList) SwaggerDoc() map[string]string
func (m *ClusterRoleList) Unmarshal(dAtA []byte) error
func (m *ClusterRoleList) XXX_DiscardUnknown()
func (m *ClusterRoleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *ClusterRoleList) XXX_Merge(src proto.Message)
func (m *ClusterRoleList) XXX_Size() int
func (m *ClusterRoleList) XXX_Unmarshal(b []byte) error
PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.
type PolicyRule struct {
// Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
// +listType=atomic
Verbs []string `json:"verbs" protobuf:"bytes,1,rep,name=verbs"`
// APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of
// the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
// +optional
// +listType=atomic
APIGroups []string `json:"apiGroups,omitempty" protobuf:"bytes,2,rep,name=apiGroups"`
// Resources is a list of resources this rule applies to. '*' represents all resources.
// +optional
// +listType=atomic
Resources []string `json:"resources,omitempty" protobuf:"bytes,3,rep,name=resources"`
// ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.
// +optional
// +listType=atomic
ResourceNames []string `json:"resourceNames,omitempty" protobuf:"bytes,4,rep,name=resourceNames"`
// NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path
// Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding.
// Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.
// +optional
// +listType=atomic
NonResourceURLs []string `json:"nonResourceURLs,omitempty" protobuf:"bytes,5,rep,name=nonResourceURLs"`
}
func (in *PolicyRule) DeepCopy() *PolicyRule
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRule.
func (in *PolicyRule) DeepCopyInto(out *PolicyRule)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*PolicyRule) Descriptor() ([]byte, []int)
func (m *PolicyRule) Marshal() (dAtA []byte, err error)
func (m *PolicyRule) MarshalTo(dAtA []byte) (int, error)
func (m *PolicyRule) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*PolicyRule) ProtoMessage()
func (m *PolicyRule) Reset()
func (m *PolicyRule) Size() (n int)
func (this *PolicyRule) String() string
func (PolicyRule) SwaggerDoc() map[string]string
func (m *PolicyRule) Unmarshal(dAtA []byte) error
func (m *PolicyRule) XXX_DiscardUnknown()
func (m *PolicyRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *PolicyRule) XXX_Merge(src proto.Message)
func (m *PolicyRule) XXX_Size() int
func (m *PolicyRule) XXX_Unmarshal(b []byte) error
Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.
type Role struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// +optional
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Rules holds all the PolicyRules for this Role
// +optional
// +listType=atomic
Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
}
func (in *Role) DeepCopy() *Role
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Role.
func (in *Role) DeepCopyInto(out *Role)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *Role) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*Role) Descriptor() ([]byte, []int)
func (m *Role) Marshal() (dAtA []byte, err error)
func (m *Role) MarshalTo(dAtA []byte) (int, error)
func (m *Role) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*Role) ProtoMessage()
func (m *Role) Reset()
func (m *Role) Size() (n int)
func (this *Role) String() string
func (Role) SwaggerDoc() map[string]string
func (m *Role) Unmarshal(dAtA []byte) error
func (m *Role) XXX_DiscardUnknown()
func (m *Role) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *Role) XXX_Merge(src proto.Message)
func (m *Role) XXX_Size() int
func (m *Role) XXX_Unmarshal(b []byte) error
RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.
type RoleBinding struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// +optional
metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Subjects holds references to the objects the role applies to.
// +optional
// +listType=atomic
Subjects []Subject `json:"subjects,omitempty" protobuf:"bytes,2,rep,name=subjects"`
// RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace.
// If the RoleRef cannot be resolved, the Authorizer must return an error.
// This field is immutable.
RoleRef RoleRef `json:"roleRef" protobuf:"bytes,3,opt,name=roleRef"`
}
func (in *RoleBinding) DeepCopy() *RoleBinding
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBinding.
func (in *RoleBinding) DeepCopyInto(out *RoleBinding)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *RoleBinding) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*RoleBinding) Descriptor() ([]byte, []int)
func (m *RoleBinding) Marshal() (dAtA []byte, err error)
func (m *RoleBinding) MarshalTo(dAtA []byte) (int, error)
func (m *RoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleBinding) ProtoMessage()
func (m *RoleBinding) Reset()
func (m *RoleBinding) Size() (n int)
func (this *RoleBinding) String() string
func (RoleBinding) SwaggerDoc() map[string]string
func (m *RoleBinding) Unmarshal(dAtA []byte) error
func (m *RoleBinding) XXX_DiscardUnknown()
func (m *RoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleBinding) XXX_Merge(src proto.Message)
func (m *RoleBinding) XXX_Size() int
func (m *RoleBinding) XXX_Unmarshal(b []byte) error
RoleBindingList is a collection of RoleBindings
type RoleBindingList struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// +optional
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of RoleBindings
Items []RoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *RoleBindingList) DeepCopy() *RoleBindingList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBindingList.
func (in *RoleBindingList) DeepCopyInto(out *RoleBindingList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *RoleBindingList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*RoleBindingList) Descriptor() ([]byte, []int)
func (m *RoleBindingList) Marshal() (dAtA []byte, err error)
func (m *RoleBindingList) MarshalTo(dAtA []byte) (int, error)
func (m *RoleBindingList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleBindingList) ProtoMessage()
func (m *RoleBindingList) Reset()
func (m *RoleBindingList) Size() (n int)
func (this *RoleBindingList) String() string
func (RoleBindingList) SwaggerDoc() map[string]string
func (m *RoleBindingList) Unmarshal(dAtA []byte) error
func (m *RoleBindingList) XXX_DiscardUnknown()
func (m *RoleBindingList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleBindingList) XXX_Merge(src proto.Message)
func (m *RoleBindingList) XXX_Size() int
func (m *RoleBindingList) XXX_Unmarshal(b []byte) error
RoleList is a collection of Roles
type RoleList struct {
metav1.TypeMeta `json:",inline"`
// Standard object's metadata.
// +optional
metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`
// Items is a list of Roles
Items []Role `json:"items" protobuf:"bytes,2,rep,name=items"`
}
func (in *RoleList) DeepCopy() *RoleList
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleList.
func (in *RoleList) DeepCopyInto(out *RoleList)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (in *RoleList) DeepCopyObject() runtime.Object
DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.
func (*RoleList) Descriptor() ([]byte, []int)
func (m *RoleList) Marshal() (dAtA []byte, err error)
func (m *RoleList) MarshalTo(dAtA []byte) (int, error)
func (m *RoleList) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleList) ProtoMessage()
func (m *RoleList) Reset()
func (m *RoleList) Size() (n int)
func (this *RoleList) String() string
func (RoleList) SwaggerDoc() map[string]string
func (m *RoleList) Unmarshal(dAtA []byte) error
func (m *RoleList) XXX_DiscardUnknown()
func (m *RoleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleList) XXX_Merge(src proto.Message)
func (m *RoleList) XXX_Size() int
func (m *RoleList) XXX_Unmarshal(b []byte) error
RoleRef contains information that points to the role being used +structType=atomic
type RoleRef struct {
// APIGroup is the group for the resource being referenced
APIGroup string `json:"apiGroup" protobuf:"bytes,1,opt,name=apiGroup"`
// Kind is the type of resource being referenced
Kind string `json:"kind" protobuf:"bytes,2,opt,name=kind"`
// Name is the name of resource being referenced
Name string `json:"name" protobuf:"bytes,3,opt,name=name"`
}
func (in *RoleRef) DeepCopy() *RoleRef
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleRef.
func (in *RoleRef) DeepCopyInto(out *RoleRef)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*RoleRef) Descriptor() ([]byte, []int)
func (m *RoleRef) Marshal() (dAtA []byte, err error)
func (m *RoleRef) MarshalTo(dAtA []byte) (int, error)
func (m *RoleRef) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*RoleRef) ProtoMessage()
func (m *RoleRef) Reset()
func (m *RoleRef) Size() (n int)
func (this *RoleRef) String() string
func (RoleRef) SwaggerDoc() map[string]string
func (m *RoleRef) Unmarshal(dAtA []byte) error
func (m *RoleRef) XXX_DiscardUnknown()
func (m *RoleRef) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *RoleRef) XXX_Merge(src proto.Message)
func (m *RoleRef) XXX_Size() int
func (m *RoleRef) XXX_Unmarshal(b []byte) error
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names. +structType=atomic
type Subject struct {
// Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
// If the Authorizer does not recognized the kind value, the Authorizer should report an error.
Kind string `json:"kind" protobuf:"bytes,1,opt,name=kind"`
// APIGroup holds the API group of the referenced subject.
// Defaults to "" for ServiceAccount subjects.
// Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
// +optional
APIGroup string `json:"apiGroup,omitempty" protobuf:"bytes,2,opt.name=apiGroup"`
// Name of the object being referenced.
Name string `json:"name" protobuf:"bytes,3,opt,name=name"`
// Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
// the Authorizer should report an error.
// +optional
Namespace string `json:"namespace,omitempty" protobuf:"bytes,4,opt,name=namespace"`
}
func (in *Subject) DeepCopy() *Subject
DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Subject.
func (in *Subject) DeepCopyInto(out *Subject)
DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.
func (*Subject) Descriptor() ([]byte, []int)
func (m *Subject) Marshal() (dAtA []byte, err error)
func (m *Subject) MarshalTo(dAtA []byte) (int, error)
func (m *Subject) MarshalToSizedBuffer(dAtA []byte) (int, error)
func (*Subject) ProtoMessage()
func (m *Subject) Reset()
func (m *Subject) Size() (n int)
func (this *Subject) String() string
func (Subject) SwaggerDoc() map[string]string
func (m *Subject) Unmarshal(dAtA []byte) error
func (m *Subject) XXX_DiscardUnknown()
func (m *Subject) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)
func (m *Subject) XXX_Merge(src proto.Message)
func (m *Subject) XXX_Size() int
func (m *Subject) XXX_Unmarshal(b []byte) error