Documentation
¶
Overview ¶
Package certificates provides Registry interface and its RESTStorage implementation for storing Role objects.
Index ¶
Constants ¶
This section is empty.
Variables ¶
View Source
var Strategy = strategy{api.Scheme, names.SimpleNameGenerator}
strategy is the default logic that applies when creating and updating Role objects.
Functions ¶
func GetAttrs ¶ added in v1.6.0
func GetAttrs(obj runtime.Object) (labels.Set, fields.Set, error)
GetAttrs returns labels and fields of a given object for filtering purposes.
func Matcher ¶
func Matcher(label labels.Selector, field fields.Selector) apistorage.SelectionPredicate
Matcher returns a generic matcher for a given label and field selector.
func SelectableFields ¶
func SelectableFields(obj *rbac.Role) fields.Set
SelectableFields returns a field set that can be used for filter selection
Types ¶
type AuthorizerAdapter ¶
type AuthorizerAdapter struct {
Registry Registry
}
AuthorizerAdapter adapts the registry to the authorizer interface
type Registry ¶
type Registry interface {
ListRoles(ctx genericapirequest.Context, options *metainternalversion.ListOptions) (*rbac.RoleList, error)
CreateRole(ctx genericapirequest.Context, role *rbac.Role) error
UpdateRole(ctx genericapirequest.Context, role *rbac.Role) error
GetRole(ctx genericapirequest.Context, name string, options *metav1.GetOptions) (*rbac.Role, error)
DeleteRole(ctx genericapirequest.Context, name string) error
WatchRoles(ctx genericapirequest.Context, options *metainternalversion.ListOptions) (watch.Interface, error)
}
Registry is an interface for things that know how to store Roles.
func NewRegistry ¶
func NewRegistry(s rest.StandardStorage) Registry
NewRegistry returns a new Registry interface for the given Storage. Any mismatched types will panic.
Directories
¶
Path | Synopsis |
---|---|
Package policybased implements a standard storage for Role that prevents privilege escalation.
|
Package policybased implements a standard storage for Role that prevents privilege escalation. |
Click to show internal directories.
Click to hide internal directories.