kubernetes/plugin/pkg/auth/authorizer/node/node_authorizer_test.go

func TestNodeAuthorizer(t *testing.T) { … }

func TestNodeAuthorizerSharedResources(t *testing.T) { … }

type sampleDataOpts …

func mustParseFields(s string) fields.Requirements { … }

func BenchmarkPopulationAllocation(b *testing.B) { … }

func BenchmarkPopulationRetention(b *testing.B) { … }

func BenchmarkWriteIndexMaintenance(b *testing.B) { … }

func BenchmarkUnauthorizedRequests(b *testing.B) { … }

func BenchmarkAuthorization(b *testing.B) { … }

func populate(graph *Graph, nodes []*corev1.Node, pods []*corev1.Pod, pvs []*corev1.PersistentVolume, attachments []*storagev1.VolumeAttachment, slices []*resourceapi.ResourceSlice) { … }

func randomSubset(a, b int) []int { … }

// generate creates sample pods and persistent volumes based on the provided options.
// the secret/configmap/pvc/node references in the pod and pv objects are named to indicate the connections between the objects.
// for example, secret0-pod0-node0 is a secret referenced by pod0 which is bound to node0.
// when populated into the graph, the node authorizer should allow node0 to access that secret, but not node1.
func generate(opts *sampleDataOpts) ([]*corev1.Node, []*corev1.Pod, []*corev1.PersistentVolume, []*storagev1.VolumeAttachment, []*resourceapi.ResourceSlice) { … }

func generatePod(name, namespace, nodeName, svcAccountName string, opts *sampleDataOpts) (*corev1.Pod, []*corev1.PersistentVolume) { … }