kubernetes/plugin/pkg/auth/authorizer/rbac/bootstrappolicy/policy.go

var Write …

var ReadWrite …

var Read …

var ReadUpdate …

var Label …

var Annotation …

const legacyGroup …

const appsGroup …

const authenticationGroup …

const authorizationGroup …

const autoscalingGroup …

const batchGroup …

const certificatesGroup …

const coordinationGroup …

const discoveryGroup …

const extensionsGroup …

const policyGroup …

const rbacGroup …

const resourceGroup …

const storageGroup …

const resMetricsGroup …

const customMetricsGroup …

const externalMetricsGroup …

const networkingGroup …

const eventsGroup …

const internalAPIServerGroup …

const admissionRegistrationGroup …

const storageVersionMigrationGroup …

func addDefaultMetadata(obj runtime.Object) { … }

func addClusterRoleLabel(roles []rbacv1.ClusterRole) { … }

func addClusterRoleBindingLabel(rolebindings []rbacv1.ClusterRoleBinding) { … }

// NodeRules returns node policy rules, it is slice of rbacv1.PolicyRule.
func NodeRules() []rbacv1.PolicyRule { … }

// ClusterRoles returns the cluster roles to bootstrap an API server with
func ClusterRoles() []rbacv1.ClusterRole { … }

const systemNodeRoleName …

// ClusterRoleBindings return default rolebindings to the default roles
func ClusterRoleBindings() []rbacv1.ClusterRoleBinding { … }

// ClusterRolesToAggregate maps from previous clusterrole name to the new clusterrole name
func ClusterRolesToAggregate() map[string]string { … }

// ClusterRoleBindingsToSplit returns a map of Names of source ClusterRoleBindings
// to copy Subjects, Annotations, and Labels to destination ClusterRoleBinding templates.
func ClusterRoleBindingsToSplit() map[string]rbacv1.ClusterRoleBinding { … }