kubernetes/plugin/pkg/auth/authorizer/rbac/rbac.go

type RequestToRuleMapper …

type RBACAuthorizer …

type authorizingVisitor …

func (v *authorizingVisitor) visit(source fmt.Stringer, rule *rbacv1.PolicyRule, err error) bool { … }

func (r *RBACAuthorizer) Authorize(ctx context.Context, requestAttributes authorizer.Attributes) (authorizer.Decision, string, error) { … }

func (r *RBACAuthorizer) RulesFor(ctx context.Context, user user.Info, namespace string) ([]authorizer.ResourceRuleInfo, []authorizer.NonResourceRuleInfo, bool, error) { … }

func New(roles rbacregistryvalidation.RoleGetter, roleBindings rbacregistryvalidation.RoleBindingLister, clusterRoles rbacregistryvalidation.ClusterRoleGetter, clusterRoleBindings rbacregistryvalidation.ClusterRoleBindingLister) *RBACAuthorizer { … }

func RulesAllow(requestAttributes authorizer.Attributes, rules ...rbacv1.PolicyRule) bool { … }

func RuleAllows(requestAttributes authorizer.Attributes, rule *rbacv1.PolicyRule) bool { … }

type RoleGetter …

func (g *RoleGetter) GetRole(ctx context.Context, namespace, name string) (*rbacv1.Role, error) { … }

type RoleBindingLister …

func (l *RoleBindingLister) ListRoleBindings(ctx context.Context, namespace string) ([]*rbacv1.RoleBinding, error) { … }

type ClusterRoleGetter …

func (g *ClusterRoleGetter) GetClusterRole(ctx context.Context, name string) (*rbacv1.ClusterRole, error) { … }

type ClusterRoleBindingLister …

func (l *ClusterRoleBindingLister) ListClusterRoleBindings(ctx context.Context) ([]*rbacv1.ClusterRoleBinding, error) { … }