kubernetes/staging/src/k8s.io/apiserver/pkg/authorization/authorizerfactory/builtin.go

type alwaysAllowAuthorizer …

func (alwaysAllowAuthorizer) Authorize(ctx context.Context, a authorizer.Attributes) (authorized authorizer.Decision, reason string, err error) { … }

func (alwaysAllowAuthorizer) RulesFor(ctx context.Context, user user.Info, namespace string) ([]authorizer.ResourceRuleInfo, []authorizer.NonResourceRuleInfo, bool, error) { … }

func NewAlwaysAllowAuthorizer() *alwaysAllowAuthorizer { … }

type alwaysDenyAuthorizer …

func (alwaysDenyAuthorizer) Authorize(ctx context.Context, a authorizer.Attributes) (decision authorizer.Decision, reason string, err error) { … }

func (alwaysDenyAuthorizer) RulesFor(ctx context.Context, user user.Info, namespace string) ([]authorizer.ResourceRuleInfo, []authorizer.NonResourceRuleInfo, bool, error) { … }

func NewAlwaysDenyAuthorizer() *alwaysDenyAuthorizer { … }

type privilegedGroupAuthorizer …

func (r *privilegedGroupAuthorizer) Authorize(ctx context.Context, attr authorizer.Attributes) (authorizer.Decision, string, error) { … }

// NewPrivilegedGroups is for use in loopback scenarios
func NewPrivilegedGroups(groups ...string) *privilegedGroupAuthorizer { … }