kubernetes/staging/src/k8s.io/apiserver/pkg/authorization/cel/matcher.go

type CELMatcher …

// eval evaluates the given SubjectAccessReview against all cel matchCondition expression
func (c *CELMatcher) Eval(ctx context.Context, r *authorizationv1.SubjectAccessReview) (bool, error) { … }