kubernetes/staging/src/k8s.io/apiserver/pkg/endpoints/filters/authorization.go

const decisionAnnotationKey …

const reasonAnnotationKey …

const decisionAllow …

const decisionForbid …

const reasonError …

type recordAuthorizationMetricsFunc …

// WithAuthorization passes all authorized requests on to handler, and returns a forbidden error otherwise.
func WithAuthorization(hhandler http.Handler, auth authorizer.Authorizer, s runtime.NegotiatedSerializer) http.Handler { … }

func withAuthorization(handler http.Handler, a authorizer.Authorizer, s runtime.NegotiatedSerializer, metrics recordAuthorizationMetricsFunc) http.Handler { … }

func GetAuthorizerAttributes(ctx context.Context) (authorizer.Attributes, error) { … }