kubernetes/staging/src/k8s.io/component-helpers/auth/rbac/reconciliation/reconcile_role.go

type ReconcileOperation

var ReconcileCreate

var ReconcileUpdate

var ReconcileRecreate

var ReconcileNone

type RuleOwnerModifier

type RuleOwner

type ReconcileRoleOptions

type ReconcileClusterRoleResult

func (o *ReconcileRoleOptions) Run() (*ReconcileClusterRoleResult, error) {}

func (o *ReconcileRoleOptions) run(attempts int) (*ReconcileClusterRoleResult, error) {}

// computeReconciledRole returns the role that must be created and/or updated to make the
// existing role's permissions match the expected role's permissions
func computeReconciledRole(existing, expected RuleOwner, removeExtraPermissions bool) (*ReconcileClusterRoleResult, error) {}

// merge combines the given maps with the later annotations having higher precedence
func merge(maps ...map[string]string) map[string]string {}

// aggregationRuleCovers determines whether or not the ownerSelectors cover the servantSelectors in terms of semantically
// equal label selectors.
// It returns whether or not the ownerSelectors cover and a list of the rules that the ownerSelectors do not cover.
func aggregationRuleCovers(ownerRule, servantRule *rbacv1.AggregationRule) (bool, []metav1.LabelSelector) {}