kubernetes/staging/src/k8s.io/component-helpers/auth/rbac/reconciliation/reconcile_rolebindings.go

type RoleBindingModifier …

type RoleBinding …

type ReconcileRoleBindingOptions …

type ReconcileClusterRoleBindingResult …

func (o *ReconcileRoleBindingOptions) Run() (*ReconcileClusterRoleBindingResult, error) { … }

func (o *ReconcileRoleBindingOptions) run(attempts int) (*ReconcileClusterRoleBindingResult, error) { … }

// computeReconciledRoleBinding returns the rolebinding that must be created and/or updated to make the
// existing rolebinding's subjects, roleref, labels, and annotations match the expected rolebinding
func computeReconciledRoleBinding(existing, expected RoleBinding, removeExtraSubjects bool) (*ReconcileClusterRoleBindingResult, error) { … }

func contains(list []rbacv1.Subject, item rbacv1.Subject) bool { … }

// diffSubjectLists returns lists containing the items unique to each provided list:
//
//	list1Only = list1 - list2
//	list2Only = list2 - list1
//
// if both returned lists are empty, the provided lists are equal
func diffSubjectLists(list1 []rbacv1.Subject, list2 []rbacv1.Subject) (list1Only []rbacv1.Subject, list2Only []rbacv1.Subject) { … }