v1beta1

package
v0.0.0-...-d88c8b5 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Feb 9, 2021 License: Apache-2.0 Imports: 10 Imported by: 0

Documentation

Index

Constants

View Source
const (
	APIGroupAll    = "*"
	ResourceAll    = "*"
	VerbAll        = "*"
	NonResourceAll = "*"

	GroupKind          = "Group"
	ServiceAccountKind = "ServiceAccount"
	UserKind           = "User"

	// AutoUpdateAnnotationKey is the name of an annotation which prevents reconciliation if set to "false"
	AutoUpdateAnnotationKey = "rbac.authorization.kubernetes.io/autoupdate"
)
View Source
const GroupName = "rbac.authorization.k8s.io"

Variables

View Source
var (
	ErrInvalidLengthGenerated        = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowGenerated          = fmt.Errorf("proto: integer overflow")
	ErrUnexpectedEndOfGroupGenerated = fmt.Errorf("proto: unexpected end of group")
)
View Source
var (
	// TODO: move SchemeBuilder with zz_generated.deepcopy.go to k8s.io/api.
	// localSchemeBuilder and AddToScheme will stay in k8s.io/kubernetes.
	SchemeBuilder = runtime.NewSchemeBuilder(addKnownTypes)

	AddToScheme = localSchemeBuilder.AddToScheme
)
View Source
var SchemeGroupVersion = schema.GroupVersion{Group: GroupName, Version: "v1beta1"}

SchemeGroupVersion is group version used to register these objects

Functions

func Resource

func Resource(resource string) schema.GroupResource

Resource takes an unqualified resource and returns a Group qualified GroupResource

Types

type AggregationRule

type AggregationRule struct {
	// ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules.
	// If any of the selectors match, then the ClusterRole's permissions will be added
	// +optional
	ClusterRoleSelectors []metav1.LabelSelector `json:"clusterRoleSelectors,omitempty" protobuf:"bytes,1,rep,name=clusterRoleSelectors"`
}

AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

func (*AggregationRule) DeepCopy

func (in *AggregationRule) DeepCopy() *AggregationRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new AggregationRule.

func (*AggregationRule) DeepCopyInto

func (in *AggregationRule) DeepCopyInto(out *AggregationRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*AggregationRule) Descriptor

func (*AggregationRule) Descriptor() ([]byte, []int)

func (*AggregationRule) Marshal

func (m *AggregationRule) Marshal() (dAtA []byte, err error)

func (*AggregationRule) MarshalTo

func (m *AggregationRule) MarshalTo(dAtA []byte) (int, error)

func (*AggregationRule) MarshalToSizedBuffer

func (m *AggregationRule) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AggregationRule) ProtoMessage

func (*AggregationRule) ProtoMessage()

func (*AggregationRule) Reset

func (m *AggregationRule) Reset()

func (*AggregationRule) Size

func (m *AggregationRule) Size() (n int)

func (*AggregationRule) String

func (this *AggregationRule) String() string

func (AggregationRule) SwaggerDoc

func (AggregationRule) SwaggerDoc() map[string]string

func (*AggregationRule) Unmarshal

func (m *AggregationRule) Unmarshal(dAtA []byte) error

func (*AggregationRule) XXX_DiscardUnknown

func (m *AggregationRule) XXX_DiscardUnknown()

func (*AggregationRule) XXX_Marshal

func (m *AggregationRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AggregationRule) XXX_Merge

func (m *AggregationRule) XXX_Merge(src proto.Message)

func (*AggregationRule) XXX_Size

func (m *AggregationRule) XXX_Size() int

func (*AggregationRule) XXX_Unmarshal

func (m *AggregationRule) XXX_Unmarshal(b []byte) error

type ClusterRole

type ClusterRole struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Rules holds all the PolicyRules for this ClusterRole
	// +optional
	Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
	// AggregationRule is an optional field that describes how to build the Rules for this ClusterRole.
	// If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be
	// stomped by the controller.
	// +optional
	AggregationRule *AggregationRule `json:"aggregationRule,omitempty" protobuf:"bytes,3,opt,name=aggregationRule"`
}

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.

func (*ClusterRole) APILifecycleDeprecated

func (in *ClusterRole) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*ClusterRole) APILifecycleIntroduced

func (in *ClusterRole) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*ClusterRole) APILifecycleRemoved

func (in *ClusterRole) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*ClusterRole) APILifecycleReplacement

func (in *ClusterRole) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*ClusterRole) DeepCopy

func (in *ClusterRole) DeepCopy() *ClusterRole

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRole.

func (*ClusterRole) DeepCopyInto

func (in *ClusterRole) DeepCopyInto(out *ClusterRole)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterRole) DeepCopyObject

func (in *ClusterRole) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterRole) Descriptor

func (*ClusterRole) Descriptor() ([]byte, []int)

func (*ClusterRole) Marshal

func (m *ClusterRole) Marshal() (dAtA []byte, err error)

func (*ClusterRole) MarshalTo

func (m *ClusterRole) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRole) MarshalToSizedBuffer

func (m *ClusterRole) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterRole) ProtoMessage

func (*ClusterRole) ProtoMessage()

func (*ClusterRole) Reset

func (m *ClusterRole) Reset()

func (*ClusterRole) Size

func (m *ClusterRole) Size() (n int)

func (*ClusterRole) String

func (this *ClusterRole) String() string

func (ClusterRole) SwaggerDoc

func (ClusterRole) SwaggerDoc() map[string]string

func (*ClusterRole) Unmarshal

func (m *ClusterRole) Unmarshal(dAtA []byte) error

func (*ClusterRole) XXX_DiscardUnknown

func (m *ClusterRole) XXX_DiscardUnknown()

func (*ClusterRole) XXX_Marshal

func (m *ClusterRole) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterRole) XXX_Merge

func (m *ClusterRole) XXX_Merge(src proto.Message)

func (*ClusterRole) XXX_Size

func (m *ClusterRole) XXX_Size() int

func (*ClusterRole) XXX_Unmarshal

func (m *ClusterRole) XXX_Unmarshal(b []byte) error

type ClusterRoleBinding

type ClusterRoleBinding struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Subjects holds references to the objects the role applies to.
	// +optional
	Subjects []Subject `json:"subjects,omitempty" protobuf:"bytes,2,rep,name=subjects"`

	// RoleRef can only reference a ClusterRole in the global namespace.
	// If the RoleRef cannot be resolved, the Authorizer must return an error.
	RoleRef RoleRef `json:"roleRef" protobuf:"bytes,3,opt,name=roleRef"`
}

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.

func (*ClusterRoleBinding) APILifecycleDeprecated

func (in *ClusterRoleBinding) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*ClusterRoleBinding) APILifecycleIntroduced

func (in *ClusterRoleBinding) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*ClusterRoleBinding) APILifecycleRemoved

func (in *ClusterRoleBinding) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*ClusterRoleBinding) APILifecycleReplacement

func (in *ClusterRoleBinding) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*ClusterRoleBinding) DeepCopy

func (in *ClusterRoleBinding) DeepCopy() *ClusterRoleBinding

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleBinding.

func (*ClusterRoleBinding) DeepCopyInto

func (in *ClusterRoleBinding) DeepCopyInto(out *ClusterRoleBinding)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterRoleBinding) DeepCopyObject

func (in *ClusterRoleBinding) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterRoleBinding) Descriptor

func (*ClusterRoleBinding) Descriptor() ([]byte, []int)

func (*ClusterRoleBinding) Marshal

func (m *ClusterRoleBinding) Marshal() (dAtA []byte, err error)

func (*ClusterRoleBinding) MarshalTo

func (m *ClusterRoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleBinding) MarshalToSizedBuffer

func (m *ClusterRoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterRoleBinding) ProtoMessage

func (*ClusterRoleBinding) ProtoMessage()

func (*ClusterRoleBinding) Reset

func (m *ClusterRoleBinding) Reset()

func (*ClusterRoleBinding) Size

func (m *ClusterRoleBinding) Size() (n int)

func (*ClusterRoleBinding) String

func (this *ClusterRoleBinding) String() string

func (ClusterRoleBinding) SwaggerDoc

func (ClusterRoleBinding) SwaggerDoc() map[string]string

func (*ClusterRoleBinding) Unmarshal

func (m *ClusterRoleBinding) Unmarshal(dAtA []byte) error

func (*ClusterRoleBinding) XXX_DiscardUnknown

func (m *ClusterRoleBinding) XXX_DiscardUnknown()

func (*ClusterRoleBinding) XXX_Marshal

func (m *ClusterRoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterRoleBinding) XXX_Merge

func (m *ClusterRoleBinding) XXX_Merge(src proto.Message)

func (*ClusterRoleBinding) XXX_Size

func (m *ClusterRoleBinding) XXX_Size() int

func (*ClusterRoleBinding) XXX_Unmarshal

func (m *ClusterRoleBinding) XXX_Unmarshal(b []byte) error

type ClusterRoleBindingList

type ClusterRoleBindingList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of ClusterRoleBindings
	Items []ClusterRoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterRoleBindingList is a collection of ClusterRoleBindings. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBindingList, and will no longer be served in v1.22.

func (*ClusterRoleBindingList) APILifecycleDeprecated

func (in *ClusterRoleBindingList) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*ClusterRoleBindingList) APILifecycleIntroduced

func (in *ClusterRoleBindingList) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*ClusterRoleBindingList) APILifecycleRemoved

func (in *ClusterRoleBindingList) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*ClusterRoleBindingList) APILifecycleReplacement

func (in *ClusterRoleBindingList) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*ClusterRoleBindingList) DeepCopy

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleBindingList.

func (*ClusterRoleBindingList) DeepCopyInto

func (in *ClusterRoleBindingList) DeepCopyInto(out *ClusterRoleBindingList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterRoleBindingList) DeepCopyObject

func (in *ClusterRoleBindingList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterRoleBindingList) Descriptor

func (*ClusterRoleBindingList) Descriptor() ([]byte, []int)

func (*ClusterRoleBindingList) Marshal

func (m *ClusterRoleBindingList) Marshal() (dAtA []byte, err error)

func (*ClusterRoleBindingList) MarshalTo

func (m *ClusterRoleBindingList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleBindingList) MarshalToSizedBuffer

func (m *ClusterRoleBindingList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterRoleBindingList) ProtoMessage

func (*ClusterRoleBindingList) ProtoMessage()

func (*ClusterRoleBindingList) Reset

func (m *ClusterRoleBindingList) Reset()

func (*ClusterRoleBindingList) Size

func (m *ClusterRoleBindingList) Size() (n int)

func (*ClusterRoleBindingList) String

func (this *ClusterRoleBindingList) String() string

func (ClusterRoleBindingList) SwaggerDoc

func (ClusterRoleBindingList) SwaggerDoc() map[string]string

func (*ClusterRoleBindingList) Unmarshal

func (m *ClusterRoleBindingList) Unmarshal(dAtA []byte) error

func (*ClusterRoleBindingList) XXX_DiscardUnknown

func (m *ClusterRoleBindingList) XXX_DiscardUnknown()

func (*ClusterRoleBindingList) XXX_Marshal

func (m *ClusterRoleBindingList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterRoleBindingList) XXX_Merge

func (m *ClusterRoleBindingList) XXX_Merge(src proto.Message)

func (*ClusterRoleBindingList) XXX_Size

func (m *ClusterRoleBindingList) XXX_Size() int

func (*ClusterRoleBindingList) XXX_Unmarshal

func (m *ClusterRoleBindingList) XXX_Unmarshal(b []byte) error

type ClusterRoleList

type ClusterRoleList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of ClusterRoles
	Items []ClusterRole `json:"items" protobuf:"bytes,2,rep,name=items"`
}

ClusterRoleList is a collection of ClusterRoles. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoles, and will no longer be served in v1.22.

func (*ClusterRoleList) APILifecycleDeprecated

func (in *ClusterRoleList) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*ClusterRoleList) APILifecycleIntroduced

func (in *ClusterRoleList) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*ClusterRoleList) APILifecycleRemoved

func (in *ClusterRoleList) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*ClusterRoleList) APILifecycleReplacement

func (in *ClusterRoleList) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*ClusterRoleList) DeepCopy

func (in *ClusterRoleList) DeepCopy() *ClusterRoleList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClusterRoleList.

func (*ClusterRoleList) DeepCopyInto

func (in *ClusterRoleList) DeepCopyInto(out *ClusterRoleList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClusterRoleList) DeepCopyObject

func (in *ClusterRoleList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*ClusterRoleList) Descriptor

func (*ClusterRoleList) Descriptor() ([]byte, []int)

func (*ClusterRoleList) Marshal

func (m *ClusterRoleList) Marshal() (dAtA []byte, err error)

func (*ClusterRoleList) MarshalTo

func (m *ClusterRoleList) MarshalTo(dAtA []byte) (int, error)

func (*ClusterRoleList) MarshalToSizedBuffer

func (m *ClusterRoleList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ClusterRoleList) ProtoMessage

func (*ClusterRoleList) ProtoMessage()

func (*ClusterRoleList) Reset

func (m *ClusterRoleList) Reset()

func (*ClusterRoleList) Size

func (m *ClusterRoleList) Size() (n int)

func (*ClusterRoleList) String

func (this *ClusterRoleList) String() string

func (ClusterRoleList) SwaggerDoc

func (ClusterRoleList) SwaggerDoc() map[string]string

func (*ClusterRoleList) Unmarshal

func (m *ClusterRoleList) Unmarshal(dAtA []byte) error

func (*ClusterRoleList) XXX_DiscardUnknown

func (m *ClusterRoleList) XXX_DiscardUnknown()

func (*ClusterRoleList) XXX_Marshal

func (m *ClusterRoleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ClusterRoleList) XXX_Merge

func (m *ClusterRoleList) XXX_Merge(src proto.Message)

func (*ClusterRoleList) XXX_Size

func (m *ClusterRoleList) XXX_Size() int

func (*ClusterRoleList) XXX_Unmarshal

func (m *ClusterRoleList) XXX_Unmarshal(b []byte) error

type PolicyRule

type PolicyRule struct {
	// Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule.  VerbAll represents all kinds.
	Verbs []string `json:"verbs" protobuf:"bytes,1,rep,name=verbs"`

	// APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of
	// the enumerated resources in any API group will be allowed.
	// +optional
	APIGroups []string `json:"apiGroups,omitempty" protobuf:"bytes,2,rep,name=apiGroups"`
	// Resources is a list of resources this rule applies to.  '*' represents all resources in the specified apiGroups.
	// '*/foo' represents the subresource 'foo' for all resources in the specified apiGroups.
	// +optional
	Resources []string `json:"resources,omitempty" protobuf:"bytes,3,rep,name=resources"`
	// ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
	// +optional
	ResourceNames []string `json:"resourceNames,omitempty" protobuf:"bytes,4,rep,name=resourceNames"`

	// NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path
	// Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding.
	// Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
	// +optional
	NonResourceURLs []string `json:"nonResourceURLs,omitempty" protobuf:"bytes,5,rep,name=nonResourceURLs"`
}

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

func (*PolicyRule) DeepCopy

func (in *PolicyRule) DeepCopy() *PolicyRule

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new PolicyRule.

func (*PolicyRule) DeepCopyInto

func (in *PolicyRule) DeepCopyInto(out *PolicyRule)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*PolicyRule) Descriptor

func (*PolicyRule) Descriptor() ([]byte, []int)

func (*PolicyRule) Marshal

func (m *PolicyRule) Marshal() (dAtA []byte, err error)

func (*PolicyRule) MarshalTo

func (m *PolicyRule) MarshalTo(dAtA []byte) (int, error)

func (*PolicyRule) MarshalToSizedBuffer

func (m *PolicyRule) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*PolicyRule) ProtoMessage

func (*PolicyRule) ProtoMessage()

func (*PolicyRule) Reset

func (m *PolicyRule) Reset()

func (*PolicyRule) Size

func (m *PolicyRule) Size() (n int)

func (*PolicyRule) String

func (this *PolicyRule) String() string

func (PolicyRule) SwaggerDoc

func (PolicyRule) SwaggerDoc() map[string]string

func (*PolicyRule) Unmarshal

func (m *PolicyRule) Unmarshal(dAtA []byte) error

func (*PolicyRule) XXX_DiscardUnknown

func (m *PolicyRule) XXX_DiscardUnknown()

func (*PolicyRule) XXX_Marshal

func (m *PolicyRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*PolicyRule) XXX_Merge

func (m *PolicyRule) XXX_Merge(src proto.Message)

func (*PolicyRule) XXX_Size

func (m *PolicyRule) XXX_Size() int

func (*PolicyRule) XXX_Unmarshal

func (m *PolicyRule) XXX_Unmarshal(b []byte) error

type Role

type Role struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Rules holds all the PolicyRules for this Role
	// +optional
	Rules []PolicyRule `json:"rules" protobuf:"bytes,2,rep,name=rules"`
}

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.

func (*Role) APILifecycleDeprecated

func (in *Role) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*Role) APILifecycleIntroduced

func (in *Role) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*Role) APILifecycleRemoved

func (in *Role) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*Role) APILifecycleReplacement

func (in *Role) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*Role) DeepCopy

func (in *Role) DeepCopy() *Role

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Role.

func (*Role) DeepCopyInto

func (in *Role) DeepCopyInto(out *Role)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Role) DeepCopyObject

func (in *Role) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*Role) Descriptor

func (*Role) Descriptor() ([]byte, []int)

func (*Role) Marshal

func (m *Role) Marshal() (dAtA []byte, err error)

func (*Role) MarshalTo

func (m *Role) MarshalTo(dAtA []byte) (int, error)

func (*Role) MarshalToSizedBuffer

func (m *Role) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Role) ProtoMessage

func (*Role) ProtoMessage()

func (*Role) Reset

func (m *Role) Reset()

func (*Role) Size

func (m *Role) Size() (n int)

func (*Role) String

func (this *Role) String() string

func (Role) SwaggerDoc

func (Role) SwaggerDoc() map[string]string

func (*Role) Unmarshal

func (m *Role) Unmarshal(dAtA []byte) error

func (*Role) XXX_DiscardUnknown

func (m *Role) XXX_DiscardUnknown()

func (*Role) XXX_Marshal

func (m *Role) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Role) XXX_Merge

func (m *Role) XXX_Merge(src proto.Message)

func (*Role) XXX_Size

func (m *Role) XXX_Size() int

func (*Role) XXX_Unmarshal

func (m *Role) XXX_Unmarshal(b []byte) error

type RoleBinding

type RoleBinding struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ObjectMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Subjects holds references to the objects the role applies to.
	// +optional
	Subjects []Subject `json:"subjects,omitempty" protobuf:"bytes,2,rep,name=subjects"`

	// RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace.
	// If the RoleRef cannot be resolved, the Authorizer must return an error.
	RoleRef RoleRef `json:"roleRef" protobuf:"bytes,3,opt,name=roleRef"`
}

RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.

func (*RoleBinding) APILifecycleDeprecated

func (in *RoleBinding) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*RoleBinding) APILifecycleIntroduced

func (in *RoleBinding) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*RoleBinding) APILifecycleRemoved

func (in *RoleBinding) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*RoleBinding) APILifecycleReplacement

func (in *RoleBinding) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*RoleBinding) DeepCopy

func (in *RoleBinding) DeepCopy() *RoleBinding

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBinding.

func (*RoleBinding) DeepCopyInto

func (in *RoleBinding) DeepCopyInto(out *RoleBinding)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RoleBinding) DeepCopyObject

func (in *RoleBinding) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*RoleBinding) Descriptor

func (*RoleBinding) Descriptor() ([]byte, []int)

func (*RoleBinding) Marshal

func (m *RoleBinding) Marshal() (dAtA []byte, err error)

func (*RoleBinding) MarshalTo

func (m *RoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*RoleBinding) MarshalToSizedBuffer

func (m *RoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleBinding) ProtoMessage

func (*RoleBinding) ProtoMessage()

func (*RoleBinding) Reset

func (m *RoleBinding) Reset()

func (*RoleBinding) Size

func (m *RoleBinding) Size() (n int)

func (*RoleBinding) String

func (this *RoleBinding) String() string

func (RoleBinding) SwaggerDoc

func (RoleBinding) SwaggerDoc() map[string]string

func (*RoleBinding) Unmarshal

func (m *RoleBinding) Unmarshal(dAtA []byte) error

func (*RoleBinding) XXX_DiscardUnknown

func (m *RoleBinding) XXX_DiscardUnknown()

func (*RoleBinding) XXX_Marshal

func (m *RoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleBinding) XXX_Merge

func (m *RoleBinding) XXX_Merge(src proto.Message)

func (*RoleBinding) XXX_Size

func (m *RoleBinding) XXX_Size() int

func (*RoleBinding) XXX_Unmarshal

func (m *RoleBinding) XXX_Unmarshal(b []byte) error

type RoleBindingList

type RoleBindingList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of RoleBindings
	Items []RoleBinding `json:"items" protobuf:"bytes,2,rep,name=items"`
}

RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.22.

func (*RoleBindingList) APILifecycleDeprecated

func (in *RoleBindingList) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*RoleBindingList) APILifecycleIntroduced

func (in *RoleBindingList) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*RoleBindingList) APILifecycleRemoved

func (in *RoleBindingList) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*RoleBindingList) APILifecycleReplacement

func (in *RoleBindingList) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*RoleBindingList) DeepCopy

func (in *RoleBindingList) DeepCopy() *RoleBindingList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleBindingList.

func (*RoleBindingList) DeepCopyInto

func (in *RoleBindingList) DeepCopyInto(out *RoleBindingList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RoleBindingList) DeepCopyObject

func (in *RoleBindingList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*RoleBindingList) Descriptor

func (*RoleBindingList) Descriptor() ([]byte, []int)

func (*RoleBindingList) Marshal

func (m *RoleBindingList) Marshal() (dAtA []byte, err error)

func (*RoleBindingList) MarshalTo

func (m *RoleBindingList) MarshalTo(dAtA []byte) (int, error)

func (*RoleBindingList) MarshalToSizedBuffer

func (m *RoleBindingList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleBindingList) ProtoMessage

func (*RoleBindingList) ProtoMessage()

func (*RoleBindingList) Reset

func (m *RoleBindingList) Reset()

func (*RoleBindingList) Size

func (m *RoleBindingList) Size() (n int)

func (*RoleBindingList) String

func (this *RoleBindingList) String() string

func (RoleBindingList) SwaggerDoc

func (RoleBindingList) SwaggerDoc() map[string]string

func (*RoleBindingList) Unmarshal

func (m *RoleBindingList) Unmarshal(dAtA []byte) error

func (*RoleBindingList) XXX_DiscardUnknown

func (m *RoleBindingList) XXX_DiscardUnknown()

func (*RoleBindingList) XXX_Marshal

func (m *RoleBindingList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleBindingList) XXX_Merge

func (m *RoleBindingList) XXX_Merge(src proto.Message)

func (*RoleBindingList) XXX_Size

func (m *RoleBindingList) XXX_Size() int

func (*RoleBindingList) XXX_Unmarshal

func (m *RoleBindingList) XXX_Unmarshal(b []byte) error

type RoleList

type RoleList struct {
	metav1.TypeMeta `json:",inline"`
	// Standard object's metadata.
	// +optional
	metav1.ListMeta `json:"metadata,omitempty" protobuf:"bytes,1,opt,name=metadata"`

	// Items is a list of Roles
	Items []Role `json:"items" protobuf:"bytes,2,rep,name=items"`
}

RoleList is a collection of Roles Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleList, and will no longer be served in v1.22.

func (*RoleList) APILifecycleDeprecated

func (in *RoleList) APILifecycleDeprecated() (major, minor int)

APILifecycleDeprecated is an autogenerated function, returning the release in which the API struct was or will be deprecated as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:deprecated" tags in types.go or "k8s:prerelease-lifecycle-gen:introduced" plus three minor.

func (*RoleList) APILifecycleIntroduced

func (in *RoleList) APILifecycleIntroduced() (major, minor int)

APILifecycleIntroduced is an autogenerated function, returning the release in which the API struct was introduced as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:introduced" tags in types.go.

func (*RoleList) APILifecycleRemoved

func (in *RoleList) APILifecycleRemoved() (major, minor int)

APILifecycleRemoved is an autogenerated function, returning the release in which the API is no longer served as int versions of major and minor for comparison. It is controlled by "k8s:prerelease-lifecycle-gen:removed" tags in types.go or "k8s:prerelease-lifecycle-gen:deprecated" plus three minor.

func (*RoleList) APILifecycleReplacement

func (in *RoleList) APILifecycleReplacement() schema.GroupVersionKind

APILifecycleReplacement is an autogenerated function, returning the group, version, and kind that should be used instead of this deprecated type. It is controlled by "k8s:prerelease-lifecycle-gen:replacement=<group>,<version>,<kind>" tags in types.go.

func (*RoleList) DeepCopy

func (in *RoleList) DeepCopy() *RoleList

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleList.

func (*RoleList) DeepCopyInto

func (in *RoleList) DeepCopyInto(out *RoleList)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RoleList) DeepCopyObject

func (in *RoleList) DeepCopyObject() runtime.Object

DeepCopyObject is an autogenerated deepcopy function, copying the receiver, creating a new runtime.Object.

func (*RoleList) Descriptor

func (*RoleList) Descriptor() ([]byte, []int)

func (*RoleList) Marshal

func (m *RoleList) Marshal() (dAtA []byte, err error)

func (*RoleList) MarshalTo

func (m *RoleList) MarshalTo(dAtA []byte) (int, error)

func (*RoleList) MarshalToSizedBuffer

func (m *RoleList) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleList) ProtoMessage

func (*RoleList) ProtoMessage()

func (*RoleList) Reset

func (m *RoleList) Reset()

func (*RoleList) Size

func (m *RoleList) Size() (n int)

func (*RoleList) String

func (this *RoleList) String() string

func (RoleList) SwaggerDoc

func (RoleList) SwaggerDoc() map[string]string

func (*RoleList) Unmarshal

func (m *RoleList) Unmarshal(dAtA []byte) error

func (*RoleList) XXX_DiscardUnknown

func (m *RoleList) XXX_DiscardUnknown()

func (*RoleList) XXX_Marshal

func (m *RoleList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleList) XXX_Merge

func (m *RoleList) XXX_Merge(src proto.Message)

func (*RoleList) XXX_Size

func (m *RoleList) XXX_Size() int

func (*RoleList) XXX_Unmarshal

func (m *RoleList) XXX_Unmarshal(b []byte) error

type RoleRef

type RoleRef struct {
	// APIGroup is the group for the resource being referenced
	APIGroup string `json:"apiGroup" protobuf:"bytes,1,opt,name=apiGroup"`
	// Kind is the type of resource being referenced
	Kind string `json:"kind" protobuf:"bytes,2,opt,name=kind"`
	// Name is the name of resource being referenced
	Name string `json:"name" protobuf:"bytes,3,opt,name=name"`
}

RoleRef contains information that points to the role being used

func (*RoleRef) DeepCopy

func (in *RoleRef) DeepCopy() *RoleRef

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new RoleRef.

func (*RoleRef) DeepCopyInto

func (in *RoleRef) DeepCopyInto(out *RoleRef)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*RoleRef) Descriptor

func (*RoleRef) Descriptor() ([]byte, []int)

func (*RoleRef) Marshal

func (m *RoleRef) Marshal() (dAtA []byte, err error)

func (*RoleRef) MarshalTo

func (m *RoleRef) MarshalTo(dAtA []byte) (int, error)

func (*RoleRef) MarshalToSizedBuffer

func (m *RoleRef) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleRef) ProtoMessage

func (*RoleRef) ProtoMessage()

func (*RoleRef) Reset

func (m *RoleRef) Reset()

func (*RoleRef) Size

func (m *RoleRef) Size() (n int)

func (*RoleRef) String

func (this *RoleRef) String() string

func (RoleRef) SwaggerDoc

func (RoleRef) SwaggerDoc() map[string]string

func (*RoleRef) Unmarshal

func (m *RoleRef) Unmarshal(dAtA []byte) error

func (*RoleRef) XXX_DiscardUnknown

func (m *RoleRef) XXX_DiscardUnknown()

func (*RoleRef) XXX_Marshal

func (m *RoleRef) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleRef) XXX_Merge

func (m *RoleRef) XXX_Merge(src proto.Message)

func (*RoleRef) XXX_Size

func (m *RoleRef) XXX_Size() int

func (*RoleRef) XXX_Unmarshal

func (m *RoleRef) XXX_Unmarshal(b []byte) error

type Subject

type Subject struct {
	// Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount".
	// If the Authorizer does not recognized the kind value, the Authorizer should report an error.
	Kind string `json:"kind" protobuf:"bytes,1,opt,name=kind"`
	// APIGroup holds the API group of the referenced subject.
	// Defaults to "" for ServiceAccount subjects.
	// Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
	// +optional
	APIGroup string `json:"apiGroup,omitempty" protobuf:"bytes,2,opt.name=apiGroup"`
	// Name of the object being referenced.
	Name string `json:"name" protobuf:"bytes,3,opt,name=name"`
	// Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty
	// the Authorizer should report an error.
	// +optional
	Namespace string `json:"namespace,omitempty" protobuf:"bytes,4,opt,name=namespace"`
}

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

func (*Subject) DeepCopy

func (in *Subject) DeepCopy() *Subject

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new Subject.

func (*Subject) DeepCopyInto

func (in *Subject) DeepCopyInto(out *Subject)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*Subject) Descriptor

func (*Subject) Descriptor() ([]byte, []int)

func (*Subject) Marshal

func (m *Subject) Marshal() (dAtA []byte, err error)

func (*Subject) MarshalTo

func (m *Subject) MarshalTo(dAtA []byte) (int, error)

func (*Subject) MarshalToSizedBuffer

func (m *Subject) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Subject) ProtoMessage

func (*Subject) ProtoMessage()

func (*Subject) Reset

func (m *Subject) Reset()

func (*Subject) Size

func (m *Subject) Size() (n int)

func (*Subject) String

func (this *Subject) String() string

func (Subject) SwaggerDoc

func (Subject) SwaggerDoc() map[string]string

func (*Subject) Unmarshal

func (m *Subject) Unmarshal(dAtA []byte) error

func (*Subject) XXX_DiscardUnknown

func (m *Subject) XXX_DiscardUnknown()

func (*Subject) XXX_Marshal

func (m *Subject) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Subject) XXX_Merge

func (m *Subject) XXX_Merge(src proto.Message)

func (*Subject) XXX_Size

func (m *Subject) XXX_Size() int

func (*Subject) XXX_Unmarshal

func (m *Subject) XXX_Unmarshal(b []byte) error

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL