package authorizerfactory

import "k8s.io/apiserver/pkg/authorization/authorizerfactory"

Index ¶

• func NewAlwaysAllowAuthorizer() *alwaysAllowAuthorizer
• func NewAlwaysDenyAuthorizer() *alwaysDenyAuthorizer
• func NewPrivilegedGroups(groups ...string) *privilegedGroupAuthorizer
• type DelegatingAuthorizerConfig
• func (c DelegatingAuthorizerConfig) New() (authorizer.Authorizer, error)

Functions ¶

func NewAlwaysAllowAuthorizer ¶

func NewAlwaysAllowAuthorizer() *alwaysAllowAuthorizer

func NewAlwaysDenyAuthorizer ¶

func NewAlwaysDenyAuthorizer() *alwaysDenyAuthorizer

func NewPrivilegedGroups ¶

func NewPrivilegedGroups(groups ...string) *privilegedGroupAuthorizer

NewPrivilegedGroups is for use in loopback scenarios

Types ¶

type DelegatingAuthorizerConfig ¶

type DelegatingAuthorizerConfig struct {
	SubjectAccessReviewClient authorizationclient.SubjectAccessReviewInterface

	// AllowCacheTTL is the length of time that a successful authorization response will be cached
	AllowCacheTTL time.Duration

	// DenyCacheTTL is the length of time that an unsuccessful authorization response will be cached.
	// You generally want more responsive, "deny, try again" flows.
	DenyCacheTTL time.Duration
}

DelegatingAuthorizerConfig is the minimal configuration needed to create an authenticator built to delegate authorization to a kube API server

func (DelegatingAuthorizerConfig) New ¶

func (c DelegatingAuthorizerConfig) New() (authorizer.Authorizer, error)

Source Files ¶

builtin.go delegating.go