package union

import "k8s.io/apiserver/pkg/authorization/union"

Package union implements an authorizer that combines multiple subauthorizer. The union authorizer iterates over each subauthorizer and returns the first decision that is either an Allow decision or a Deny decision. If a subauthorizer returns a NoOpinion, then the union authorizer moves onto the next authorizer or, if the subauthorizer was the last authorizer, returns NoOpinion as the aggregate decision. I.e. union authorizer creates an aggregate decision and supports short-circuit allows and denies from subauthorizers.

Index ¶

• func New(authorizationHandlers ...authorizer.Authorizer) authorizer.Authorizer
• func NewRuleResolvers(authorizationHandlers ...authorizer.RuleResolver) authorizer.RuleResolver

Functions ¶

func New ¶

func New(authorizationHandlers ...authorizer.Authorizer) authorizer.Authorizer

New returns an authorizer that authorizes against a chain of authorizer.Authorizer objects

func NewRuleResolvers ¶

func NewRuleResolvers(authorizationHandlers ...authorizer.RuleResolver) authorizer.RuleResolver

NewRuleResolvers returns an authorizer that authorizes against a chain of authorizer.Authorizer objects

Source Files ¶

union.go