package validation

import "k8s.io/component-helpers/auth/rbac/validation"

Index ¶

• func BreakdownRule(rule rbacv1.PolicyRule) []rbacv1.PolicyRule
• func Covers(ownerRules, servantRules []rbacv1.PolicyRule) (bool, []rbacv1.PolicyRule)

Functions ¶

func BreakdownRule ¶

func BreakdownRule(rule rbacv1.PolicyRule) []rbacv1.PolicyRule

BreadownRule takes a rule and builds an equivalent list of rules that each have at most one verb, one resource, and one resource name

func Covers ¶

func Covers(ownerRules, servantRules []rbacv1.PolicyRule) (bool, []rbacv1.PolicyRule)

Covers determines whether or not the ownerRules cover the servantRules in terms of allowed actions. It returns whether or not the ownerRules cover and a list of the rules that the ownerRules do not cover.

Source Files ¶

policy_comparator.go