package validation

import "k8s.io/kubernetes/pkg/apis/rbac/validation"

Index ¶

• func ValidateClusterRole(role *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList
• func ValidateClusterRoleBinding(roleBinding *rbac.ClusterRoleBinding) field.ErrorList
• func ValidateClusterRoleBindingUpdate(roleBinding *rbac.ClusterRoleBinding, oldRoleBinding *rbac.ClusterRoleBinding) field.ErrorList
• func ValidateClusterRoleUpdate(role *rbac.ClusterRole, oldRole *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList
• func ValidatePolicyRule(rule rbac.PolicyRule, isNamespaced bool, fldPath *field.Path) field.ErrorList
• func ValidateRBACName(name string, prefix bool) []string
• func ValidateRole(role *rbac.Role) field.ErrorList
• func ValidateRoleBinding(roleBinding *rbac.RoleBinding) field.ErrorList
• func ValidateRoleBindingSubject(subject rbac.Subject, isNamespaced bool, fldPath *field.Path) field.ErrorList
• func ValidateRoleBindingUpdate(roleBinding *rbac.RoleBinding, oldRoleBinding *rbac.RoleBinding) field.ErrorList
• func ValidateRoleUpdate(role *rbac.Role, oldRole *rbac.Role) field.ErrorList
• type ClusterRoleValidationOptions

Functions ¶

func ValidateClusterRole ¶

func ValidateClusterRole(role *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList

func ValidateClusterRoleBinding ¶

func ValidateClusterRoleBinding(roleBinding *rbac.ClusterRoleBinding) field.ErrorList

func ValidateClusterRoleBindingUpdate ¶

func ValidateClusterRoleBindingUpdate(roleBinding *rbac.ClusterRoleBinding, oldRoleBinding *rbac.ClusterRoleBinding) field.ErrorList

func ValidateClusterRoleUpdate ¶

func ValidateClusterRoleUpdate(role *rbac.ClusterRole, oldRole *rbac.ClusterRole, opts ClusterRoleValidationOptions) field.ErrorList

func ValidatePolicyRule ¶

func ValidatePolicyRule(rule rbac.PolicyRule, isNamespaced bool, fldPath *field.Path) field.ErrorList

ValidatePolicyRule is exported to allow types outside of the RBAC API group to embed a rbac.PolicyRule and reuse this validation logic

func ValidateRBACName ¶

func ValidateRBACName(name string, prefix bool) []string

ValidateRBACName is exported to allow types outside of the RBAC API group to reuse this validation logic Minimal validation of names for roles and bindings. Identical to the validation for Openshift. See: * https://github.com/kubernetes/kubernetes/blob/60db507b279ce45bd16ea3db49bf181f2aeb3c3d/pkg/api/validation/name.go * https://github.com/openshift/origin/blob/388478c40e751c4295dcb9a44dd69e5ac65d0e3b/pkg/api/helpers.go

func ValidateRole ¶

func ValidateRole(role *rbac.Role) field.ErrorList

func ValidateRoleBinding ¶

func ValidateRoleBinding(roleBinding *rbac.RoleBinding) field.ErrorList

func ValidateRoleBindingSubject ¶

func ValidateRoleBindingSubject(subject rbac.Subject, isNamespaced bool, fldPath *field.Path) field.ErrorList

ValidateRoleBindingSubject is exported to allow types outside of the RBAC API group to embed a rbac.Subject and reuse this validation logic

func ValidateRoleBindingUpdate ¶

func ValidateRoleBindingUpdate(roleBinding *rbac.RoleBinding, oldRoleBinding *rbac.RoleBinding) field.ErrorList

func ValidateRoleUpdate ¶

func ValidateRoleUpdate(role *rbac.Role, oldRole *rbac.Role) field.ErrorList

Types ¶

type ClusterRoleValidationOptions ¶

type ClusterRoleValidationOptions struct {
	AllowInvalidLabelValueInSelector bool
}

Source Files ¶

validation.go