package authorizer
import "k8s.io/kubernetes/pkg/kubeapiserver/authorizer"
Index ¶
Types ¶
type Config ¶
type Config struct { AuthorizationModes []string // Path to an ABAC policy file. PolicyFile string // Kubeconfig file for Webhook authorization plugin. WebhookConfigFile string // API version of subject access reviews to send to the webhook (e.g. "v1", "v1beta1") WebhookVersion string // TTL for caching of authorized responses from the webhook server. WebhookCacheAuthorizedTTL time.Duration // TTL for caching of unauthorized responses from the webhook server. time.Duration // WebhookRetryBackoff specifies the backoff parameters for the authorization webhook retry logic. // This allows us to configure the sleep time at each iteration and the maximum number of retries allowed // before we fail the webhook call in order to limit the fan out that ensues when the system is degraded. WebhookRetryBackoff *wait.Backoff VersionedInformerFactory versionedinformers.SharedInformerFactory // Optional field, custom dial function used to connect to webhook CustomDial utilnet.DialFunc }
Config contains the data on how to authorize a request to the Kube API Server
func (Config) New ¶
func (config Config) New() (authorizer.Authorizer, authorizer.RuleResolver, error)
New returns the right sort of union of multiple authorizer.Authorizer objects based on the authorizationMode or an error.
Source Files ¶
config.go
Directories ¶
Path | Synopsis |
---|---|
pkg/kubeapiserver/authorizer/modes |
- Version
- v1.20.7
- Published
- May 12, 2021
- Platform
- js/wasm
- Imports
- 16 packages
- Last checked
- 3 minutes ago –
Tools for package owners.