package policybased

import "k8s.io/kubernetes/pkg/registry/rbac/clusterrole/policybased"

Package policybased implements a standard storage for ClusterRole that prevents privilege escalation.

Index ¶

• type Storage
• func NewStorage(s rest.StandardStorage, authorizer authorizer.Authorizer, ruleResolver rbacregistryvalidation.AuthorizationRuleResolver) *Storage
• func (s *Storage) Create(ctx context.Context, obj runtime.Object, createValidatingAdmission rest.ValidateObjectFunc, options *metav1.CreateOptions) (runtime.Object, error)
• func (r *Storage) Destroy()
• func (s *Storage) GetSingularName() string
• func (r *Storage) NamespaceScoped() bool
• func (r *Storage) StorageVersion() runtime.GroupVersioner
• func (s *Storage) Update(ctx context.Context, name string, obj rest.UpdatedObjectInfo, createValidation rest.ValidateObjectFunc, updateValidation rest.ValidateObjectUpdateFunc, forceAllowCreate bool, options *metav1.UpdateOptions) (runtime.Object, bool, error)

Types ¶

type Storage ¶

type Storage struct {
	rest.StandardStorage
	// contains filtered or unexported fields
}

func NewStorage ¶

func NewStorage(s rest.StandardStorage, authorizer authorizer.Authorizer, ruleResolver rbacregistryvalidation.AuthorizationRuleResolver) *Storage

func (*Storage) Create ¶

func (s *Storage) Create(ctx context.Context, obj runtime.Object, createValidatingAdmission rest.ValidateObjectFunc, options *metav1.CreateOptions) (runtime.Object, error)

func (*Storage) Destroy ¶

func (r *Storage) Destroy()

Destroy cleans up resources on shutdown.

func (*Storage) GetSingularName ¶

func (s *Storage) GetSingularName() string

func (*Storage) NamespaceScoped ¶

func (r *Storage) NamespaceScoped() bool

func (*Storage) StorageVersion ¶

func (r *Storage) StorageVersion() runtime.GroupVersioner

func (*Storage) Update ¶

func (s *Storage) Update(ctx context.Context, name string, obj rest.UpdatedObjectInfo, createValidation rest.ValidateObjectFunc, updateValidation rest.ValidateObjectUpdateFunc, forceAllowCreate bool, options *metav1.UpdateOptions) (runtime.Object, bool, error)

Source Files ¶

storage.go