package bootstrappolicy

import "k8s.io/kubernetes/plugin/pkg/auth/authorizer/rbac/bootstrappolicy"

Index ¶

• Variables
• func ClusterRoleBindings() []rbacv1.ClusterRoleBinding
• func ClusterRoles() []rbacv1.ClusterRole
• func ClusterRolesToAggregate() map[string]string
• func ControllerRoleBindings() []rbacv1.ClusterRoleBinding
• func ControllerRoles() []rbacv1.ClusterRole
• func NamespaceRoleBindings() map[string][]rbacv1.RoleBinding
• func NamespaceRoles() map[string][]rbacv1.Role
• func NodeRules() []rbacv1.PolicyRule

Variables ¶

var (
	Write      = []string{"create", "update", "patch", "delete", "deletecollection"}
	ReadWrite  = []string{"get", "list", "watch", "create", "update", "patch", "delete", "deletecollection"}
	Read       = []string{"get", "list", "watch"}
	ReadUpdate = []string{"get", "list", "watch", "update", "patch"}

	Label      = map[string]string{"kubernetes.io/bootstrapping": "rbac-defaults"}
	Annotation = map[string]string{rbacv1.AutoUpdateAnnotationKey: "true"}
)

Functions ¶

func ClusterRoleBindings ¶

func ClusterRoleBindings() []rbacv1.ClusterRoleBinding

ClusterRoleBindings return default rolebindings to the default roles

func ClusterRoles ¶

func ClusterRoles() []rbacv1.ClusterRole

ClusterRoles returns the cluster roles to bootstrap an API server with

func ClusterRolesToAggregate ¶

func ClusterRolesToAggregate() map[string]string

func ControllerRoleBindings ¶

func ControllerRoleBindings() []rbacv1.ClusterRoleBinding

ControllerRoleBindings returns the role bindings used by controllers

func ControllerRoles ¶

func ControllerRoles() []rbacv1.ClusterRole

ControllerRoles returns the cluster roles used by controllers

func NamespaceRoleBindings ¶

func NamespaceRoleBindings() map[string][]rbacv1.RoleBinding

NamespaceRoleBindings returns a map of namespace to slice of roles to create

func NamespaceRoles ¶

func NamespaceRoles() map[string][]rbacv1.Role

NamespaceRoles returns a map of namespace to slice of roles to create

func NodeRules ¶

func NodeRules() []rbacv1.PolicyRule

Source Files ¶

controller_policy.go namespace_policy.go policy.go