package bootstrappolicy

import "k8s.io/kubernetes/plugin/pkg/auth/authorizer/rbac/bootstrappolicy"

Index ¶

• Variables
• func ClusterRoleBindings() []rbac.ClusterRoleBinding
• func ClusterRoles() []rbac.ClusterRole
• func ControllerRoleBindings() []rbac.ClusterRoleBinding
• func ControllerRoles() []rbac.ClusterRole
• func NamespaceRoleBindings() map[string][]rbac.RoleBinding
• func NamespaceRoles() map[string][]rbac.Role
• func NodeRules() []rbac.PolicyRule

Variables ¶

var (
	ReadWrite = []string{"get", "list", "watch", "create", "update", "patch", "delete", "deletecollection"}
	Read      = []string{"get", "list", "watch"}

	Label      = map[string]string{"kubernetes.io/bootstrapping": "rbac-defaults"}
	Annotation = map[string]string{rbac.AutoUpdateAnnotationKey: "true"}
)

Functions ¶

func ClusterRoleBindings ¶

func ClusterRoleBindings() []rbac.ClusterRoleBinding

ClusterRoleBindings return default rolebindings to the default roles

func ClusterRoles ¶

func ClusterRoles() []rbac.ClusterRole

ClusterRoles returns the cluster roles to bootstrap an API server with

func ControllerRoleBindings ¶

func ControllerRoleBindings() []rbac.ClusterRoleBinding

ControllerRoleBindings returns the role bindings used by controllers

func ControllerRoles ¶

func ControllerRoles() []rbac.ClusterRole

ControllerRoles returns the cluster roles used by controllers

func NamespaceRoleBindings ¶

func NamespaceRoleBindings() map[string][]rbac.RoleBinding

NamespaceRoleBindings returns a map of namespace to slice of roles to create

func NamespaceRoles ¶

func NamespaceRoles() map[string][]rbac.Role

NamespaceRoles returns a map of namespace to slice of roles to create

func NodeRules ¶

func NodeRules() []rbac.PolicyRule

Source Files ¶

controller_policy.go namespace_policy.go policy.go