package v1
- Alphabetic
- Public
- All
Type Members
-
case class
AggregationRule(clusterRoleSelectors: Optional[Vector[LabelSelector]] = Optional.Absent) extends Product with Serializable
AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole
AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole
- clusterRoleSelectors
ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added
- class AggregationRuleFields extends AnyRef
-
case class
ClusterRole(aggregationRule: Optional[AggregationRule] = Optional.Absent, metadata: Optional[ObjectMeta] = Optional.Absent, rules: Optional[Vector[PolicyRule]] = Optional.Absent) extends Product with Serializable
ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.
ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.
- rules
Rules holds all the PolicyRules for this ClusterRole
-
case class
ClusterRoleBinding(metadata: Optional[ObjectMeta] = Optional.Absent, roleRef: RoleRef, subjects: Optional[Vector[Subject]] = Optional.Absent) extends Product with Serializable
ClusterRoleBinding references a ClusterRole, but not contain it.
ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.
- subjects
Subjects holds references to the objects the role applies to.
- class ClusterRoleBindingFields extends AnyRef
- class ClusterRoleFields extends AnyRef
-
case class
PolicyRule(apiGroups: Optional[Vector[String]] = Optional.Absent, nonResourceURLs: Optional[Vector[String]] = Optional.Absent, resourceNames: Optional[Vector[String]] = Optional.Absent, resources: Optional[Vector[String]] = Optional.Absent, verbs: Vector[String]) extends Product with Serializable
PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.
PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.
- apiGroups
APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.
- nonResourceURLs
NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.
- resourceNames
ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.
- resources
Resources is a list of resources this rule applies to. '*' represents all resources.
- verbs
Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
- class PolicyRuleFields extends AnyRef
-
case class
Role(metadata: Optional[ObjectMeta] = Optional.Absent, rules: Optional[Vector[PolicyRule]] = Optional.Absent) extends Product with Serializable
Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.
Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.
- rules
Rules holds all the PolicyRules for this Role
-
case class
RoleBinding(metadata: Optional[ObjectMeta] = Optional.Absent, roleRef: RoleRef, subjects: Optional[Vector[Subject]] = Optional.Absent) extends Product with Serializable
RoleBinding references a role, but does not contain it.
RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.
- subjects
Subjects holds references to the objects the role applies to.
- class RoleBindingFields extends AnyRef
- class RoleFields extends AnyRef
-
case class
RoleRef(apiGroup: String, kind: String, name: String) extends Product with Serializable
RoleRef contains information that points to the role being used
RoleRef contains information that points to the role being used
- apiGroup
APIGroup is the group for the resource being referenced
- kind
Kind is the type of resource being referenced
- name
Name is the name of resource being referenced
- class RoleRefFields extends AnyRef
-
case class
Subject(apiGroup: Optional[String] = Optional.Absent, kind: String, name: String, namespace: Optional[String] = Optional.Absent) extends Product with Serializable
Subject contains a reference to the object or user identities a role binding applies to.
Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.
- apiGroup
APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
- kind
Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
- name
Name of the object being referenced.
- namespace
Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
- class SubjectFields extends AnyRef
Value Members
- object AggregationRule extends AggregationRuleFields with Serializable
- object ClusterRole extends ClusterRoleFields with Serializable
- object ClusterRoleBinding extends ClusterRoleBindingFields with Serializable
- object PolicyRule extends PolicyRuleFields with Serializable
- object Role extends RoleFields with Serializable
- object RoleBinding extends RoleBindingFields with Serializable
- object RoleRef extends RoleRefFields with Serializable
- object Subject extends SubjectFields with Serializable