Package v1 is a generated protocol buffer package.

ClusterPolicyBindingToSelectableFields returns a label set that represents the object changes to the returned keys require registering conversions for existing versions using Scheme.AddFieldLabelConversionFunc.

ClusterPolicyToSelectableFields returns a label set that represents the object changes to the returned keys require registering conversions for existing versions using Scheme.AddFieldLabelConversionFunc.

Kind takes an unqualified kind and returns back a Group qualified GroupKind.

NormalizeResources expands all resource groups and forces all resources to lower case.

PolicyBindingToSelectableFields returns a label set that represents the object changes to the returned keys require registering conversions for existing versions using Scheme.AddFieldLabelConversionFunc.

PolicyToSelectableFields returns a label set that represents the object changes to the returned keys require registering conversions for existing versions using Scheme.AddFieldLabelConversionFunc.

RegisterDeepCopies adds deep-copy functions to the given scheme.

Resource takes an unqualified resource and returns back a Group qualified GroupResource.

RoleBindingRestrictionToSelectableFields returns a label set that be used to identify a RoleBindingRestriction object.

RoleBindingToSelectableFields returns a label set that represents the object changes to the returned keys require registering conversions for existing versions using Scheme.AddFieldLabelConversionFunc.

RoleToSelectableFields returns a label set that represents the object changes to the returned keys require registering conversions for existing versions using Scheme.AddFieldLabelConversionFunc.

StringSubjectsFor returns users and groups for comparison against user.Info.

SubjectsContainAnyGroup returns true if the provided subjects any of the named groups.

SubjectsContainUser returns true if the provided subjects contain the named user.

SubjectsStrings returns users, groups, serviceaccounts, unknown for display purposes.

Synthetic authorization endpoints.

Synthetic authorization endpoints.

Synthetic authorization endpoints.

Synthetic authorization endpoints.

Synthetic authorization endpoints.

Synthetic authorization endpoints.

Synthetic authorization endpoints.

PolicyName is the name of Policy.

Synthetic authorization endpoints.

Synthetic authorization endpoints.

DiscoveryRule is a rule that allows a client to discover the API resources available on this server.

SchemeGroupVersion is group version used to register these objects.

Action describes a request to be authorized.

ClusterPolicy is a object that holds all the ClusterRoles for a particular namespace.

ClusterPolicyBinding is a object that holds all the ClusterRoleBindings for a particular namespace.

ClusterPolicyBindingList is a collection of ClusterPolicyBindings.

ClusterPolicyList is a collection of ClusterPolicies.

ClusterRole is a logical grouping of PolicyRules that can be referenced as a unit by ClusterRoleBindings.

ClusterRoleBinding references a ClusterRole, but not contain it.

ClusterRoleBindingList is a collection of ClusterRoleBindings.

ClusterRoleList is a collection of ClusterRoles.

GroupRestriction matches a group either by a string match on the group name or a label selector applied to group labels.

IsPersonalSubjectAccessReview is a marker for PolicyRule.AttributeRestrictions that denotes that subjectaccessreviews on self should be allowed.

LocalResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec in a particular namespace.

LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace.

Policy is a object that holds all the Roles for a particular namespace.

PolicyBinding is a object that holds all the RoleBindings for a particular namespace.

PolicyBindingList is a collection of PolicyBindings.

PolicyList is a collection of Policies.

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

+gencopy=false PolicyRuleBuilder let's us attach methods.

ResourceAccessReview is a means to request a list of which users and groups are authorized to perform the action specified by spec.

ResourceAccessReviewResponse describes who can perform the action.

Role is a logical grouping of PolicyRules that can be referenced as a unit by RoleBindings.

RoleBinding references a Role, but not contain it.

RoleBindingList is a collection of RoleBindings.

RoleBindingRestriction is an object that can be matched against a subject (user, group, or service account) to determine whether rolebindings on that subject are allowed in the namespace to which the RoleBindingRestriction belongs.

RoleBindingRestrictionList is a collection of RoleBindingRestriction objects.

RoleBindingRestrictionSpec defines a rolebinding restriction.

RoleList is a collection of Roles.

SelfSubjectRulesReview is a resource you can create to determine which actions you can perform in a namespace.

SelfSubjectRulesReviewSpec adds information about how to conduct the check.

ServiceAccountReference specifies a service account and namespace by their names.

ServiceAccountRestriction matches a service account by a string match on either the service-account name or the name of the service account's namespace.

SubjectAccessReview is an object for requesting information about whether a user or group can perform an action.

SubjectAccessReviewResponse describes whether or not a user or group can perform an action.

SubjectRulesReview is a resource you can create to determine which actions another user can perform in a namespace.

SubjectRulesReviewSpec adds information about how to conduct the check.

SubjectRulesReviewStatus is contains the result of a rules check.

UserRestriction matches a user either by a string match on the user name, a string match on the name of a group to which the user belongs, or a label selector applied to the user labels.