Package policybased implements a standard storage for ClusterRole that prevents privilege escalation.

Matcher returns a generic matcher for a given label and field selector.

NewRegistry returns a new Registry interface for the given Storage.

SelectableFields returns a label set that can be used for filter selection.

strategy is the default logic that applies when creating and updating ClusterRole objects.

Registry is an interface for things that know how to store ClusterRoles.