package
4.1.0+incompatible
Repository: https://github.com/openshift/origin.git
Documentation: pkg.go.dev
# Functions
NewGroupSubjectChecker returns a new GroupSubjectChecker.
NewRestrictUsersAdmission configures an admission plugin that enforces restrictions on adding role bindings in a project.
NewServiceAccountSubjectChecker returns a new ServiceAccountSubjectChecker.
NewSubjectChecker returns a new SubjectChecker.
NewUnionSubjectChecker returns a new UnionSubjectChecker.
NewUserSubjectChecker returns a new UserSubjectChecker.
# Structs
GroupSubjectChecker determines whether a group subject is allowed in rolebindings in the project.
RoleBindingRestrictionContext holds context that is used when determining whether a RoleBindingRestriction allows rolebindings on a particular subject.
ServiceAccountSubjectChecker determines whether a serviceaccount subject is allowed in rolebindings in the project.
UserSubjectChecker determines whether a user subject is allowed in rolebindings in the project.
# Interfaces
SubjectChecker determines whether rolebindings on a subject (user, group, or service account) are allowed in a project.
# Type aliases
UnionSubjectChecker represents the union of zero or more SubjectCheckers.