Package policybased implements a standard storage for ClusterRoleBinding that prevents privilege escalation.

Matcher returns a generic matcher for a given label and field selector.

NewRegistry returns a new Registry interface for the given Storage.

SelectableFields returns a field set that can be used for filter selection.

strategy is the default logic that applies when creating and updating ClusterRoleBinding objects.

AuthorizerAdapter adapts the registry to the authorizer interface.

Registry is an interface for things that know how to store ClusterRoleBindings.