ConfirmNoEscalation checks that the user attempting to create a binding/role has all the permissions they are attempting to grant.

NewRoleTemplateResolver creates a newly allocated RoleTemplateResolver from the provided caches.

NewRoleTemplateResolver creates a newly allocated RoleTemplateResolver from the provided caches.

RequestUserHasVerb checks if the user associated with the context has a given verb on a given gvr for a specified name/namespace.

SetEscalationResponse will update the given webhook response based on the provided error from an escalation request.

ToExtraString will convert a map of map[string]authenticationv1.ExtraValue to map[string]string.

CreatorIDAnn is an annotation key for the id of the creator.

GlobalRoleResolver provides utilities to determine which rules a globalRoles gives in various contexts.

RBACRestGetter is used to encapsulate Getters for core RBAC resource types.

RoleTemplateResolver provides an interface to flatten role templates into slice of rules.