Package policybased implements a standard storage for ClusterRoleBinding that prevents privilege escalation.

Matcher returns a generic matcher for a given label and field selector.

NewRegistry returns a new Registry interface for the given Storage.

SelectableFields returns a label set that can be used for filter selection.

strategy is the default logic that applies when creating and updating ClusterRoleBinding objects.

Registry is an interface for things that know how to store ClusterRoleBindings.