com.coralogix.zio.k8s.model.rbac.v1alpha1

Members list

Concise view

Type members

Classlikes

case class AggregationRule(clusterRoleSelectors: Optional[Vector[LabelSelector]])

AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

Attributes

clusterRoleSelectors

ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added

Companion:
object
Graph
Supertypes
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any

Attributes

Companion:
class
Graph
Supertypes
trait Product
trait Mirror
class Object
trait Matchable
class Any
Self type

Attributes

Graph
Supertypes
class Object
trait Matchable
class Any
Known subtypes
object AggregationRule.type
case class ClusterRole(aggregationRule: Optional[AggregationRule], metadata: Optional[ObjectMeta], rules: Optional[Vector[PolicyRule]])

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRole, and will no longer be served in v1.22.

Attributes

rules

Rules holds all the PolicyRules for this ClusterRole

Companion:
object
Graph
Supertypes
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any

Attributes

Companion:
class
Graph
Supertypes
trait Product
trait Mirror
class Object
trait Matchable
class Any
Self type
case class ClusterRoleBinding(metadata: Optional[ObjectMeta], roleRef: RoleRef, subjects: Optional[Vector[Subject]])

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 ClusterRoleBinding, and will no longer be served in v1.22.

Attributes

subjects

Subjects holds references to the objects the role applies to.

Companion:
object
Graph
Supertypes
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any

Attributes

Companion:
class
Graph
Supertypes
trait Product
trait Mirror
class Object
trait Matchable
class Any
Self type

Attributes

Graph
Supertypes
class Object
trait Matchable
class Any
Known subtypes
object ClusterRoleBinding.type
class ClusterRoleFields(_prefix: Chunk[String])

Attributes

Graph
Supertypes
class Object
trait Matchable
class Any
Known subtypes
object ClusterRole.type
case class PolicyRule(apiGroups: Optional[Vector[String]], nonResourceURLs: Optional[Vector[String]], resourceNames: Optional[Vector[String]], resources: Optional[Vector[String]], verbs: Vector[String])

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

Attributes

apiGroups

APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.

nonResourceURLs

NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.

resourceNames

ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.

resources

Resources is a list of resources this rule applies to. '*' represents all resources.

verbs

Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. '*' represents all verbs.

Companion:
object
Graph
Supertypes
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any

Attributes

Companion:
class
Graph
Supertypes
trait Product
trait Mirror
class Object
trait Matchable
class Any
Self type
class PolicyRuleFields(_prefix: Chunk[String])

Attributes

Graph
Supertypes
class Object
trait Matchable
class Any
Known subtypes
object PolicyRule.type
case class Role(metadata: Optional[ObjectMeta], rules: Optional[Vector[PolicyRule]])

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.22.

Attributes

rules

Rules holds all the PolicyRules for this Role

Companion:
object
Graph
Supertypes
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any
object Role extends RoleFields

Attributes

Companion:
class
Graph
Supertypes
trait Product
trait Mirror
class Object
trait Matchable
class Any
Self type
Role.type
case class RoleBinding(metadata: Optional[ObjectMeta], roleRef: RoleRef, subjects: Optional[Vector[Subject]])

RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.

RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.22.

Attributes

subjects

Subjects holds references to the objects the role applies to.

Companion:
object
Graph
Supertypes
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any

Attributes

Companion:
class
Graph
Supertypes
trait Product
trait Mirror
class Object
trait Matchable
class Any
Self type
class RoleBindingFields(_prefix: Chunk[String])

Attributes

Graph
Supertypes
class Object
trait Matchable
class Any
Known subtypes
object RoleBinding.type
class RoleFields(_prefix: Chunk[String])

Attributes

Graph
Supertypes
class Object
trait Matchable
class Any
Known subtypes
object Role.type
case class RoleRef(apiGroup: String, kind: String, name: String)

RoleRef contains information that points to the role being used

RoleRef contains information that points to the role being used

Attributes

apiGroup

APIGroup is the group for the resource being referenced

kind

Kind is the type of resource being referenced

name

Name is the name of resource being referenced

Companion:
object
Graph
Supertypes
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any
object RoleRef extends RoleRefFields

Attributes

Companion:
class
Graph
Supertypes
trait Product
trait Mirror
class Object
trait Matchable
class Any
Self type
RoleRef.type
class RoleRefFields(_prefix: Chunk[String])

Attributes

Graph
Supertypes
class Object
trait Matchable
class Any
Known subtypes
object RoleRef.type
case class Subject(apiVersion: Optional[String], kind: String, name: String, namespace: Optional[String])

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

Attributes

apiVersion

APIVersion holds the API group and version of the referenced subject. Defaults to "v1" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io/v1alpha1" for User and Group subjects.

kind

Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.

name

Name of the object being referenced.

namespace

Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.

Companion:
object
Graph
Supertypes
trait Serializable
trait Product
trait Equals
class Object
trait Matchable
class Any
object Subject extends SubjectFields

Attributes

Companion:
class
Graph
Supertypes
trait Product
trait Mirror
class Object
trait Matchable
class Any
Self type
Subject.type
class SubjectFields(_prefix: Chunk[String])

Attributes

Graph
Supertypes
class Object
trait Matchable
class Any
Known subtypes
object Subject.type