Type Members

1.  case class AggregationRule(clusterRoleSelectors: Option[Seq[LabelSelector]] = None) extends Product with Serializable

   AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

   AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

   clusterRoleSelectors

   ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added

2.  case class ClusterRole(aggregationRule: Option[AggregationRule] = None, apiVersion: Option[String] = None, kind: Option[String] = None, metadata: Option[ObjectMeta] = None, rules: Option[Seq[PolicyRule]] = None) extends Product with Serializable

   ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.

   ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.

   aggregationRule

   AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.

   apiVersion

   APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

   kind

   Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

   metadata

   Standard object's metadata.

   rules

   Rules holds all the PolicyRules for this ClusterRole

3.  case class ClusterRoleBinding(roleRef: RoleRef, apiVersion: Option[String] = None, kind: Option[String] = None, metadata: Option[ObjectMeta] = None, subjects: Option[Seq[Subject]] = None) extends Product with Serializable

   ClusterRoleBinding references a ClusterRole, but not contain it.

   ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.

   roleRef

   RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.

   apiVersion

   APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

   kind

   Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

   metadata

   Standard object's metadata.

   subjects

   Subjects holds references to the objects the role applies to.

4.  case class ClusterRoleBindingList(items: Seq[ClusterRoleBinding], apiVersion: Option[String] = None, kind: Option[String] = None, metadata: Option[ListMeta] = None) extends Product with Serializable

   ClusterRoleBindingList is a collection of ClusterRoleBindings

   ClusterRoleBindingList is a collection of ClusterRoleBindings

   items

   Items is a list of ClusterRoleBindings

   apiVersion

   APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

   kind

   Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

   metadata

   Standard object's metadata.

5.  case class ClusterRoleList(items: Seq[ClusterRole], apiVersion: Option[String] = None, kind: Option[String] = None, metadata: Option[ListMeta] = None) extends Product with Serializable

   ClusterRoleList is a collection of ClusterRoles

   ClusterRoleList is a collection of ClusterRoles

   items

   Items is a list of ClusterRoles

   apiVersion

   APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

   kind

   Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

   metadata

   Standard object's metadata.

6.  case class PolicyRule(verbs: Seq[String], apiGroups: Option[Seq[String]] = None, nonResourceURLs: Option[Seq[String]] = None, resourceNames: Option[Seq[String]] = None, resources: Option[Seq[String]] = None) extends Product with Serializable

   PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

   PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

   verbs

   Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.

   apiGroups

   APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.

   nonResourceURLs

   NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.

   resourceNames

   ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.

   resources

   Resources is a list of resources this rule applies to. '*' represents all resources.

7.  case class Role(apiVersion: Option[String] = None, kind: Option[String] = None, metadata: Option[ObjectMeta] = None, rules: Option[Seq[PolicyRule]] = None) extends Product with Serializable

   Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.

   Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.

   apiVersion

   APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

   kind

   Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

   metadata

   Standard object's metadata.

   rules

   Rules holds all the PolicyRules for this Role

8.  case class RoleBinding(roleRef: RoleRef, apiVersion: Option[String] = None, kind: Option[String] = None, metadata: Option[ObjectMeta] = None, subjects: Option[Seq[Subject]] = None) extends Product with Serializable

   RoleBinding references a role, but does not contain it.

   RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.

   roleRef

   RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.

   apiVersion

   APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

   kind

   Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

   metadata

   Standard object's metadata.

   subjects

   Subjects holds references to the objects the role applies to.

9.  case class RoleBindingList(items: Seq[RoleBinding], apiVersion: Option[String] = None, kind: Option[String] = None, metadata: Option[ListMeta] = None) extends Product with Serializable

   RoleBindingList is a collection of RoleBindings

   RoleBindingList is a collection of RoleBindings

   items

   Items is a list of RoleBindings

   apiVersion

   APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

   kind

   Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

   metadata

   Standard object's metadata.

10.  case class RoleList(items: Seq[Role], apiVersion: Option[String] = None, kind: Option[String] = None, metadata: Option[ListMeta] = None) extends Product with Serializable

    RoleList is a collection of Roles

    RoleList is a collection of Roles

    items

    Items is a list of Roles

    apiVersion

    APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources

    kind

    Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds

    metadata

    Standard object's metadata.

11.  case class RoleRef(apiGroup: String, kind: String, name: String) extends Product with Serializable

    RoleRef contains information that points to the role being used

    RoleRef contains information that points to the role being used

    apiGroup

    APIGroup is the group for the resource being referenced

    kind

    Kind is the type of resource being referenced

    name

    Name is the name of resource being referenced

12.  case class Subject(kind: String, name: String, apiGroup: Option[String] = None, namespace: Option[String] = None) extends Product with Serializable

    Subject contains a reference to the object or user identities a role binding applies to.

    Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

    kind

    Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.

    name

    Name of the object being referenced.

    apiGroup

    APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.

    namespace

    Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.