Module

Kubernetes.Api.Rbac.V1

Package
purescript-kubernetes
Repository
hoodunit/purescript-kubernetes

#AggregationRule Source

newtype AggregationRule

AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

Fields:

  • clusterRoleSelectors: ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added

Constructors

Instances

#ClusterRole Source

newtype ClusterRole

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.

Fields:

  • aggregationRule: AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.
  • metadata: Standard object's metadata.
  • rules: Rules holds all the PolicyRules for this ClusterRole

Constructors

Instances

#ClusterRoleBinding Source

newtype ClusterRoleBinding

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.

Fields:

  • metadata: Standard object's metadata.
  • roleRef: RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
  • subjects: Subjects holds references to the objects the role applies to.

Constructors

Instances

#ClusterRoleBindingList Source

newtype ClusterRoleBindingList

ClusterRoleBindingList is a collection of ClusterRoleBindings

Fields:

  • items: Items is a list of ClusterRoleBindings
  • metadata: Standard object's metadata.

Constructors

Instances

#ClusterRoleList Source

newtype ClusterRoleList

ClusterRoleList is a collection of ClusterRoles

Fields:

  • items: Items is a list of ClusterRoles
  • metadata: Standard object's metadata.

Constructors

Instances

#PolicyRule Source

newtype PolicyRule

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

Fields:

  • apiGroups: APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.
  • nonResourceURLs: NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.
  • resourceNames: ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.
  • resources: Resources is a list of resources this rule applies to. ResourceAll represents all resources.
  • verbs: Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.

Constructors

Instances

#Role Source

newtype Role

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.

Fields:

  • metadata: Standard object's metadata.
  • rules: Rules holds all the PolicyRules for this Role

Constructors

Instances

#RoleBinding Source

newtype RoleBinding

RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.

Fields:

  • metadata: Standard object's metadata.
  • roleRef: RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
  • subjects: Subjects holds references to the objects the role applies to.

Constructors

Instances

#RoleBindingList Source

newtype RoleBindingList

RoleBindingList is a collection of RoleBindings

Fields:

  • items: Items is a list of RoleBindings
  • metadata: Standard object's metadata.

Constructors

Instances

#RoleList Source

newtype RoleList

RoleList is a collection of Roles

Fields:

  • items: Items is a list of Roles
  • metadata: Standard object's metadata.

Constructors

Instances

#RoleRef Source

newtype RoleRef

RoleRef contains information that points to the role being used

Fields:

  • apiGroup: APIGroup is the group for the resource being referenced
  • kind: Kind is the type of resource being referenced
  • name: Name is the name of resource being referenced

Constructors

Instances

#Subject Source

newtype Subject

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

Fields:

  • apiGroup: APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
  • kind: Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
  • name: Name of the object being referenced.
  • namespace: Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.

Constructors

Instances

#getAPIResources Source

getAPIResources :: forall e. Config -> Aff (http :: HTTP | e) (Either Status APIResourceList)

get available resources

Modules
Kubernetes.Api.APIExtensions
Kubernetes.Api.APIExtensions.V1Beta1
Kubernetes.Api.APIExtensions.V1Beta1.CustomResourceDefinition
Kubernetes.Api.AdmissionRegistration
Kubernetes.Api.AdmissionRegistration.V1Alpha1
Kubernetes.Api.AdmissionRegistration.V1Alpha1.InitializerConfiguration
Kubernetes.Api.AdmissionRegistration.V1Beta1
Kubernetes.Api.AdmissionRegistration.V1Beta1.MutatingWebhookConfiguration
Kubernetes.Api.AdmissionRegistration.V1Beta1.ValidatingWebhookConfiguration
Kubernetes.Api.ApiRegistration
Kubernetes.Api.ApiRegistration.V1Beta1
Kubernetes.Api.ApiRegistration.V1Beta1.APIService
Kubernetes.Api.Apis
Kubernetes.Api.Apps
Kubernetes.Api.Apps.V1
Kubernetes.Api.Apps.V1.ControllerRevision
Kubernetes.Api.Apps.V1.DaemonSet
Kubernetes.Api.Apps.V1.Deployment
Kubernetes.Api.Apps.V1.ReplicaSet
Kubernetes.Api.Apps.V1.StatefulSet
Kubernetes.Api.Apps.V1Beta1
Kubernetes.Api.Apps.V1Beta1.ControllerRevision
Kubernetes.Api.Apps.V1Beta1.Deployment
Kubernetes.Api.Apps.V1Beta1.DeploymentRollback
Kubernetes.Api.Apps.V1Beta1.Scale
Kubernetes.Api.Apps.V1Beta1.StatefulSet
Kubernetes.Api.Apps.V1Beta2
Kubernetes.Api.Apps.V1Beta2.ControllerRevision
Kubernetes.Api.Apps.V1Beta2.DaemonSet
Kubernetes.Api.Apps.V1Beta2.Deployment
Kubernetes.Api.Apps.V1Beta2.ReplicaSet
Kubernetes.Api.Apps.V1Beta2.Scale
Kubernetes.Api.Apps.V1Beta2.StatefulSet
Kubernetes.Api.Authentication
Kubernetes.Api.Authentication.V1
Kubernetes.Api.Authentication.V1.TokenReview
Kubernetes.Api.Authentication.V1Beta1
Kubernetes.Api.Authentication.V1Beta1.TokenReview
Kubernetes.Api.Authorization
Kubernetes.Api.Authorization.V1
Kubernetes.Api.Authorization.V1.LocalSubjectAccessReview
Kubernetes.Api.Authorization.V1.SelfSubjectAccessReview
Kubernetes.Api.Authorization.V1.SelfSubjectRulesReview
Kubernetes.Api.Authorization.V1.SubjectAccessReview
Kubernetes.Api.Authorization.V1Beta1
Kubernetes.Api.Authorization.V1Beta1.LocalSubjectAccessReview
Kubernetes.Api.Authorization.V1Beta1.SelfSubjectAccessReview
Kubernetes.Api.Authorization.V1Beta1.SelfSubjectRulesReview
Kubernetes.Api.Authorization.V1Beta1.SubjectAccessReview
Kubernetes.Api.Autoscaling
Kubernetes.Api.Autoscaling.V1
Kubernetes.Api.Autoscaling.V1.HorizontalPodAutoscaler
Kubernetes.Api.Autoscaling.V1.Scale
Kubernetes.Api.Autoscaling.V2Beta1
Kubernetes.Api.Autoscaling.V2Beta1.HorizontalPodAutoscaler
Kubernetes.Api.Batch
Kubernetes.Api.Batch.V1
Kubernetes.Api.Batch.V1.Job
Kubernetes.Api.Batch.V1Beta1
Kubernetes.Api.Batch.V1Beta1.CronJob
Kubernetes.Api.Batch.V2Alpha1
Kubernetes.Api.Batch.V2Alpha1.CronJob
Kubernetes.Api.Certificates
Kubernetes.Api.Certificates.V1Beta1
Kubernetes.Api.Certificates.V1Beta1.CertificateSigningRequest
Kubernetes.Api.Core
Kubernetes.Api.Core.V1
Kubernetes.Api.Core.V1.Binding
Kubernetes.Api.Core.V1.ComponentStatus
Kubernetes.Api.Core.V1.ConfigMap
Kubernetes.Api.Core.V1.Endpoints
Kubernetes.Api.Core.V1.Event
Kubernetes.Api.Core.V1.LimitRange
Kubernetes.Api.Core.V1.Namespace
Kubernetes.Api.Core.V1.Node
Kubernetes.Api.Core.V1.PersistentVolume
Kubernetes.Api.Core.V1.PersistentVolumeClaim
Kubernetes.Api.Core.V1.Pod
Kubernetes.Api.Core.V1.PodTemplate
Kubernetes.Api.Core.V1.ReplicationController
Kubernetes.Api.Core.V1.ResourceQuota
Kubernetes.Api.Core.V1.Secret
Kubernetes.Api.Core.V1.Service
Kubernetes.Api.Core.V1.ServiceAccount
Kubernetes.Api.Events
Kubernetes.Api.Events.Event
Kubernetes.Api.Extensions
Kubernetes.Api.Extensions.V1Beta1
Kubernetes.Api.Extensions.V1Beta1.DaemonSet
Kubernetes.Api.Extensions.V1Beta1.Deployment
Kubernetes.Api.Extensions.V1Beta1.DeploymentRollback
Kubernetes.Api.Extensions.V1Beta1.Ingress
Kubernetes.Api.Extensions.V1Beta1.NetworkPolicy
Kubernetes.Api.Extensions.V1Beta1.PodSecurityPolicy
Kubernetes.Api.Extensions.V1Beta1.ReplicaSet
Kubernetes.Api.Extensions.V1Beta1.Scale
Kubernetes.Api.Lens
Kubernetes.Api.Logs
Kubernetes.Api.Meta.V1
Kubernetes.Api.Networking
Kubernetes.Api.Networking.V1
Kubernetes.Api.Networking.V1.NetworkPolicy
Kubernetes.Api.Policy
Kubernetes.Api.Policy.V1Beta1
Kubernetes.Api.Policy.V1Beta1.Eviction
Kubernetes.Api.Policy.V1Beta1.PodDisruptionBudget
Kubernetes.Api.Rbac
Kubernetes.Api.Rbac.V1
Kubernetes.Api.Rbac.V1.ClusterRole
Kubernetes.Api.Rbac.V1.ClusterRoleBinding
Kubernetes.Api.Rbac.V1.Role
Kubernetes.Api.Rbac.V1.RoleBinding
Kubernetes.Api.Rbac.V1Alpha1
Kubernetes.Api.Rbac.V1Alpha1.ClusterRole
Kubernetes.Api.Rbac.V1Alpha1.ClusterRoleBinding
Kubernetes.Api.Rbac.V1Alpha1.Role
Kubernetes.Api.Rbac.V1Alpha1.RoleBinding
Kubernetes.Api.Rbac.V1Beta1
Kubernetes.Api.Rbac.V1Beta1.ClusterRole
Kubernetes.Api.Rbac.V1Beta1.ClusterRoleBinding
Kubernetes.Api.Rbac.V1Beta1.Role
Kubernetes.Api.Rbac.V1Beta1.RoleBinding
Kubernetes.Api.Resource
Kubernetes.Api.Runtime
Kubernetes.Api.Scheduling
Kubernetes.Api.Scheduling.V1Alpha1
Kubernetes.Api.Scheduling.V1Alpha1.PriorityClass
Kubernetes.Api.Settings
Kubernetes.Api.Settings.V1Alpha1
Kubernetes.Api.Settings.V1Alpha1.PodPreset
Kubernetes.Api.Storage
Kubernetes.Api.Storage.V1
Kubernetes.Api.Storage.V1.StorageClass
Kubernetes.Api.Storage.V1Alpha1
Kubernetes.Api.Storage.V1Alpha1.VolumeAttachment
Kubernetes.Api.Storage.V1Beta1
Kubernetes.Api.Storage.V1Beta1.StorageClass
Kubernetes.Api.Util
Kubernetes.Api.Version
Kubernetes.Client
Kubernetes.Config
Kubernetes.Default
Kubernetes.Generation.AST
Kubernetes.Generation.Emitter
Kubernetes.Generation.GenerateApi
Kubernetes.Generation.GenerateDefinitions
Kubernetes.Generation.GenerateSchemaType
Kubernetes.Generation.Generation
Kubernetes.Generation.JsonSchema
Kubernetes.Generation.Main
Kubernetes.Generation.Names
Kubernetes.Generation.Passes.AddDependencyImports
Kubernetes.Generation.Passes.GenerateLenses
Kubernetes.Generation.Passes.HelperLenses
Kubernetes.Generation.Passes.PrefixNamespace
Kubernetes.Generation.Passes.ResolveLocalRefs
Kubernetes.Generation.PathParsing
Kubernetes.Generation.Swagger
Kubernetes.Json
Kubernetes.QueryString
Kubernetes.Request
Kubernetes.RequestOptions
Kubernetes.SchemaExtensions