Kubernetes.Api.Rbac.V1Alpha1

newtype AggregationRule

AggregationRule describes how to locate ClusterRoles to aggregate into the ClusterRole

Fields:

• clusterRoleSelectors: ClusterRoleSelectors holds a list of selectors which will be used to find ClusterRoles and create the rules. If any of the selectors match, then the ClusterRole's permissions will be added

Constructors

• AggregationRule { clusterRoleSelectors :: Maybe (Array LabelSelector) }

Instances

• Newtype AggregationRule _
• Generic AggregationRule _
• Show AggregationRule
• Decode AggregationRule
• Encode AggregationRule
• Default AggregationRule

newtype ClusterRole

ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.

Fields:

• aggregationRule: AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.
• metadata: Standard object's metadata.
• rules: Rules holds all the PolicyRules for this ClusterRole

Constructors

• ClusterRole { aggregationRule :: Maybe AggregationRule, metadata :: Maybe ObjectMeta, rules :: Maybe (Array PolicyRule) }

Instances

• Newtype ClusterRole _
• Generic ClusterRole _
• Show ClusterRole
• Decode ClusterRole
• Encode ClusterRole
• Default ClusterRole

newtype ClusterRoleBinding

ClusterRoleBinding references a ClusterRole, but not contain it. It can reference a ClusterRole in the global namespace, and adds who information via Subject.

Fields:

• metadata: Standard object's metadata.
• roleRef: RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
• subjects: Subjects holds references to the objects the role applies to.

Constructors

• ClusterRoleBinding { metadata :: Maybe ObjectMeta, roleRef :: Maybe RoleRef, subjects :: Maybe (Array Subject) }

Instances

• Newtype ClusterRoleBinding _
• Generic ClusterRoleBinding _
• Show ClusterRoleBinding
• Decode ClusterRoleBinding
• Encode ClusterRoleBinding
• Default ClusterRoleBinding

newtype ClusterRoleBindingList

ClusterRoleBindingList is a collection of ClusterRoleBindings

Fields:

• items: Items is a list of ClusterRoleBindings
• metadata: Standard object's metadata.

Constructors

• ClusterRoleBindingList { items :: Maybe (Array ClusterRoleBinding), metadata :: Maybe ListMeta }

Instances

• Newtype ClusterRoleBindingList _
• Generic ClusterRoleBindingList _
• Show ClusterRoleBindingList
• Decode ClusterRoleBindingList
• Encode ClusterRoleBindingList
• Default ClusterRoleBindingList

newtype ClusterRoleList

ClusterRoleList is a collection of ClusterRoles

Fields:

• items: Items is a list of ClusterRoles
• metadata: Standard object's metadata.

Constructors

• ClusterRoleList { items :: Maybe (Array ClusterRole), metadata :: Maybe ListMeta }

Instances

• Newtype ClusterRoleList _
• Generic ClusterRoleList _
• Show ClusterRoleList
• Decode ClusterRoleList
• Encode ClusterRoleList
• Default ClusterRoleList

newtype PolicyRule

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

Fields:

• apiGroups: APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.
• nonResourceURLs: NonResourceURLs is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different. Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.
• resourceNames: ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.
• resources: Resources is a list of resources this rule applies to. ResourceAll represents all resources.
• verbs: Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.

Constructors

• PolicyRule { apiGroups :: Maybe (Array String), nonResourceURLs :: Maybe (Array String), resourceNames :: Maybe (Array String), resources :: Maybe (Array String), verbs :: Maybe (Array String) }

Instances

• Newtype PolicyRule _
• Generic PolicyRule _
• Show PolicyRule
• Decode PolicyRule
• Encode PolicyRule
• Default PolicyRule

newtype Role

Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.

Fields:

• metadata: Standard object's metadata.
• rules: Rules holds all the PolicyRules for this Role

Constructors

• Role { metadata :: Maybe ObjectMeta, rules :: Maybe (Array PolicyRule) }

Instances

• Newtype Role _
• Generic Role _
• Show Role
• Decode Role
• Encode Role
• Default Role

newtype RoleBinding

RoleBinding references a role, but does not contain it. It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in. RoleBindings in a given namespace only have effect in that namespace.

Fields:

• metadata: Standard object's metadata.
• roleRef: RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
• subjects: Subjects holds references to the objects the role applies to.

Constructors

• RoleBinding { metadata :: Maybe ObjectMeta, roleRef :: Maybe RoleRef, subjects :: Maybe (Array Subject) }

Instances

• Newtype RoleBinding _
• Generic RoleBinding _
• Show RoleBinding
• Decode RoleBinding
• Encode RoleBinding
• Default RoleBinding

newtype RoleBindingList

RoleBindingList is a collection of RoleBindings

Fields:

• items: Items is a list of RoleBindings
• metadata: Standard object's metadata.

Constructors

• RoleBindingList { items :: Maybe (Array RoleBinding), metadata :: Maybe ListMeta }

Instances

• Newtype RoleBindingList _
• Generic RoleBindingList _
• Show RoleBindingList
• Decode RoleBindingList
• Encode RoleBindingList
• Default RoleBindingList

newtype RoleList

RoleList is a collection of Roles

Fields:

• items: Items is a list of Roles
• metadata: Standard object's metadata.

Constructors

• RoleList { items :: Maybe (Array Role), metadata :: Maybe ListMeta }

Instances

• Newtype RoleList _
• Generic RoleList _
• Show RoleList
• Decode RoleList
• Encode RoleList
• Default RoleList

newtype RoleRef

RoleRef contains information that points to the role being used

Fields:

• apiGroup: APIGroup is the group for the resource being referenced
• kind: Kind is the type of resource being referenced
• name: Name is the name of resource being referenced

Constructors

• RoleRef { apiGroup :: Maybe String, kind :: Maybe String, name :: Maybe String }

Instances

• Newtype RoleRef _
• Generic RoleRef _
• Show RoleRef
• Decode RoleRef
• Encode RoleRef
• Default RoleRef

newtype Subject

Subject contains a reference to the object or user identities a role binding applies to. This can either hold a direct API object reference, or a value for non-objects such as user and group names.

Fields:

• apiVersion: APIVersion holds the API group and version of the referenced subject. Defaults to "v1" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io/v1alpha1" for User and Group subjects.
• kind: Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
• name: Name of the object being referenced.
• namespace: Namespace of the referenced object. If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.

Constructors

• Subject { apiVersion :: Maybe String, kind :: Maybe String, name :: Maybe String, namespace :: Maybe String }

Instances

• Newtype Subject _
• Generic Subject _
• Show Subject
• Decode Subject
• Encode Subject
• Default Subject

getAPIResources :: Config -> Aff (Either Status APIResourceList)

get available resources