pub struct LocalSubjectAccessReview {
pub content: Option<RawExtension>,
pub groups: Vec<String>,
pub is_non_resource_url: bool,
pub namespace: String,
pub path: String,
pub resource: String,
pub resource_api_group: String,
pub resource_api_version: String,
pub resource_name: String,
pub scopes: Vec<String>,
pub user: String,
pub verb: String,
}
Expand description
LocalSubjectAccessReview is an object for requesting information about whether a user or group can perform an action in a particular namespace
Fields§
§content: Option<RawExtension>
Content is the actual content of the request for create and update
groups: Vec<String>
Groups is optional. Groups is the list of groups to which the User belongs.
is_non_resource_url: bool
IsNonResourceURL is true if this is a request for a non-resource URL (outside of the resource hieraarchy)
namespace: String
Namespace is the namespace of the action being requested. Currently, there is no distinction between no namespace and all namespaces
path: String
Path is the path of a non resource URL
resource: String
Resource is one of the existing resource types
resource_api_group: String
Group is the API group of the resource Serialized as resourceAPIGroup to avoid confusion with the ‘groups’ field when inlined
resource_api_version: String
Version is the API version of the resource Serialized as resourceAPIVersion to avoid confusion with TypeMeta.apiVersion and ObjectMeta.resourceVersion when inlined
resource_name: String
ResourceName is the name of the resource being requested for a “get” or deleted for a “delete”
scopes: Vec<String>
Scopes to use for the evaluation. Empty means “use the unscoped (full) permissions of the user/groups”. Nil for a self-SAR, means “use the scopes on this request”. Nil for a regular SAR, means the same as empty.
user: String
User is optional. If both User and Groups are empty, the current authenticated user is used.
verb: String
Verb is one of: get, list, watch, create, update, delete
Implementations§
Source§impl LocalSubjectAccessReview
impl LocalSubjectAccessReview
Sourcepub fn create_namespaced_local_subject_access_review(
namespace: &str,
body: &LocalSubjectAccessReview,
optional: CreateOptional<'_>,
) -> Result<(Request<Vec<u8>>, fn(StatusCode) -> ResponseBody<CreateResponse<Self>>), RequestError>
pub fn create_namespaced_local_subject_access_review( namespace: &str, body: &LocalSubjectAccessReview, optional: CreateOptional<'_>, ) -> Result<(Request<Vec<u8>>, fn(StatusCode) -> ResponseBody<CreateResponse<Self>>), RequestError>
create a LocalSubjectAccessReview
Use the returned k8s_openapi::ResponseBody
<
k8s_openapi::CreateResponse
<Self>>
constructor, or k8s_openapi::CreateResponse
<Self>
directly, to parse the HTTP response.
§Arguments
-
namespace
object name and auth scope, such as for teams and projects
-
body
-
optional
Optional parameters. Use
Default::default()
to not pass any.
Trait Implementations§
Source§impl Clone for LocalSubjectAccessReview
impl Clone for LocalSubjectAccessReview
Source§fn clone(&self) -> LocalSubjectAccessReview
fn clone(&self) -> LocalSubjectAccessReview
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source
. Read moreSource§impl Debug for LocalSubjectAccessReview
impl Debug for LocalSubjectAccessReview
Source§impl Default for LocalSubjectAccessReview
impl Default for LocalSubjectAccessReview
Source§fn default() -> LocalSubjectAccessReview
fn default() -> LocalSubjectAccessReview
Source§impl<'de> Deserialize<'de> for LocalSubjectAccessReview
impl<'de> Deserialize<'de> for LocalSubjectAccessReview
Source§fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>where
D: Deserializer<'de>,
fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>where
D: Deserializer<'de>,
Source§impl PartialEq for LocalSubjectAccessReview
impl PartialEq for LocalSubjectAccessReview
Source§impl Resource for LocalSubjectAccessReview
impl Resource for LocalSubjectAccessReview
Source§const API_VERSION: &'static str = "authorization.openshift.io/v1"
const API_VERSION: &'static str = "authorization.openshift.io/v1"
Resource::GROUP
and Resource::VERSION
(eg "apiextensions.k8s.io/v1beta1"
)
or just the version for resources without a group (eg "v1"
). Read more