Struct PolicyRule

pub struct PolicyRule {
    pub api_groups: Vec<String>,
    pub attribute_restrictions: Option<RawExtension>,
    pub non_resource_urls: Option<Vec<String>>,
    pub resource_names: Option<Vec<String>>,
    pub resources: Vec<String>,
    pub verbs: Vec<String>,
}

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

Fields

api_groups: Vec<String>

APIGroups is the name of the APIGroup that contains the resources. If this field is empty, then both kubernetes and origin API groups are assumed. That means that if an action is requested against one of the enumerated resources in either the kubernetes or the origin API group, the request will be allowed

attribute_restrictions: Option<RawExtension>

AttributeRestrictions will vary depending on what the Authorizer/AuthorizationAttributeBuilder pair supports. If the Authorizer does not recognize how to handle the AttributeRestrictions, the Authorizer should report an error.

non_resource_urls: Option<Vec<String>>

NonResourceURLsSlice is a set of partial urls that a user should have access to. *s are allowed, but only as the full, final step in the path This name is intentionally different than the internal type so that the DefaultConvert works nicely and because the ordering may be different.

resource_names: Option<Vec<String>>

ResourceNames is an optional white list of names that the rule applies to. An empty set means that everything is allowed.

resources: Vec<String>

Resources is a list of resources this rule applies to. ResourceAll represents all resources.

verbs: Vec<String>

Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.

Trait Implementations

impl Clone for PolicyRule

fn clone(&self) -> PolicyRule

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PolicyRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PolicyRule

fn default() -> PolicyRule

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PolicyRule

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for PolicyRule

fn eq(&self, other: &PolicyRule) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PolicyRule

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PolicyRule