permissions

func BumpClusterImageRoleAuthorizations ¶ added in v0.9.0

func BumpClusterImageRoleAuthorizations(req router.Request, _ router.Response) error

BumpClusterImageRoleAuthorizations will bump the failing apps covered by a cluster image role authorization such that the app will be re-evaluated for image permissions.

func BumpImageRoleAuthorizations ¶ added in v0.9.0

func BumpImageRoleAuthorizations(req router.Request, _ router.Response) error

BumpImageRoleAuthorizations will bump the failing apps covered by an image role authorization such that the app will be re-evaluated for image permissions.

func CheckPermissions ¶ added in v0.9.0

func CheckPermissions(req router.Request, _ router.Response) error

CheckPermissions checks various things related to permissions a) if the image is allowed by the image allow rules (if enabled) b) if the permissions requested by all images in the app are

b.1) granted by the user (as set in the app spec)
b.2) authorized by the image role authorizations (if enabled)

func CopyPromoteStagedAppImage ¶

func CopyPromoteStagedAppImage(req router.Request, resp router.Response) error

CopyPromoteStagedAppImage copies the staged app image to the app image if - the staged app image is set - the permissions have been checked - there are no missing permissions - there are no image permissions denied (if ImageRoleAuthorizations are enabled) - the image is allowed by the image allow rules (if enabled)