rules

package

v0.2.2 Latest Latest Go to latest Published: Aug 26, 2026 License: Apache-2.0 Imports: 12 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/deckhouse/dmt

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
type BindingSubjectRule
- func NewBindingSubjectRule(excludeRules []pkg.StringRuleExclude, m pkg.Module, ...) *BindingSubjectRule
- func (r *BindingSubjectRule) Check(_ context.Context)
type PlacementRule
- func NewPlacementRule(excludeRules []pkg.KindRuleExclude, m pkg.Module, ...) *PlacementRule
- func (r *PlacementRule) Check(_ context.Context)
type UserAuthZRule
- func NewUserAuthZRule(m pkg.Module, errorList *errors.LintRuleErrorsList) *UserAuthZRule
- func (r *UserAuthZRule) Check(_ context.Context)
type WildcardsRule
- func NewWildcardsRule(excludeRules []pkg.KindRuleExclude, m pkg.Module, ...) *WildcardsRule
- func (r *WildcardsRule) Check(_ context.Context)

Constants ¶

View Source

const (
	UserAuthzClusterRolePath = "templates/user-authz-cluster-roles.yaml"
	RootRBACForUsPath        = "templates/rbac-for-us.yaml"
	RootRBACToUsPath         = "templates/rbac-to-us.yaml"
	RBACv2Path               = "templates/rbac"
)

View Source

const (
	BindingSubjectRuleName = "binding-subject"
)

View Source

const (
	PlacementRuleName = "placement"
)

View Source

const (
	UserAuthZRuleName = "user-authz"
)

View Source

const (
	WildcardsRuleName = "wildcards"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type BindingSubjectRule ¶

type BindingSubjectRule struct {
	pkg.RuleMeta
	pkg.StringRule
	// contains filtered or unexported fields
}

func NewBindingSubjectRule ¶

func NewBindingSubjectRule(excludeRules []pkg.StringRuleExclude,
	m pkg.Module, errorList *errors.LintRuleErrorsList) *BindingSubjectRule

func (*BindingSubjectRule) Check ¶ added in v0.2.0

func (r *BindingSubjectRule) Check(_ context.Context)

type PlacementRule ¶

type PlacementRule struct {
	pkg.RuleMeta
	pkg.KindRule
	// contains filtered or unexported fields
}

func NewPlacementRule ¶

func NewPlacementRule(excludeRules []pkg.KindRuleExclude,
	m pkg.Module, errorList *errors.LintRuleErrorsList) *PlacementRule

func (*PlacementRule) Check ¶ added in v0.2.0

func (r *PlacementRule) Check(_ context.Context)

type UserAuthZRule ¶ added in v0.1.57

type UserAuthZRule struct {
	pkg.RuleMeta
	// contains filtered or unexported fields
}

func NewUserAuthZRule ¶ added in v0.1.57

func NewUserAuthZRule(m pkg.Module, errorList *errors.LintRuleErrorsList) *UserAuthZRule

func (*UserAuthZRule) Check ¶ added in v0.2.0

func (r *UserAuthZRule) Check(_ context.Context)

Check validates that files for user-authz contains only cluster roles. Also, it validates that role names equals to d8:user-authz:<ChartName>:<AccessLevel>

type WildcardsRule ¶

type WildcardsRule struct {
	pkg.RuleMeta
	pkg.KindRule
	// contains filtered or unexported fields
}

func NewWildcardsRule ¶

func NewWildcardsRule(excludeRules []pkg.KindRuleExclude,
	m pkg.Module, errorList *errors.LintRuleErrorsList) *WildcardsRule

func (*WildcardsRule) Check ¶ added in v0.2.0

func (r *WildcardsRule) Check(_ context.Context)

Check is a linter for checking the presence of a wildcard in a Role and ClusterRole

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL