auth

type AllowAll ¶

type AllowAll struct{}

AllowAll is an auth check that allows every request, regardless of the params. Useful for testing or cases where you want to disable auth checks.

func (AllowAll) Check(context.Context, string, string, string) error

type Checker ¶

type Checker interface {
	Check(ctx context.Context, parent, resource, verb string) error
}

Checker handles authentication and authorization checks for an action on a resource.

type Option ¶ added in v0.6.0

type Option func(*RBAC)

func WithImpersonation(enabled bool) Option

type RBAC ¶

type RBAC struct {
	// contains filtered or unexported fields
}

RBAC is a Kubernetes RBAC based auth checker. This uses the Kubernetes TokenReview and SubjectAccessReview APIs to defer auth decisions to the cluster. Users should pass in `token` metadata through the gRPC context. This checks RBAC permissions in the `results.tekton.dev` group, and assumes checks are done at the namespace

func NewRBAC(client kubernetes.Interface, options ...Option) *RBAC

func (r *RBAC) Check(ctx context.Context, namespace, resource, verb string) error