util

func AssertOrganizationOwnership ¶

func AssertOrganizationOwnership(resource metav1.Object, organizationID string) error

AssertOrganizationOwnership checks whether the resource has the correct organizationID. When we call an API the RBAC layer asserts that the user provided organizationID is allowable for the actor making the call. However for GET APIs it's quicker and easier to directly get an object by ID, rather than do a full list lookup with a full set of label selectors. This does however mean that a user can ostensibly read any resource if it knows the ID. Ensure we return a 404 here on error so we don't give away any facts about resources that shoudn't be visible to the client.

func AssertProjectOwnership ¶

func AssertProjectOwnership(resource metav1.Object, organizationID, projectID string) error

AssertProjectOwnership does the same as AssertOrganizationOwnership but with additional project scoping.

func DecodeTagSelectorParam ¶

func DecodeTagSelectorParam(tags *openapi.TagSelectorParameter) (unikornv1core.TagList, error)

func ForegroundDeleteOptions ¶

func ForegroundDeleteOptions() *client.DeleteOptions