New subcommand resource
#21
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
added 17 commits
April 23, 2019 14:06
This type knows how to print the result matrix. The details of how access codes are printed remains in printer.go. This prepares for result printing of access by resource.
This prepares for another implementation of the printer
Make sure that the result is stable by sorting the rows by subject name.
Add new column to show the namespace for a given service-account
corneliusweig
force-pushed
the
resource-subcommand
branch
from
4a5425a
to
e2330ee
Compare
Codecov Report
@@ Coverage Diff @@
## master #21 +/- ##
=========================================
+ Coverage 71.72% 73.33% +1.6%
=========================================
Files 11 15 +4
Lines 474 630 +156
=========================================
+ Hits 340 462 +122
- Misses 121 145 +24
- Partials 13 23 +10
Continue to review full report at Codecov.
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR adds a new subcommand
resource. It retrieves all (Cluster)Roles plus their bindings and evaluates the authorization for the given resource and verbs. The result is shown as a matrix with verbs in the horizontal and subjects in the vertical direction. For example:show what subjects may globally hamper with deployments. It therefore only considers
ClusterRoles. On the other hand,shows who may deal with deployments in a particular namespace. It considers both
ClusterRolesandRoles.While the usual
rakkessbehavior slices the authorization space (subject, resource, verb) along a plane of constant subject (usually self), this new variant does a similar thing along a plane of fixed resource.