- Sort Score
- Result 10 results
- Languages All
Results 1 - 10 of 30 for DecisionNoOpinion (0.34 sec)
-
plugin/pkg/auth/authorizer/node/node_authorizer_test.go
{User: node2, Decision: authorizer.DecisionNoOpinion, Secret: "node1-only"}, {User: node2, Decision: authorizer.DecisionAllow, Secret: "node1-node2-only"}, {User: node2, Decision: authorizer.DecisionAllow, Secret: "shared-all"}, {User: node3, Decision: authorizer.DecisionNoOpinion, Secret: "node1-only"}, {User: node3, Decision: authorizer.DecisionNoOpinion, Secret: "node1-node2-only"},
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Mar 07 21:22:55 UTC 2024 - 40.5K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/authorization/union/union_test.go
handler2 := &mockAuthzHandler{decision: authorizer.DecisionNoOpinion} authzHandler := New(handler1, handler2) authorized, _, _ := authzHandler.Authorize(context.Background(), nil) if authorized != authorizer.DecisionAllow { t.Errorf("Unexpected authorization failure") } } func TestAuthorizationNonePasses(t *testing.T) { handler1 := &mockAuthzHandler{decision: authorizer.DecisionNoOpinion}
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Sep 24 15:14:54 UTC 2019 - 7.7K bytes - Viewed (0) -
plugin/pkg/auth/authorizer/node/node_authorizer.go
if !isNode { // reject requests from non-nodes return authorizer.DecisionNoOpinion, "", nil } if len(nodeName) == 0 { // reject requests from unidentifiable nodes klog.V(2).Infof("NODE DENY: unknown node for user %q", attrs.GetUser().GetName()) return authorizer.DecisionNoOpinion, fmt.Sprintf("unknown node for user %q", attrs.GetUser().GetName()), nil }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Thu Mar 07 21:22:55 UTC 2024 - 16K bytes - Viewed (0) -
pkg/auth/authorizer/abac/abac_test.go
// .. but not the wrong namespace. {User: uAlice, Verb: "get", Resource: "pods", NS: "ns1", ExpectDecision: authorizer.DecisionNoOpinion}, {User: uAlice, Verb: "get", Resource: "widgets", NS: "ns1", ExpectDecision: authorizer.DecisionNoOpinion}, {User: uAlice, Verb: "get", Resource: "", NS: "ns1", ExpectDecision: authorizer.DecisionNoOpinion}, // Chuck can read events, since anyone can.
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Sep 24 15:14:54 UTC 2019 - 40K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/authorization/authorizerfactory/builtin.go
if attr.GetUser() == nil { return authorizer.DecisionNoOpinion, "Error", errors.New("no user on request.") } for _, attr_group := range attr.GetUser().GetGroups() { for _, priv_group := range r.groups { if priv_group == attr_group { return authorizer.DecisionAllow, "", nil } } } return authorizer.DecisionNoOpinion, "", nil } // NewPrivilegedGroups is for use in loopback scenarios
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue Sep 24 15:14:54 UTC 2019 - 3.2K bytes - Viewed (0) -
plugin/pkg/admission/gc/gc_admission_test.go
if username == "non-deleter" { if a.GetVerb() == "delete" { return authorizer.DecisionNoOpinion, "", nil } if a.GetVerb() == "update" && a.GetSubresource() == "finalizers" { return authorizer.DecisionNoOpinion, "", nil } if a.GetAPIGroup() == "*" && a.GetResource() == "*" { // this user does not have full rights return authorizer.DecisionNoOpinion, "", nil } return authorizer.DecisionAllow, "", nil }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Mon Apr 29 21:28:42 UTC 2024 - 24.5K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/authorization/path/path.go
if a.IsResourceRequest() { return authorizer.DecisionNoOpinion, "", nil } pth := strings.TrimPrefix(a.GetPath(), "/") if paths.Has(pth) { return authorizer.DecisionAllow, "", nil } for _, prefix := range prefixes { if strings.HasPrefix(pth, prefix) { return authorizer.DecisionAllow, "", nil } } return authorizer.DecisionNoOpinion, "", nil }), nil
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Apr 09 13:47:19 UTC 2021 - 1.9K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/plugin/pkg/authorizer/webhook/webhook_v1_test.go
expectedDecision: authorizer.DecisionNoOpinion, expressions: []apiserver.WebhookMatchCondition{ { Expression: "request.user == 'alice'", }, }, }, { name: "match on user name but not resourceAttributes", attr: bobAttr, expectedCompileErr: "", expectedDecision: authorizer.DecisionNoOpinion,
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Wed Apr 24 18:25:29 UTC 2024 - 43.2K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/authorization/union/union.go
} switch decision { case authorizer.DecisionAllow, authorizer.DecisionDeny: return decision, reason, err case authorizer.DecisionNoOpinion: // continue to the next authorizer } } return authorizer.DecisionNoOpinion, strings.Join(reasonlist, "\n"), utilerrors.NewAggregate(errlist) } // unionAuthzRulesHandler authorizer against a chain of authorizer.RuleResolver
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Sun Jun 28 20:27:28 UTC 2020 - 3.9K bytes - Viewed (0) -
staging/src/k8s.io/apiserver/pkg/authorization/metrics/metrics_test.go
t.Fatal(err) } authorizationDecisionsTotal.Reset() } // no-opinion emits no metric { dummyAuthorizer.decision = authorizer.DecisionNoOpinion _, _, _ = a.Authorize(context.Background(), nil) _, _, _ = a.Authorize(context.Background(), nil) expectedValue := prefix + ` `
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Fri Feb 16 13:20:59 UTC 2024 - 3.3K bytes - Viewed (0)