f45bcc5ffb
Automatic merge from submit-queue
pkg/apis/rbac: Add Openshift authorization API types
This PR updates #23396 by adding the Openshift RBAC types to a new API group.
Changes from Openshift:
* Omission of [ResourceGroups](4589987883/pkg/authorization/api/types.go (L32-L104)) as most of these were Openshift specific. Would like to add the concept back in for a later release of the API.
* Omission of IsPersonalSubjectAccessReview as its implementation relied on Openshift capability.
* Omission of SubjectAccessReview and ResourceAccessReview types. These are defined in `authorization.k8s.io`
~~API group is named `rbac.authorization.openshift.com` as we omitted the AccessReview stuff and that seemed to be the lest controversial based on conversations in #23396. Would be happy to change it if there's a dislike for the name.~~ Edit: API groups is named `rbac`, sorry misread the original thread.
As discussed in #18762, creating a new API group is kind difficult right now and the documentation is very out of date. Got a little help from @soltysh but I'm sure I'm missing some things. Also still need to add validation and a RESTStorage registry interface. Hence "WIP".
Any initial comments welcome.
cc @erictune @deads2k @sym3tri @philips
72 lines
2.4 KiB
Go
72 lines
2.4 KiB
Go
/*
|
|
Copyright 2015 The Kubernetes Authors All rights reserved.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
// deepcopy-gen is a tool for auto-generating DeepCopy functions.
|
|
//
|
|
// Structs in the input directories with the below line in their comments
|
|
// will be ignored during generation.
|
|
// // +gencopy=false
|
|
package main
|
|
|
|
import (
|
|
"k8s.io/kubernetes/cmd/libs/go2idl/args"
|
|
"k8s.io/kubernetes/cmd/libs/go2idl/deepcopy-gen/generators"
|
|
|
|
"github.com/golang/glog"
|
|
)
|
|
|
|
func main() {
|
|
arguments := args.Default()
|
|
|
|
// Override defaults. These are Kubernetes specific input locations.
|
|
arguments.InputDirs = []string{
|
|
"k8s.io/kubernetes/pkg/api",
|
|
"k8s.io/kubernetes/pkg/api/v1",
|
|
"k8s.io/kubernetes/pkg/apis/authentication.k8s.io",
|
|
"k8s.io/kubernetes/pkg/apis/authentication.k8s.io/v1beta1",
|
|
"k8s.io/kubernetes/pkg/apis/authorization",
|
|
"k8s.io/kubernetes/pkg/apis/authorization/v1beta1",
|
|
"k8s.io/kubernetes/pkg/apis/autoscaling",
|
|
"k8s.io/kubernetes/pkg/apis/autoscaling/v1",
|
|
"k8s.io/kubernetes/pkg/apis/batch",
|
|
"k8s.io/kubernetes/pkg/apis/batch/v1",
|
|
"k8s.io/kubernetes/pkg/apis/batch/v2alpha1",
|
|
"k8s.io/kubernetes/pkg/apis/apps",
|
|
"k8s.io/kubernetes/pkg/apis/apps/v1alpha1",
|
|
"k8s.io/kubernetes/pkg/apis/componentconfig",
|
|
"k8s.io/kubernetes/pkg/apis/componentconfig/v1alpha1",
|
|
"k8s.io/kubernetes/pkg/apis/policy",
|
|
"k8s.io/kubernetes/pkg/apis/policy/v1alpha1",
|
|
"k8s.io/kubernetes/pkg/apis/extensions",
|
|
"k8s.io/kubernetes/pkg/apis/extensions/v1beta1",
|
|
"k8s.io/kubernetes/pkg/apis/metrics",
|
|
"k8s.io/kubernetes/pkg/apis/metrics/v1alpha1",
|
|
"k8s.io/kubernetes/pkg/apis/rbac",
|
|
"k8s.io/kubernetes/pkg/apis/rbac/v1alpha1",
|
|
"k8s.io/kubernetes/federation/apis/federation",
|
|
"k8s.io/kubernetes/federation/apis/federation/v1alpha1",
|
|
}
|
|
|
|
if err := arguments.Execute(
|
|
generators.NameSystems(),
|
|
generators.DefaultNameSystem(),
|
|
generators.Packages,
|
|
); err != nil {
|
|
glog.Fatalf("Error: %v", err)
|
|
}
|
|
glog.Info("Completed successfully.")
|
|
}
|