INNER CODE UNIT · Go

generateRules

alcideio/rbac-tool · cmd/generate_cmd.go:137

func generateRules(generateKind string, apiresourceList []*metav1.APIResourceList, denyResources sets.String, includeGroups sets.String, allowedVerbs sets.String) ([]rbacv1.PolicyRule, error) {
	isRole := generateKind == "Role"
	errs := []error{}

	computedPolicyRules := make([]rbacv1.PolicyRule, 0)

	//processedGroups := sets.NewString()

	for _, apiGroup := range apiresourceList {

		// rbac rules only look at API group names, not name + version
		gv, err := schema.ParseGroupVersion(apiGroup.GroupVersion)
		if err != nil {
			errs = append(errs, err)
			continue
		}

		//Skip the API Groups for specific

View source record →