Package org.cdk8s.plus24.k8s

Interface PolicyRule

All Superinterfaces:

software.amazon.jsii.JsiiSerializable

All Known Implementing Classes:

PolicyRule.Jsii$Proxy

@Generated(value="jsii-pacmak/1.67.0 (build 2c027f5)",
           date="2022-09-16T03:33:04.174Z")
@Stability(Stable)
public interface PolicyRule
extends software.amazon.jsii.JsiiSerializable

PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static class	PolicyRule.Builder	A builder for PolicyRule
static class	PolicyRule.Jsii$Proxy	An implementation for PolicyRule

Method Summary

Modifier and Type	Method	Description
static PolicyRule.Builder	builder()
default List<String>	getApiGroups()	APIGroups is the name of the APIGroup that contains the resources.
default List<String>	getNonResourceUrLs()	NonResourceURLs is a set of partial urls that a user should have access to.
default List<String>	getResourceNames()	ResourceNames is an optional white list of names that the rule applies to.
default List<String>	getResources()	Resources is a list of resources this rule applies to.
List<String>	getVerbs()	Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule.

Methods inherited from interface software.amazon.jsii.JsiiSerializable

$jsii$toJson

Method Detail

getVerbs

@Stability(Stable)
@NotNull
List<String> getVerbs()

Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule.

'*' represents all verbs.

getApiGroups

@Stability(Stable)
@Nullable
default List<String> getApiGroups()

APIGroups is the name of the APIGroup that contains the resources.

If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.

getNonResourceUrLs

@Stability(Stable)
@Nullable
default List<String> getNonResourceUrLs()

NonResourceURLs is a set of partial urls that a user should have access to.

*s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"), but not both.

getResourceNames

@Stability(Stable)
@Nullable
default List<String> getResourceNames()

ResourceNames is an optional white list of names that the rule applies to.

An empty set means that everything is allowed.

getResources

@Stability(Stable)
@Nullable
default List<String> getResources()

Resources is a list of resources this rule applies to.

'*' represents all resources.

builder

@Stability(Stable)
static PolicyRule.Builder builder()

Returns:

a PolicyRule.Builder of PolicyRule