Documentation
¶
Overview ¶
Package access owns routing for the access top-level command.
Index ¶
- Constants
- func New(runtime *core.Runtime) *cobra.Command
- func NewWithManager(mgr *AccessManager) *cobra.Command
- type AccessManager
- func (m *AccessManager) ApplyAccessResource(file string) error
- func (m *AccessManager) BindUseKubeFlag(cmd *cobra.Command)
- func (m *AccessManager) DeleteAccessResource(resource, name, namespace string) error
- func (m *AccessManager) ExplainAccess(opts explainOptions, out io.Writer) error
- func (m *AccessManager) GetAccessResource(resource, name, namespace string) error
- func (m *AccessManager) InitGrantManifest(opts accessManifestInitOptions) error
- func (m *AccessManager) InitSessionManifest(opts accessManifestInitOptions) error
- func (m *AccessManager) ListAccessResources(resource, namespace string, allNamespaces bool) error
- func (m *AccessManager) RevokeGrantSessions(name, namespace string) error
- func (m *AccessManager) ToggleAccessResource(resource, name, namespace string, value bool) error
Constants ¶
const ( // GrantResource is the kubectl resource name for MCPAccessGrant. GrantResource = "mcpaccessgrant" // SessionResource is the kubectl resource name for MCPAgentSession. SessionResource = "mcpagentsession" )
Variables ¶
This section is empty.
Functions ¶
func NewWithManager ¶
func NewWithManager(mgr *AccessManager) *cobra.Command
NewWithManager returns the access command using the provided manager.
Types ¶
type AccessManager ¶
type AccessManager struct {
// contains filtered or unexported fields
}
AccessManager handles access grant and session operations.
func DefaultAccessManager ¶
func DefaultAccessManager(runtime *core.Runtime) *AccessManager
DefaultAccessManager returns an AccessManager using the shared runtime clients.
func NewAccessManager ¶
func NewAccessManager(kubectl *core.KubectlClient, logger *zap.Logger) *AccessManager
NewAccessManager creates an AccessManager with explicit dependencies (tests and advanced wiring).
func (*AccessManager) ApplyAccessResource ¶
func (m *AccessManager) ApplyAccessResource(file string) error
ApplyAccessResource applies a grant or session manifest via platform API or explicit direct Kubernetes mode.
func (*AccessManager) BindUseKubeFlag ¶
func (m *AccessManager) BindUseKubeFlag(cmd *cobra.Command)
BindUseKubeFlag wires the shared --use-kube flag onto the command.
func (*AccessManager) DeleteAccessResource ¶
func (m *AccessManager) DeleteAccessResource(resource, name, namespace string) error
DeleteAccessResource deletes a grant or session via platform API or explicit direct Kubernetes mode.
func (*AccessManager) ExplainAccess ¶
func (m *AccessManager) ExplainAccess(opts explainOptions, out io.Writer) error
ExplainAccess evaluates a hypothetical request against a local or live rendered policy document and writes a human or JSON explanation to out.
func (*AccessManager) GetAccessResource ¶
func (m *AccessManager) GetAccessResource(resource, name, namespace string) error
GetAccessResource prints one grant or session via platform API or explicit direct Kubernetes mode.
func (*AccessManager) InitGrantManifest ¶
func (m *AccessManager) InitGrantManifest(opts accessManifestInitOptions) error
func (*AccessManager) InitSessionManifest ¶
func (m *AccessManager) InitSessionManifest(opts accessManifestInitOptions) error
func (*AccessManager) ListAccessResources ¶
func (m *AccessManager) ListAccessResources(resource, namespace string, allNamespaces bool) error
ListAccessResources lists grants or sessions via the platform API unless --use-kube is set.
func (*AccessManager) RevokeGrantSessions ¶
func (m *AccessManager) RevokeGrantSessions(name, namespace string) error
RevokeGrantSessions revokes sessions linked to a grant through the audited platform API.
func (*AccessManager) ToggleAccessResource ¶
func (m *AccessManager) ToggleAccessResource(resource, name, namespace string, value bool) error
ToggleAccessResource enables/disables grants or revokes/unrevokes sessions.
Source Files