/AWS1/CL_GDYKUBERNETESUSERDETS¶
Details about the Kubernetes user involved in a Kubernetes finding.
CONSTRUCTOR¶
IMPORTING¶
Optional arguments:¶
iv_username TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING¶
The username of the user who called the Kubernetes API.
iv_uid TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING¶
The user ID of the user who called the Kubernetes API.
it_groups TYPE /AWS1/CL_GDYGROUPS_W=>TT_GROUPS TT_GROUPS¶
The groups that include the user who called the Kubernetes API.
it_sessionname TYPE /AWS1/CL_GDYSESSIONNAMELIST_W=>TT_SESSIONNAMELIST TT_SESSIONNAMELIST¶
Entity that assumes the IAM role when Kubernetes RBAC permissions are assigned to that role.
io_impersonateduser TYPE REF TO /AWS1/CL_GDYIMPERSONATEDUSER /AWS1/CL_GDYIMPERSONATEDUSER¶
Information about the impersonated user.
Queryable Attributes¶
Username¶
The username of the user who called the Kubernetes API.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_USERNAME() |
Getter for USERNAME, with configurable default |
ASK_USERNAME() |
Getter for USERNAME w/ exceptions if field has no value |
HAS_USERNAME() |
Determine if USERNAME has a value |
Uid¶
The user ID of the user who called the Kubernetes API.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_UID() |
Getter for UID, with configurable default |
ASK_UID() |
Getter for UID w/ exceptions if field has no value |
HAS_UID() |
Determine if UID has a value |
Groups¶
The groups that include the user who called the Kubernetes API.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_GROUPS() |
Getter for GROUPS, with configurable default |
ASK_GROUPS() |
Getter for GROUPS w/ exceptions if field has no value |
HAS_GROUPS() |
Determine if GROUPS has a value |
SessionName¶
Entity that assumes the IAM role when Kubernetes RBAC permissions are assigned to that role.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_SESSIONNAME() |
Getter for SESSIONNAME, with configurable default |
ASK_SESSIONNAME() |
Getter for SESSIONNAME w/ exceptions if field has no value |
HAS_SESSIONNAME() |
Determine if SESSIONNAME has a value |
ImpersonatedUser¶
Information about the impersonated user.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_IMPERSONATEDUSER() |
Getter for IMPERSONATEDUSER |