migrate legacy API

Signed-off-by: hongming <talonwan@yunify.com>

pkg/client/clientset/versioned/typed/iam/v1alpha2/fake/fake_globalrole.go

@@ -0,0 +1,120 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package fake
+
+import (
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	labels "k8s.io/apimachinery/pkg/labels"
+	schema "k8s.io/apimachinery/pkg/runtime/schema"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	testing "k8s.io/client-go/testing"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+)
+
+// FakeGlobalRoles implements GlobalRoleInterface
+type FakeGlobalRoles struct {
+	Fake *FakeIamV1alpha2
+}
+
+var globalrolesResource = schema.GroupVersionResource{Group: "iam.kubesphere.io", Version: "v1alpha2", Resource: "globalroles"}
+
+var globalrolesKind = schema.GroupVersionKind{Group: "iam.kubesphere.io", Version: "v1alpha2", Kind: "GlobalRole"}
+
+// Get takes name of the globalRole, and returns the corresponding globalRole object, and an error if there is any.
+func (c *FakeGlobalRoles) Get(name string, options v1.GetOptions) (result *v1alpha2.GlobalRole, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootGetAction(globalrolesResource, name), &v1alpha2.GlobalRole{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.GlobalRole), err
+}
+
+// List takes label and field selectors, and returns the list of GlobalRoles that match those selectors.
+func (c *FakeGlobalRoles) List(opts v1.ListOptions) (result *v1alpha2.GlobalRoleList, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootListAction(globalrolesResource, globalrolesKind, opts), &v1alpha2.GlobalRoleList{})
+	if obj == nil {
+		return nil, err
+	}
+
+	label, _, _ := testing.ExtractFromListOptions(opts)
+	if label == nil {
+		label = labels.Everything()
+	}
+	list := &v1alpha2.GlobalRoleList{ListMeta: obj.(*v1alpha2.GlobalRoleList).ListMeta}
+	for _, item := range obj.(*v1alpha2.GlobalRoleList).Items {
+		if label.Matches(labels.Set(item.Labels)) {
+			list.Items = append(list.Items, item)
+		}
+	}
+	return list, err
+}
+
+// Watch returns a watch.Interface that watches the requested globalRoles.
+func (c *FakeGlobalRoles) Watch(opts v1.ListOptions) (watch.Interface, error) {
+	return c.Fake.
+		InvokesWatch(testing.NewRootWatchAction(globalrolesResource, opts))
+}
+
+// Create takes the representation of a globalRole and creates it.  Returns the server's representation of the globalRole, and an error, if there is any.
+func (c *FakeGlobalRoles) Create(globalRole *v1alpha2.GlobalRole) (result *v1alpha2.GlobalRole, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootCreateAction(globalrolesResource, globalRole), &v1alpha2.GlobalRole{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.GlobalRole), err
+}
+
+// Update takes the representation of a globalRole and updates it. Returns the server's representation of the globalRole, and an error, if there is any.
+func (c *FakeGlobalRoles) Update(globalRole *v1alpha2.GlobalRole) (result *v1alpha2.GlobalRole, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootUpdateAction(globalrolesResource, globalRole), &v1alpha2.GlobalRole{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.GlobalRole), err
+}
+
+// Delete takes name of the globalRole and deletes it. Returns an error if one occurs.
+func (c *FakeGlobalRoles) Delete(name string, options *v1.DeleteOptions) error {
+	_, err := c.Fake.
+		Invokes(testing.NewRootDeleteAction(globalrolesResource, name), &v1alpha2.GlobalRole{})
+	return err
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *FakeGlobalRoles) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
+	action := testing.NewRootDeleteCollectionAction(globalrolesResource, listOptions)
+
+	_, err := c.Fake.Invokes(action, &v1alpha2.GlobalRoleList{})
+	return err
+}
+
+// Patch applies the patch and returns the patched globalRole.
+func (c *FakeGlobalRoles) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.GlobalRole, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootPatchSubresourceAction(globalrolesResource, name, pt, data, subresources...), &v1alpha2.GlobalRole{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.GlobalRole), err
+}

pkg/client/clientset/versioned/typed/iam/v1alpha2/fake/fake_globalrolebinding.go

@@ -0,0 +1,120 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package fake
+
+import (
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	labels "k8s.io/apimachinery/pkg/labels"
+	schema "k8s.io/apimachinery/pkg/runtime/schema"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	testing "k8s.io/client-go/testing"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+)
+
+// FakeGlobalRoleBindings implements GlobalRoleBindingInterface
+type FakeGlobalRoleBindings struct {
+	Fake *FakeIamV1alpha2
+}
+
+var globalrolebindingsResource = schema.GroupVersionResource{Group: "iam.kubesphere.io", Version: "v1alpha2", Resource: "globalrolebindings"}
+
+var globalrolebindingsKind = schema.GroupVersionKind{Group: "iam.kubesphere.io", Version: "v1alpha2", Kind: "GlobalRoleBinding"}
+
+// Get takes name of the globalRoleBinding, and returns the corresponding globalRoleBinding object, and an error if there is any.
+func (c *FakeGlobalRoleBindings) Get(name string, options v1.GetOptions) (result *v1alpha2.GlobalRoleBinding, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootGetAction(globalrolebindingsResource, name), &v1alpha2.GlobalRoleBinding{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.GlobalRoleBinding), err
+}
+
+// List takes label and field selectors, and returns the list of GlobalRoleBindings that match those selectors.
+func (c *FakeGlobalRoleBindings) List(opts v1.ListOptions) (result *v1alpha2.GlobalRoleBindingList, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootListAction(globalrolebindingsResource, globalrolebindingsKind, opts), &v1alpha2.GlobalRoleBindingList{})
+	if obj == nil {
+		return nil, err
+	}
+
+	label, _, _ := testing.ExtractFromListOptions(opts)
+	if label == nil {
+		label = labels.Everything()
+	}
+	list := &v1alpha2.GlobalRoleBindingList{ListMeta: obj.(*v1alpha2.GlobalRoleBindingList).ListMeta}
+	for _, item := range obj.(*v1alpha2.GlobalRoleBindingList).Items {
+		if label.Matches(labels.Set(item.Labels)) {
+			list.Items = append(list.Items, item)
+		}
+	}
+	return list, err
+}
+
+// Watch returns a watch.Interface that watches the requested globalRoleBindings.
+func (c *FakeGlobalRoleBindings) Watch(opts v1.ListOptions) (watch.Interface, error) {
+	return c.Fake.
+		InvokesWatch(testing.NewRootWatchAction(globalrolebindingsResource, opts))
+}
+
+// Create takes the representation of a globalRoleBinding and creates it.  Returns the server's representation of the globalRoleBinding, and an error, if there is any.
+func (c *FakeGlobalRoleBindings) Create(globalRoleBinding *v1alpha2.GlobalRoleBinding) (result *v1alpha2.GlobalRoleBinding, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootCreateAction(globalrolebindingsResource, globalRoleBinding), &v1alpha2.GlobalRoleBinding{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.GlobalRoleBinding), err
+}
+
+// Update takes the representation of a globalRoleBinding and updates it. Returns the server's representation of the globalRoleBinding, and an error, if there is any.
+func (c *FakeGlobalRoleBindings) Update(globalRoleBinding *v1alpha2.GlobalRoleBinding) (result *v1alpha2.GlobalRoleBinding, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootUpdateAction(globalrolebindingsResource, globalRoleBinding), &v1alpha2.GlobalRoleBinding{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.GlobalRoleBinding), err
+}
+
+// Delete takes name of the globalRoleBinding and deletes it. Returns an error if one occurs.
+func (c *FakeGlobalRoleBindings) Delete(name string, options *v1.DeleteOptions) error {
+	_, err := c.Fake.
+		Invokes(testing.NewRootDeleteAction(globalrolebindingsResource, name), &v1alpha2.GlobalRoleBinding{})
+	return err
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *FakeGlobalRoleBindings) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
+	action := testing.NewRootDeleteCollectionAction(globalrolebindingsResource, listOptions)
+
+	_, err := c.Fake.Invokes(action, &v1alpha2.GlobalRoleBindingList{})
+	return err
+}
+
+// Patch applies the patch and returns the patched globalRoleBinding.
+func (c *FakeGlobalRoleBindings) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.GlobalRoleBinding, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootPatchSubresourceAction(globalrolebindingsResource, name, pt, data, subresources...), &v1alpha2.GlobalRoleBinding{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.GlobalRoleBinding), err
+}

pkg/client/clientset/versioned/typed/iam/v1alpha2/fake/fake_iam_client.go

@@ -28,22 +28,26 @@ type FakeIamV1alpha2 struct {
 	*testing.Fake
 }
 
-func (c *FakeIamV1alpha2) PolicyRules() v1alpha2.PolicyRuleInterface {
-	return &FakePolicyRules{c}
+func (c *FakeIamV1alpha2) GlobalRoles() v1alpha2.GlobalRoleInterface {
+	return &FakeGlobalRoles{c}
 }
 
-func (c *FakeIamV1alpha2) Roles() v1alpha2.RoleInterface {
-	return &FakeRoles{c}
-}
-
-func (c *FakeIamV1alpha2) RoleBindings() v1alpha2.RoleBindingInterface {
-	return &FakeRoleBindings{c}
+func (c *FakeIamV1alpha2) GlobalRoleBindings() v1alpha2.GlobalRoleBindingInterface {
+	return &FakeGlobalRoleBindings{c}
 }
 
 func (c *FakeIamV1alpha2) Users() v1alpha2.UserInterface {
 	return &FakeUsers{c}
 }
 
+func (c *FakeIamV1alpha2) WorkspaceRoles() v1alpha2.WorkspaceRoleInterface {
+	return &FakeWorkspaceRoles{c}
+}
+
+func (c *FakeIamV1alpha2) WorkspaceRoleBindings() v1alpha2.WorkspaceRoleBindingInterface {
+	return &FakeWorkspaceRoleBindings{c}
+}
+
 // RESTClient returns a RESTClient that is used to communicate
 // with API server by this client implementation.
 func (c *FakeIamV1alpha2) RESTClient() rest.Interface {

pkg/client/clientset/versioned/typed/iam/v1alpha2/fake/fake_policyrule.go

@@ -1,120 +0,0 @@
-/*
-Copyright 2019 The KubeSphere authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-package fake
-
-import (
-	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	labels "k8s.io/apimachinery/pkg/labels"
-	schema "k8s.io/apimachinery/pkg/runtime/schema"
-	types "k8s.io/apimachinery/pkg/types"
-	watch "k8s.io/apimachinery/pkg/watch"
-	testing "k8s.io/client-go/testing"
-	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
-)
-
-// FakePolicyRules implements PolicyRuleInterface
-type FakePolicyRules struct {
-	Fake *FakeIamV1alpha2
-}
-
-var policyrulesResource = schema.GroupVersionResource{Group: "iam.kubesphere.io", Version: "v1alpha2", Resource: "policyrules"}
-
-var policyrulesKind = schema.GroupVersionKind{Group: "iam.kubesphere.io", Version: "v1alpha2", Kind: "PolicyRule"}
-
-// Get takes name of the policyRule, and returns the corresponding policyRule object, and an error if there is any.
-func (c *FakePolicyRules) Get(name string, options v1.GetOptions) (result *v1alpha2.PolicyRule, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootGetAction(policyrulesResource, name), &v1alpha2.PolicyRule{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.PolicyRule), err
-}
-
-// List takes label and field selectors, and returns the list of PolicyRules that match those selectors.
-func (c *FakePolicyRules) List(opts v1.ListOptions) (result *v1alpha2.PolicyRuleList, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootListAction(policyrulesResource, policyrulesKind, opts), &v1alpha2.PolicyRuleList{})
-	if obj == nil {
-		return nil, err
-	}
-
-	label, _, _ := testing.ExtractFromListOptions(opts)
-	if label == nil {
-		label = labels.Everything()
-	}
-	list := &v1alpha2.PolicyRuleList{ListMeta: obj.(*v1alpha2.PolicyRuleList).ListMeta}
-	for _, item := range obj.(*v1alpha2.PolicyRuleList).Items {
-		if label.Matches(labels.Set(item.Labels)) {
-			list.Items = append(list.Items, item)
-		}
-	}
-	return list, err
-}
-
-// Watch returns a watch.Interface that watches the requested policyRules.
-func (c *FakePolicyRules) Watch(opts v1.ListOptions) (watch.Interface, error) {
-	return c.Fake.
-		InvokesWatch(testing.NewRootWatchAction(policyrulesResource, opts))
-}
-
-// Create takes the representation of a policyRule and creates it.  Returns the server's representation of the policyRule, and an error, if there is any.
-func (c *FakePolicyRules) Create(policyRule *v1alpha2.PolicyRule) (result *v1alpha2.PolicyRule, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootCreateAction(policyrulesResource, policyRule), &v1alpha2.PolicyRule{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.PolicyRule), err
-}
-
-// Update takes the representation of a policyRule and updates it. Returns the server's representation of the policyRule, and an error, if there is any.
-func (c *FakePolicyRules) Update(policyRule *v1alpha2.PolicyRule) (result *v1alpha2.PolicyRule, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootUpdateAction(policyrulesResource, policyRule), &v1alpha2.PolicyRule{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.PolicyRule), err
-}
-
-// Delete takes name of the policyRule and deletes it. Returns an error if one occurs.
-func (c *FakePolicyRules) Delete(name string, options *v1.DeleteOptions) error {
-	_, err := c.Fake.
-		Invokes(testing.NewRootDeleteAction(policyrulesResource, name), &v1alpha2.PolicyRule{})
-	return err
-}
-
-// DeleteCollection deletes a collection of objects.
-func (c *FakePolicyRules) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
-	action := testing.NewRootDeleteCollectionAction(policyrulesResource, listOptions)
-
-	_, err := c.Fake.Invokes(action, &v1alpha2.PolicyRuleList{})
-	return err
-}
-
-// Patch applies the patch and returns the patched policyRule.
-func (c *FakePolicyRules) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.PolicyRule, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootPatchSubresourceAction(policyrulesResource, name, pt, data, subresources...), &v1alpha2.PolicyRule{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.PolicyRule), err
-}

pkg/client/clientset/versioned/typed/iam/v1alpha2/fake/fake_role.go

@@ -1,120 +0,0 @@
-/*
-Copyright 2019 The KubeSphere authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-package fake
-
-import (
-	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	labels "k8s.io/apimachinery/pkg/labels"
-	schema "k8s.io/apimachinery/pkg/runtime/schema"
-	types "k8s.io/apimachinery/pkg/types"
-	watch "k8s.io/apimachinery/pkg/watch"
-	testing "k8s.io/client-go/testing"
-	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
-)
-
-// FakeRoles implements RoleInterface
-type FakeRoles struct {
-	Fake *FakeIamV1alpha2
-}
-
-var rolesResource = schema.GroupVersionResource{Group: "iam.kubesphere.io", Version: "v1alpha2", Resource: "roles"}
-
-var rolesKind = schema.GroupVersionKind{Group: "iam.kubesphere.io", Version: "v1alpha2", Kind: "Role"}
-
-// Get takes name of the role, and returns the corresponding role object, and an error if there is any.
-func (c *FakeRoles) Get(name string, options v1.GetOptions) (result *v1alpha2.Role, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootGetAction(rolesResource, name), &v1alpha2.Role{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.Role), err
-}
-
-// List takes label and field selectors, and returns the list of Roles that match those selectors.
-func (c *FakeRoles) List(opts v1.ListOptions) (result *v1alpha2.RoleList, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootListAction(rolesResource, rolesKind, opts), &v1alpha2.RoleList{})
-	if obj == nil {
-		return nil, err
-	}
-
-	label, _, _ := testing.ExtractFromListOptions(opts)
-	if label == nil {
-		label = labels.Everything()
-	}
-	list := &v1alpha2.RoleList{ListMeta: obj.(*v1alpha2.RoleList).ListMeta}
-	for _, item := range obj.(*v1alpha2.RoleList).Items {
-		if label.Matches(labels.Set(item.Labels)) {
-			list.Items = append(list.Items, item)
-		}
-	}
-	return list, err
-}
-
-// Watch returns a watch.Interface that watches the requested roles.
-func (c *FakeRoles) Watch(opts v1.ListOptions) (watch.Interface, error) {
-	return c.Fake.
-		InvokesWatch(testing.NewRootWatchAction(rolesResource, opts))
-}
-
-// Create takes the representation of a role and creates it.  Returns the server's representation of the role, and an error, if there is any.
-func (c *FakeRoles) Create(role *v1alpha2.Role) (result *v1alpha2.Role, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootCreateAction(rolesResource, role), &v1alpha2.Role{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.Role), err
-}
-
-// Update takes the representation of a role and updates it. Returns the server's representation of the role, and an error, if there is any.
-func (c *FakeRoles) Update(role *v1alpha2.Role) (result *v1alpha2.Role, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootUpdateAction(rolesResource, role), &v1alpha2.Role{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.Role), err
-}
-
-// Delete takes name of the role and deletes it. Returns an error if one occurs.
-func (c *FakeRoles) Delete(name string, options *v1.DeleteOptions) error {
-	_, err := c.Fake.
-		Invokes(testing.NewRootDeleteAction(rolesResource, name), &v1alpha2.Role{})
-	return err
-}
-
-// DeleteCollection deletes a collection of objects.
-func (c *FakeRoles) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
-	action := testing.NewRootDeleteCollectionAction(rolesResource, listOptions)
-
-	_, err := c.Fake.Invokes(action, &v1alpha2.RoleList{})
-	return err
-}
-
-// Patch applies the patch and returns the patched role.
-func (c *FakeRoles) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.Role, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootPatchSubresourceAction(rolesResource, name, pt, data, subresources...), &v1alpha2.Role{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.Role), err
-}

pkg/client/clientset/versioned/typed/iam/v1alpha2/fake/fake_rolebinding.go

@@ -1,120 +0,0 @@
-/*
-Copyright 2019 The KubeSphere authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-package fake
-
-import (
-	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	labels "k8s.io/apimachinery/pkg/labels"
-	schema "k8s.io/apimachinery/pkg/runtime/schema"
-	types "k8s.io/apimachinery/pkg/types"
-	watch "k8s.io/apimachinery/pkg/watch"
-	testing "k8s.io/client-go/testing"
-	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
-)
-
-// FakeRoleBindings implements RoleBindingInterface
-type FakeRoleBindings struct {
-	Fake *FakeIamV1alpha2
-}
-
-var rolebindingsResource = schema.GroupVersionResource{Group: "iam.kubesphere.io", Version: "v1alpha2", Resource: "rolebindings"}
-
-var rolebindingsKind = schema.GroupVersionKind{Group: "iam.kubesphere.io", Version: "v1alpha2", Kind: "RoleBinding"}
-
-// Get takes name of the roleBinding, and returns the corresponding roleBinding object, and an error if there is any.
-func (c *FakeRoleBindings) Get(name string, options v1.GetOptions) (result *v1alpha2.RoleBinding, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootGetAction(rolebindingsResource, name), &v1alpha2.RoleBinding{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.RoleBinding), err
-}
-
-// List takes label and field selectors, and returns the list of RoleBindings that match those selectors.
-func (c *FakeRoleBindings) List(opts v1.ListOptions) (result *v1alpha2.RoleBindingList, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootListAction(rolebindingsResource, rolebindingsKind, opts), &v1alpha2.RoleBindingList{})
-	if obj == nil {
-		return nil, err
-	}
-
-	label, _, _ := testing.ExtractFromListOptions(opts)
-	if label == nil {
-		label = labels.Everything()
-	}
-	list := &v1alpha2.RoleBindingList{ListMeta: obj.(*v1alpha2.RoleBindingList).ListMeta}
-	for _, item := range obj.(*v1alpha2.RoleBindingList).Items {
-		if label.Matches(labels.Set(item.Labels)) {
-			list.Items = append(list.Items, item)
-		}
-	}
-	return list, err
-}
-
-// Watch returns a watch.Interface that watches the requested roleBindings.
-func (c *FakeRoleBindings) Watch(opts v1.ListOptions) (watch.Interface, error) {
-	return c.Fake.
-		InvokesWatch(testing.NewRootWatchAction(rolebindingsResource, opts))
-}
-
-// Create takes the representation of a roleBinding and creates it.  Returns the server's representation of the roleBinding, and an error, if there is any.
-func (c *FakeRoleBindings) Create(roleBinding *v1alpha2.RoleBinding) (result *v1alpha2.RoleBinding, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootCreateAction(rolebindingsResource, roleBinding), &v1alpha2.RoleBinding{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.RoleBinding), err
-}
-
-// Update takes the representation of a roleBinding and updates it. Returns the server's representation of the roleBinding, and an error, if there is any.
-func (c *FakeRoleBindings) Update(roleBinding *v1alpha2.RoleBinding) (result *v1alpha2.RoleBinding, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootUpdateAction(rolebindingsResource, roleBinding), &v1alpha2.RoleBinding{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.RoleBinding), err
-}
-
-// Delete takes name of the roleBinding and deletes it. Returns an error if one occurs.
-func (c *FakeRoleBindings) Delete(name string, options *v1.DeleteOptions) error {
-	_, err := c.Fake.
-		Invokes(testing.NewRootDeleteAction(rolebindingsResource, name), &v1alpha2.RoleBinding{})
-	return err
-}
-
-// DeleteCollection deletes a collection of objects.
-func (c *FakeRoleBindings) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
-	action := testing.NewRootDeleteCollectionAction(rolebindingsResource, listOptions)
-
-	_, err := c.Fake.Invokes(action, &v1alpha2.RoleBindingList{})
-	return err
-}
-
-// Patch applies the patch and returns the patched roleBinding.
-func (c *FakeRoleBindings) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.RoleBinding, err error) {
-	obj, err := c.Fake.
-		Invokes(testing.NewRootPatchSubresourceAction(rolebindingsResource, name, pt, data, subresources...), &v1alpha2.RoleBinding{})
-	if obj == nil {
-		return nil, err
-	}
-	return obj.(*v1alpha2.RoleBinding), err
-}

pkg/client/clientset/versioned/typed/iam/v1alpha2/fake/fake_workspacerole.go

@@ -0,0 +1,120 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package fake
+
+import (
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	labels "k8s.io/apimachinery/pkg/labels"
+	schema "k8s.io/apimachinery/pkg/runtime/schema"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	testing "k8s.io/client-go/testing"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+)
+
+// FakeWorkspaceRoles implements WorkspaceRoleInterface
+type FakeWorkspaceRoles struct {
+	Fake *FakeIamV1alpha2
+}
+
+var workspacerolesResource = schema.GroupVersionResource{Group: "iam.kubesphere.io", Version: "v1alpha2", Resource: "workspaceroles"}
+
+var workspacerolesKind = schema.GroupVersionKind{Group: "iam.kubesphere.io", Version: "v1alpha2", Kind: "WorkspaceRole"}
+
+// Get takes name of the workspaceRole, and returns the corresponding workspaceRole object, and an error if there is any.
+func (c *FakeWorkspaceRoles) Get(name string, options v1.GetOptions) (result *v1alpha2.WorkspaceRole, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootGetAction(workspacerolesResource, name), &v1alpha2.WorkspaceRole{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.WorkspaceRole), err
+}
+
+// List takes label and field selectors, and returns the list of WorkspaceRoles that match those selectors.
+func (c *FakeWorkspaceRoles) List(opts v1.ListOptions) (result *v1alpha2.WorkspaceRoleList, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootListAction(workspacerolesResource, workspacerolesKind, opts), &v1alpha2.WorkspaceRoleList{})
+	if obj == nil {
+		return nil, err
+	}
+
+	label, _, _ := testing.ExtractFromListOptions(opts)
+	if label == nil {
+		label = labels.Everything()
+	}
+	list := &v1alpha2.WorkspaceRoleList{ListMeta: obj.(*v1alpha2.WorkspaceRoleList).ListMeta}
+	for _, item := range obj.(*v1alpha2.WorkspaceRoleList).Items {
+		if label.Matches(labels.Set(item.Labels)) {
+			list.Items = append(list.Items, item)
+		}
+	}
+	return list, err
+}
+
+// Watch returns a watch.Interface that watches the requested workspaceRoles.
+func (c *FakeWorkspaceRoles) Watch(opts v1.ListOptions) (watch.Interface, error) {
+	return c.Fake.
+		InvokesWatch(testing.NewRootWatchAction(workspacerolesResource, opts))
+}
+
+// Create takes the representation of a workspaceRole and creates it.  Returns the server's representation of the workspaceRole, and an error, if there is any.
+func (c *FakeWorkspaceRoles) Create(workspaceRole *v1alpha2.WorkspaceRole) (result *v1alpha2.WorkspaceRole, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootCreateAction(workspacerolesResource, workspaceRole), &v1alpha2.WorkspaceRole{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.WorkspaceRole), err
+}
+
+// Update takes the representation of a workspaceRole and updates it. Returns the server's representation of the workspaceRole, and an error, if there is any.
+func (c *FakeWorkspaceRoles) Update(workspaceRole *v1alpha2.WorkspaceRole) (result *v1alpha2.WorkspaceRole, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootUpdateAction(workspacerolesResource, workspaceRole), &v1alpha2.WorkspaceRole{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.WorkspaceRole), err
+}
+
+// Delete takes name of the workspaceRole and deletes it. Returns an error if one occurs.
+func (c *FakeWorkspaceRoles) Delete(name string, options *v1.DeleteOptions) error {
+	_, err := c.Fake.
+		Invokes(testing.NewRootDeleteAction(workspacerolesResource, name), &v1alpha2.WorkspaceRole{})
+	return err
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *FakeWorkspaceRoles) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
+	action := testing.NewRootDeleteCollectionAction(workspacerolesResource, listOptions)
+
+	_, err := c.Fake.Invokes(action, &v1alpha2.WorkspaceRoleList{})
+	return err
+}
+
+// Patch applies the patch and returns the patched workspaceRole.
+func (c *FakeWorkspaceRoles) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.WorkspaceRole, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootPatchSubresourceAction(workspacerolesResource, name, pt, data, subresources...), &v1alpha2.WorkspaceRole{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.WorkspaceRole), err
+}

pkg/client/clientset/versioned/typed/iam/v1alpha2/fake/fake_workspacerolebinding.go

@@ -0,0 +1,120 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package fake
+
+import (
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	labels "k8s.io/apimachinery/pkg/labels"
+	schema "k8s.io/apimachinery/pkg/runtime/schema"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	testing "k8s.io/client-go/testing"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+)
+
+// FakeWorkspaceRoleBindings implements WorkspaceRoleBindingInterface
+type FakeWorkspaceRoleBindings struct {
+	Fake *FakeIamV1alpha2
+}
+
+var workspacerolebindingsResource = schema.GroupVersionResource{Group: "iam.kubesphere.io", Version: "v1alpha2", Resource: "workspacerolebindings"}
+
+var workspacerolebindingsKind = schema.GroupVersionKind{Group: "iam.kubesphere.io", Version: "v1alpha2", Kind: "WorkspaceRoleBinding"}
+
+// Get takes name of the workspaceRoleBinding, and returns the corresponding workspaceRoleBinding object, and an error if there is any.
+func (c *FakeWorkspaceRoleBindings) Get(name string, options v1.GetOptions) (result *v1alpha2.WorkspaceRoleBinding, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootGetAction(workspacerolebindingsResource, name), &v1alpha2.WorkspaceRoleBinding{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.WorkspaceRoleBinding), err
+}
+
+// List takes label and field selectors, and returns the list of WorkspaceRoleBindings that match those selectors.
+func (c *FakeWorkspaceRoleBindings) List(opts v1.ListOptions) (result *v1alpha2.WorkspaceRoleBindingList, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootListAction(workspacerolebindingsResource, workspacerolebindingsKind, opts), &v1alpha2.WorkspaceRoleBindingList{})
+	if obj == nil {
+		return nil, err
+	}
+
+	label, _, _ := testing.ExtractFromListOptions(opts)
+	if label == nil {
+		label = labels.Everything()
+	}
+	list := &v1alpha2.WorkspaceRoleBindingList{ListMeta: obj.(*v1alpha2.WorkspaceRoleBindingList).ListMeta}
+	for _, item := range obj.(*v1alpha2.WorkspaceRoleBindingList).Items {
+		if label.Matches(labels.Set(item.Labels)) {
+			list.Items = append(list.Items, item)
+		}
+	}
+	return list, err
+}
+
+// Watch returns a watch.Interface that watches the requested workspaceRoleBindings.
+func (c *FakeWorkspaceRoleBindings) Watch(opts v1.ListOptions) (watch.Interface, error) {
+	return c.Fake.
+		InvokesWatch(testing.NewRootWatchAction(workspacerolebindingsResource, opts))
+}
+
+// Create takes the representation of a workspaceRoleBinding and creates it.  Returns the server's representation of the workspaceRoleBinding, and an error, if there is any.
+func (c *FakeWorkspaceRoleBindings) Create(workspaceRoleBinding *v1alpha2.WorkspaceRoleBinding) (result *v1alpha2.WorkspaceRoleBinding, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootCreateAction(workspacerolebindingsResource, workspaceRoleBinding), &v1alpha2.WorkspaceRoleBinding{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.WorkspaceRoleBinding), err
+}
+
+// Update takes the representation of a workspaceRoleBinding and updates it. Returns the server's representation of the workspaceRoleBinding, and an error, if there is any.
+func (c *FakeWorkspaceRoleBindings) Update(workspaceRoleBinding *v1alpha2.WorkspaceRoleBinding) (result *v1alpha2.WorkspaceRoleBinding, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootUpdateAction(workspacerolebindingsResource, workspaceRoleBinding), &v1alpha2.WorkspaceRoleBinding{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.WorkspaceRoleBinding), err
+}
+
+// Delete takes name of the workspaceRoleBinding and deletes it. Returns an error if one occurs.
+func (c *FakeWorkspaceRoleBindings) Delete(name string, options *v1.DeleteOptions) error {
+	_, err := c.Fake.
+		Invokes(testing.NewRootDeleteAction(workspacerolebindingsResource, name), &v1alpha2.WorkspaceRoleBinding{})
+	return err
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *FakeWorkspaceRoleBindings) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
+	action := testing.NewRootDeleteCollectionAction(workspacerolebindingsResource, listOptions)
+
+	_, err := c.Fake.Invokes(action, &v1alpha2.WorkspaceRoleBindingList{})
+	return err
+}
+
+// Patch applies the patch and returns the patched workspaceRoleBinding.
+func (c *FakeWorkspaceRoleBindings) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.WorkspaceRoleBinding, err error) {
+	obj, err := c.Fake.
+		Invokes(testing.NewRootPatchSubresourceAction(workspacerolebindingsResource, name, pt, data, subresources...), &v1alpha2.WorkspaceRoleBinding{})
+	if obj == nil {
+		return nil, err
+	}
+	return obj.(*v1alpha2.WorkspaceRoleBinding), err
+}

pkg/client/clientset/versioned/typed/iam/v1alpha2/generated_expansion.go

@@ -18,10 +18,12 @@ limitations under the License.
 
 package v1alpha2
 
-type PolicyRuleExpansion interface{}
+type GlobalRoleExpansion interface{}
 
-type RoleExpansion interface{}
-
-type RoleBindingExpansion interface{}
+type GlobalRoleBindingExpansion interface{}
 
 type UserExpansion interface{}
+
+type WorkspaceRoleExpansion interface{}
+
+type WorkspaceRoleBindingExpansion interface{}

pkg/client/clientset/versioned/typed/iam/v1alpha2/globalrole.go

@@ -29,42 +29,42 @@ import (
 	scheme "kubesphere.io/kubesphere/pkg/client/clientset/versioned/scheme"
 )
 
-// PolicyRulesGetter has a method to return a PolicyRuleInterface.
+// GlobalRolesGetter has a method to return a GlobalRoleInterface.
 // A group's client should implement this interface.
-type PolicyRulesGetter interface {
-	PolicyRules() PolicyRuleInterface
+type GlobalRolesGetter interface {
+	GlobalRoles() GlobalRoleInterface
 }
 
-// PolicyRuleInterface has methods to work with PolicyRule resources.
-type PolicyRuleInterface interface {
-	Create(*v1alpha2.PolicyRule) (*v1alpha2.PolicyRule, error)
-	Update(*v1alpha2.PolicyRule) (*v1alpha2.PolicyRule, error)
+// GlobalRoleInterface has methods to work with GlobalRole resources.
+type GlobalRoleInterface interface {
+	Create(*v1alpha2.GlobalRole) (*v1alpha2.GlobalRole, error)
+	Update(*v1alpha2.GlobalRole) (*v1alpha2.GlobalRole, error)
 	Delete(name string, options *v1.DeleteOptions) error
 	DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error
-	Get(name string, options v1.GetOptions) (*v1alpha2.PolicyRule, error)
-	List(opts v1.ListOptions) (*v1alpha2.PolicyRuleList, error)
+	Get(name string, options v1.GetOptions) (*v1alpha2.GlobalRole, error)
+	List(opts v1.ListOptions) (*v1alpha2.GlobalRoleList, error)
 	Watch(opts v1.ListOptions) (watch.Interface, error)
-	Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.PolicyRule, err error)
-	PolicyRuleExpansion
+	Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.GlobalRole, err error)
+	GlobalRoleExpansion
 }
 
-// policyRules implements PolicyRuleInterface
-type policyRules struct {
+// globalRoles implements GlobalRoleInterface
+type globalRoles struct {
 	client rest.Interface
 }
 
-// newPolicyRules returns a PolicyRules
-func newPolicyRules(c *IamV1alpha2Client) *policyRules {
-	return &policyRules{
+// newGlobalRoles returns a GlobalRoles
+func newGlobalRoles(c *IamV1alpha2Client) *globalRoles {
+	return &globalRoles{
 		client: c.RESTClient(),
 	}
 }
 
-// Get takes name of the policyRule, and returns the corresponding policyRule object, and an error if there is any.
-func (c *policyRules) Get(name string, options v1.GetOptions) (result *v1alpha2.PolicyRule, err error) {
-	result = &v1alpha2.PolicyRule{}
+// Get takes name of the globalRole, and returns the corresponding globalRole object, and an error if there is any.
+func (c *globalRoles) Get(name string, options v1.GetOptions) (result *v1alpha2.GlobalRole, err error) {
+	result = &v1alpha2.GlobalRole{}
 	err = c.client.Get().
-		Resource("policyrules").
+		Resource("globalroles").
 		Name(name).
 		VersionedParams(&options, scheme.ParameterCodec).
 		Do().
@@ -72,15 +72,15 @@ func (c *policyRules) Get(name string, options v1.GetOptions) (result *v1alpha2.
 	return
 }
 
-// List takes label and field selectors, and returns the list of PolicyRules that match those selectors.
-func (c *policyRules) List(opts v1.ListOptions) (result *v1alpha2.PolicyRuleList, err error) {
+// List takes label and field selectors, and returns the list of GlobalRoles that match those selectors.
+func (c *globalRoles) List(opts v1.ListOptions) (result *v1alpha2.GlobalRoleList, err error) {
 	var timeout time.Duration
 	if opts.TimeoutSeconds != nil {
 		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
 	}
-	result = &v1alpha2.PolicyRuleList{}
+	result = &v1alpha2.GlobalRoleList{}
 	err = c.client.Get().
-		Resource("policyrules").
+		Resource("globalroles").
 		VersionedParams(&opts, scheme.ParameterCodec).
 		Timeout(timeout).
 		Do().
@@ -88,47 +88,47 @@ func (c *policyRules) List(opts v1.ListOptions) (result *v1alpha2.PolicyRuleList
 	return
 }
 
-// Watch returns a watch.Interface that watches the requested policyRules.
-func (c *policyRules) Watch(opts v1.ListOptions) (watch.Interface, error) {
+// Watch returns a watch.Interface that watches the requested globalRoles.
+func (c *globalRoles) Watch(opts v1.ListOptions) (watch.Interface, error) {
 	var timeout time.Duration
 	if opts.TimeoutSeconds != nil {
 		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
 	}
 	opts.Watch = true
 	return c.client.Get().
-		Resource("policyrules").
+		Resource("globalroles").
 		VersionedParams(&opts, scheme.ParameterCodec).
 		Timeout(timeout).
 		Watch()
 }
 
-// Create takes the representation of a policyRule and creates it.  Returns the server's representation of the policyRule, and an error, if there is any.
-func (c *policyRules) Create(policyRule *v1alpha2.PolicyRule) (result *v1alpha2.PolicyRule, err error) {
-	result = &v1alpha2.PolicyRule{}
+// Create takes the representation of a globalRole and creates it.  Returns the server's representation of the globalRole, and an error, if there is any.
+func (c *globalRoles) Create(globalRole *v1alpha2.GlobalRole) (result *v1alpha2.GlobalRole, err error) {
+	result = &v1alpha2.GlobalRole{}
 	err = c.client.Post().
-		Resource("policyrules").
-		Body(policyRule).
+		Resource("globalroles").
+		Body(globalRole).
 		Do().
 		Into(result)
 	return
 }
 
-// Update takes the representation of a policyRule and updates it. Returns the server's representation of the policyRule, and an error, if there is any.
-func (c *policyRules) Update(policyRule *v1alpha2.PolicyRule) (result *v1alpha2.PolicyRule, err error) {
-	result = &v1alpha2.PolicyRule{}
+// Update takes the representation of a globalRole and updates it. Returns the server's representation of the globalRole, and an error, if there is any.
+func (c *globalRoles) Update(globalRole *v1alpha2.GlobalRole) (result *v1alpha2.GlobalRole, err error) {
+	result = &v1alpha2.GlobalRole{}
 	err = c.client.Put().
-		Resource("policyrules").
-		Name(policyRule.Name).
-		Body(policyRule).
+		Resource("globalroles").
+		Name(globalRole.Name).
+		Body(globalRole).
 		Do().
 		Into(result)
 	return
 }
 
-// Delete takes name of the policyRule and deletes it. Returns an error if one occurs.
-func (c *policyRules) Delete(name string, options *v1.DeleteOptions) error {
+// Delete takes name of the globalRole and deletes it. Returns an error if one occurs.
+func (c *globalRoles) Delete(name string, options *v1.DeleteOptions) error {
 	return c.client.Delete().
-		Resource("policyrules").
+		Resource("globalroles").
 		Name(name).
 		Body(options).
 		Do().
@@ -136,13 +136,13 @@ func (c *policyRules) Delete(name string, options *v1.DeleteOptions) error {
 }
 
 // DeleteCollection deletes a collection of objects.
-func (c *policyRules) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
+func (c *globalRoles) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
 	var timeout time.Duration
 	if listOptions.TimeoutSeconds != nil {
 		timeout = time.Duration(*listOptions.TimeoutSeconds) * time.Second
 	}
 	return c.client.Delete().
-		Resource("policyrules").
+		Resource("globalroles").
 		VersionedParams(&listOptions, scheme.ParameterCodec).
 		Timeout(timeout).
 		Body(options).
@@ -150,11 +150,11 @@ func (c *policyRules) DeleteCollection(options *v1.DeleteOptions, listOptions v1
 		Error()
 }
 
-// Patch applies the patch and returns the patched policyRule.
-func (c *policyRules) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.PolicyRule, err error) {
-	result = &v1alpha2.PolicyRule{}
+// Patch applies the patch and returns the patched globalRole.
+func (c *globalRoles) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.GlobalRole, err error) {
+	result = &v1alpha2.GlobalRole{}
 	err = c.client.Patch(pt).
-		Resource("policyrules").
+		Resource("globalroles").
 		SubResource(subresources...).
 		Name(name).
 		Body(data).

pkg/client/clientset/versioned/typed/iam/v1alpha2/globalrolebinding.go

@@ -0,0 +1,164 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package v1alpha2
+
+import (
+	"time"
+
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	rest "k8s.io/client-go/rest"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+	scheme "kubesphere.io/kubesphere/pkg/client/clientset/versioned/scheme"
+)
+
+// GlobalRoleBindingsGetter has a method to return a GlobalRoleBindingInterface.
+// A group's client should implement this interface.
+type GlobalRoleBindingsGetter interface {
+	GlobalRoleBindings() GlobalRoleBindingInterface
+}
+
+// GlobalRoleBindingInterface has methods to work with GlobalRoleBinding resources.
+type GlobalRoleBindingInterface interface {
+	Create(*v1alpha2.GlobalRoleBinding) (*v1alpha2.GlobalRoleBinding, error)
+	Update(*v1alpha2.GlobalRoleBinding) (*v1alpha2.GlobalRoleBinding, error)
+	Delete(name string, options *v1.DeleteOptions) error
+	DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error
+	Get(name string, options v1.GetOptions) (*v1alpha2.GlobalRoleBinding, error)
+	List(opts v1.ListOptions) (*v1alpha2.GlobalRoleBindingList, error)
+	Watch(opts v1.ListOptions) (watch.Interface, error)
+	Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.GlobalRoleBinding, err error)
+	GlobalRoleBindingExpansion
+}
+
+// globalRoleBindings implements GlobalRoleBindingInterface
+type globalRoleBindings struct {
+	client rest.Interface
+}
+
+// newGlobalRoleBindings returns a GlobalRoleBindings
+func newGlobalRoleBindings(c *IamV1alpha2Client) *globalRoleBindings {
+	return &globalRoleBindings{
+		client: c.RESTClient(),
+	}
+}
+
+// Get takes name of the globalRoleBinding, and returns the corresponding globalRoleBinding object, and an error if there is any.
+func (c *globalRoleBindings) Get(name string, options v1.GetOptions) (result *v1alpha2.GlobalRoleBinding, err error) {
+	result = &v1alpha2.GlobalRoleBinding{}
+	err = c.client.Get().
+		Resource("globalrolebindings").
+		Name(name).
+		VersionedParams(&options, scheme.ParameterCodec).
+		Do().
+		Into(result)
+	return
+}
+
+// List takes label and field selectors, and returns the list of GlobalRoleBindings that match those selectors.
+func (c *globalRoleBindings) List(opts v1.ListOptions) (result *v1alpha2.GlobalRoleBindingList, err error) {
+	var timeout time.Duration
+	if opts.TimeoutSeconds != nil {
+		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
+	}
+	result = &v1alpha2.GlobalRoleBindingList{}
+	err = c.client.Get().
+		Resource("globalrolebindings").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Do().
+		Into(result)
+	return
+}
+
+// Watch returns a watch.Interface that watches the requested globalRoleBindings.
+func (c *globalRoleBindings) Watch(opts v1.ListOptions) (watch.Interface, error) {
+	var timeout time.Duration
+	if opts.TimeoutSeconds != nil {
+		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
+	}
+	opts.Watch = true
+	return c.client.Get().
+		Resource("globalrolebindings").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Watch()
+}
+
+// Create takes the representation of a globalRoleBinding and creates it.  Returns the server's representation of the globalRoleBinding, and an error, if there is any.
+func (c *globalRoleBindings) Create(globalRoleBinding *v1alpha2.GlobalRoleBinding) (result *v1alpha2.GlobalRoleBinding, err error) {
+	result = &v1alpha2.GlobalRoleBinding{}
+	err = c.client.Post().
+		Resource("globalrolebindings").
+		Body(globalRoleBinding).
+		Do().
+		Into(result)
+	return
+}
+
+// Update takes the representation of a globalRoleBinding and updates it. Returns the server's representation of the globalRoleBinding, and an error, if there is any.
+func (c *globalRoleBindings) Update(globalRoleBinding *v1alpha2.GlobalRoleBinding) (result *v1alpha2.GlobalRoleBinding, err error) {
+	result = &v1alpha2.GlobalRoleBinding{}
+	err = c.client.Put().
+		Resource("globalrolebindings").
+		Name(globalRoleBinding.Name).
+		Body(globalRoleBinding).
+		Do().
+		Into(result)
+	return
+}
+
+// Delete takes name of the globalRoleBinding and deletes it. Returns an error if one occurs.
+func (c *globalRoleBindings) Delete(name string, options *v1.DeleteOptions) error {
+	return c.client.Delete().
+		Resource("globalrolebindings").
+		Name(name).
+		Body(options).
+		Do().
+		Error()
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *globalRoleBindings) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
+	var timeout time.Duration
+	if listOptions.TimeoutSeconds != nil {
+		timeout = time.Duration(*listOptions.TimeoutSeconds) * time.Second
+	}
+	return c.client.Delete().
+		Resource("globalrolebindings").
+		VersionedParams(&listOptions, scheme.ParameterCodec).
+		Timeout(timeout).
+		Body(options).
+		Do().
+		Error()
+}
+
+// Patch applies the patch and returns the patched globalRoleBinding.
+func (c *globalRoleBindings) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.GlobalRoleBinding, err error) {
+	result = &v1alpha2.GlobalRoleBinding{}
+	err = c.client.Patch(pt).
+		Resource("globalrolebindings").
+		SubResource(subresources...).
+		Name(name).
+		Body(data).
+		Do().
+		Into(result)
+	return
+}

pkg/client/clientset/versioned/typed/iam/v1alpha2/iam_client.go

@@ -26,10 +26,11 @@ import (
 
 type IamV1alpha2Interface interface {
 	RESTClient() rest.Interface
-	PolicyRulesGetter
-	RolesGetter
-	RoleBindingsGetter
+	GlobalRolesGetter
+	GlobalRoleBindingsGetter
 	UsersGetter
+	WorkspaceRolesGetter
+	WorkspaceRoleBindingsGetter
 }
 
 // IamV1alpha2Client is used to interact with features provided by the iam.kubesphere.io group.
@@ -37,22 +38,26 @@ type IamV1alpha2Client struct {
 	restClient rest.Interface
 }
 
-func (c *IamV1alpha2Client) PolicyRules() PolicyRuleInterface {
-	return newPolicyRules(c)
+func (c *IamV1alpha2Client) GlobalRoles() GlobalRoleInterface {
+	return newGlobalRoles(c)
 }
 
-func (c *IamV1alpha2Client) Roles() RoleInterface {
-	return newRoles(c)
-}
-
-func (c *IamV1alpha2Client) RoleBindings() RoleBindingInterface {
-	return newRoleBindings(c)
+func (c *IamV1alpha2Client) GlobalRoleBindings() GlobalRoleBindingInterface {
+	return newGlobalRoleBindings(c)
 }
 
 func (c *IamV1alpha2Client) Users() UserInterface {
 	return newUsers(c)
 }
 
+func (c *IamV1alpha2Client) WorkspaceRoles() WorkspaceRoleInterface {
+	return newWorkspaceRoles(c)
+}
+
+func (c *IamV1alpha2Client) WorkspaceRoleBindings() WorkspaceRoleBindingInterface {
+	return newWorkspaceRoleBindings(c)
+}
+
 // NewForConfig creates a new IamV1alpha2Client for the given config.
 func NewForConfig(c *rest.Config) (*IamV1alpha2Client, error) {
 	config := *c

pkg/client/clientset/versioned/typed/iam/v1alpha2/role.go

@@ -1,164 +0,0 @@
-/*
-Copyright 2019 The KubeSphere authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-package v1alpha2
-
-import (
-	"time"
-
-	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	types "k8s.io/apimachinery/pkg/types"
-	watch "k8s.io/apimachinery/pkg/watch"
-	rest "k8s.io/client-go/rest"
-	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
-	scheme "kubesphere.io/kubesphere/pkg/client/clientset/versioned/scheme"
-)
-
-// RolesGetter has a method to return a RoleInterface.
-// A group's client should implement this interface.
-type RolesGetter interface {
-	Roles() RoleInterface
-}
-
-// RoleInterface has methods to work with Role resources.
-type RoleInterface interface {
-	Create(*v1alpha2.Role) (*v1alpha2.Role, error)
-	Update(*v1alpha2.Role) (*v1alpha2.Role, error)
-	Delete(name string, options *v1.DeleteOptions) error
-	DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error
-	Get(name string, options v1.GetOptions) (*v1alpha2.Role, error)
-	List(opts v1.ListOptions) (*v1alpha2.RoleList, error)
-	Watch(opts v1.ListOptions) (watch.Interface, error)
-	Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.Role, err error)
-	RoleExpansion
-}
-
-// roles implements RoleInterface
-type roles struct {
-	client rest.Interface
-}
-
-// newRoles returns a Roles
-func newRoles(c *IamV1alpha2Client) *roles {
-	return &roles{
-		client: c.RESTClient(),
-	}
-}
-
-// Get takes name of the role, and returns the corresponding role object, and an error if there is any.
-func (c *roles) Get(name string, options v1.GetOptions) (result *v1alpha2.Role, err error) {
-	result = &v1alpha2.Role{}
-	err = c.client.Get().
-		Resource("roles").
-		Name(name).
-		VersionedParams(&options, scheme.ParameterCodec).
-		Do().
-		Into(result)
-	return
-}
-
-// List takes label and field selectors, and returns the list of Roles that match those selectors.
-func (c *roles) List(opts v1.ListOptions) (result *v1alpha2.RoleList, err error) {
-	var timeout time.Duration
-	if opts.TimeoutSeconds != nil {
-		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
-	}
-	result = &v1alpha2.RoleList{}
-	err = c.client.Get().
-		Resource("roles").
-		VersionedParams(&opts, scheme.ParameterCodec).
-		Timeout(timeout).
-		Do().
-		Into(result)
-	return
-}
-
-// Watch returns a watch.Interface that watches the requested roles.
-func (c *roles) Watch(opts v1.ListOptions) (watch.Interface, error) {
-	var timeout time.Duration
-	if opts.TimeoutSeconds != nil {
-		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
-	}
-	opts.Watch = true
-	return c.client.Get().
-		Resource("roles").
-		VersionedParams(&opts, scheme.ParameterCodec).
-		Timeout(timeout).
-		Watch()
-}
-
-// Create takes the representation of a role and creates it.  Returns the server's representation of the role, and an error, if there is any.
-func (c *roles) Create(role *v1alpha2.Role) (result *v1alpha2.Role, err error) {
-	result = &v1alpha2.Role{}
-	err = c.client.Post().
-		Resource("roles").
-		Body(role).
-		Do().
-		Into(result)
-	return
-}
-
-// Update takes the representation of a role and updates it. Returns the server's representation of the role, and an error, if there is any.
-func (c *roles) Update(role *v1alpha2.Role) (result *v1alpha2.Role, err error) {
-	result = &v1alpha2.Role{}
-	err = c.client.Put().
-		Resource("roles").
-		Name(role.Name).
-		Body(role).
-		Do().
-		Into(result)
-	return
-}
-
-// Delete takes name of the role and deletes it. Returns an error if one occurs.
-func (c *roles) Delete(name string, options *v1.DeleteOptions) error {
-	return c.client.Delete().
-		Resource("roles").
-		Name(name).
-		Body(options).
-		Do().
-		Error()
-}
-
-// DeleteCollection deletes a collection of objects.
-func (c *roles) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
-	var timeout time.Duration
-	if listOptions.TimeoutSeconds != nil {
-		timeout = time.Duration(*listOptions.TimeoutSeconds) * time.Second
-	}
-	return c.client.Delete().
-		Resource("roles").
-		VersionedParams(&listOptions, scheme.ParameterCodec).
-		Timeout(timeout).
-		Body(options).
-		Do().
-		Error()
-}
-
-// Patch applies the patch and returns the patched role.
-func (c *roles) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.Role, err error) {
-	result = &v1alpha2.Role{}
-	err = c.client.Patch(pt).
-		Resource("roles").
-		SubResource(subresources...).
-		Name(name).
-		Body(data).
-		Do().
-		Into(result)
-	return
-}

pkg/client/clientset/versioned/typed/iam/v1alpha2/rolebinding.go

@@ -1,164 +0,0 @@
-/*
-Copyright 2019 The KubeSphere authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by client-gen. DO NOT EDIT.
-
-package v1alpha2
-
-import (
-	"time"
-
-	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	types "k8s.io/apimachinery/pkg/types"
-	watch "k8s.io/apimachinery/pkg/watch"
-	rest "k8s.io/client-go/rest"
-	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
-	scheme "kubesphere.io/kubesphere/pkg/client/clientset/versioned/scheme"
-)
-
-// RoleBindingsGetter has a method to return a RoleBindingInterface.
-// A group's client should implement this interface.
-type RoleBindingsGetter interface {
-	RoleBindings() RoleBindingInterface
-}
-
-// RoleBindingInterface has methods to work with RoleBinding resources.
-type RoleBindingInterface interface {
-	Create(*v1alpha2.RoleBinding) (*v1alpha2.RoleBinding, error)
-	Update(*v1alpha2.RoleBinding) (*v1alpha2.RoleBinding, error)
-	Delete(name string, options *v1.DeleteOptions) error
-	DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error
-	Get(name string, options v1.GetOptions) (*v1alpha2.RoleBinding, error)
-	List(opts v1.ListOptions) (*v1alpha2.RoleBindingList, error)
-	Watch(opts v1.ListOptions) (watch.Interface, error)
-	Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.RoleBinding, err error)
-	RoleBindingExpansion
-}
-
-// roleBindings implements RoleBindingInterface
-type roleBindings struct {
-	client rest.Interface
-}
-
-// newRoleBindings returns a RoleBindings
-func newRoleBindings(c *IamV1alpha2Client) *roleBindings {
-	return &roleBindings{
-		client: c.RESTClient(),
-	}
-}
-
-// Get takes name of the roleBinding, and returns the corresponding roleBinding object, and an error if there is any.
-func (c *roleBindings) Get(name string, options v1.GetOptions) (result *v1alpha2.RoleBinding, err error) {
-	result = &v1alpha2.RoleBinding{}
-	err = c.client.Get().
-		Resource("rolebindings").
-		Name(name).
-		VersionedParams(&options, scheme.ParameterCodec).
-		Do().
-		Into(result)
-	return
-}
-
-// List takes label and field selectors, and returns the list of RoleBindings that match those selectors.
-func (c *roleBindings) List(opts v1.ListOptions) (result *v1alpha2.RoleBindingList, err error) {
-	var timeout time.Duration
-	if opts.TimeoutSeconds != nil {
-		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
-	}
-	result = &v1alpha2.RoleBindingList{}
-	err = c.client.Get().
-		Resource("rolebindings").
-		VersionedParams(&opts, scheme.ParameterCodec).
-		Timeout(timeout).
-		Do().
-		Into(result)
-	return
-}
-
-// Watch returns a watch.Interface that watches the requested roleBindings.
-func (c *roleBindings) Watch(opts v1.ListOptions) (watch.Interface, error) {
-	var timeout time.Duration
-	if opts.TimeoutSeconds != nil {
-		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
-	}
-	opts.Watch = true
-	return c.client.Get().
-		Resource("rolebindings").
-		VersionedParams(&opts, scheme.ParameterCodec).
-		Timeout(timeout).
-		Watch()
-}
-
-// Create takes the representation of a roleBinding and creates it.  Returns the server's representation of the roleBinding, and an error, if there is any.
-func (c *roleBindings) Create(roleBinding *v1alpha2.RoleBinding) (result *v1alpha2.RoleBinding, err error) {
-	result = &v1alpha2.RoleBinding{}
-	err = c.client.Post().
-		Resource("rolebindings").
-		Body(roleBinding).
-		Do().
-		Into(result)
-	return
-}
-
-// Update takes the representation of a roleBinding and updates it. Returns the server's representation of the roleBinding, and an error, if there is any.
-func (c *roleBindings) Update(roleBinding *v1alpha2.RoleBinding) (result *v1alpha2.RoleBinding, err error) {
-	result = &v1alpha2.RoleBinding{}
-	err = c.client.Put().
-		Resource("rolebindings").
-		Name(roleBinding.Name).
-		Body(roleBinding).
-		Do().
-		Into(result)
-	return
-}
-
-// Delete takes name of the roleBinding and deletes it. Returns an error if one occurs.
-func (c *roleBindings) Delete(name string, options *v1.DeleteOptions) error {
-	return c.client.Delete().
-		Resource("rolebindings").
-		Name(name).
-		Body(options).
-		Do().
-		Error()
-}
-
-// DeleteCollection deletes a collection of objects.
-func (c *roleBindings) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
-	var timeout time.Duration
-	if listOptions.TimeoutSeconds != nil {
-		timeout = time.Duration(*listOptions.TimeoutSeconds) * time.Second
-	}
-	return c.client.Delete().
-		Resource("rolebindings").
-		VersionedParams(&listOptions, scheme.ParameterCodec).
-		Timeout(timeout).
-		Body(options).
-		Do().
-		Error()
-}
-
-// Patch applies the patch and returns the patched roleBinding.
-func (c *roleBindings) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.RoleBinding, err error) {
-	result = &v1alpha2.RoleBinding{}
-	err = c.client.Patch(pt).
-		Resource("rolebindings").
-		SubResource(subresources...).
-		Name(name).
-		Body(data).
-		Do().
-		Into(result)
-	return
-}

pkg/client/clientset/versioned/typed/iam/v1alpha2/workspacerole.go

@@ -0,0 +1,164 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package v1alpha2
+
+import (
+	"time"
+
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	rest "k8s.io/client-go/rest"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+	scheme "kubesphere.io/kubesphere/pkg/client/clientset/versioned/scheme"
+)
+
+// WorkspaceRolesGetter has a method to return a WorkspaceRoleInterface.
+// A group's client should implement this interface.
+type WorkspaceRolesGetter interface {
+	WorkspaceRoles() WorkspaceRoleInterface
+}
+
+// WorkspaceRoleInterface has methods to work with WorkspaceRole resources.
+type WorkspaceRoleInterface interface {
+	Create(*v1alpha2.WorkspaceRole) (*v1alpha2.WorkspaceRole, error)
+	Update(*v1alpha2.WorkspaceRole) (*v1alpha2.WorkspaceRole, error)
+	Delete(name string, options *v1.DeleteOptions) error
+	DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error
+	Get(name string, options v1.GetOptions) (*v1alpha2.WorkspaceRole, error)
+	List(opts v1.ListOptions) (*v1alpha2.WorkspaceRoleList, error)
+	Watch(opts v1.ListOptions) (watch.Interface, error)
+	Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.WorkspaceRole, err error)
+	WorkspaceRoleExpansion
+}
+
+// workspaceRoles implements WorkspaceRoleInterface
+type workspaceRoles struct {
+	client rest.Interface
+}
+
+// newWorkspaceRoles returns a WorkspaceRoles
+func newWorkspaceRoles(c *IamV1alpha2Client) *workspaceRoles {
+	return &workspaceRoles{
+		client: c.RESTClient(),
+	}
+}
+
+// Get takes name of the workspaceRole, and returns the corresponding workspaceRole object, and an error if there is any.
+func (c *workspaceRoles) Get(name string, options v1.GetOptions) (result *v1alpha2.WorkspaceRole, err error) {
+	result = &v1alpha2.WorkspaceRole{}
+	err = c.client.Get().
+		Resource("workspaceroles").
+		Name(name).
+		VersionedParams(&options, scheme.ParameterCodec).
+		Do().
+		Into(result)
+	return
+}
+
+// List takes label and field selectors, and returns the list of WorkspaceRoles that match those selectors.
+func (c *workspaceRoles) List(opts v1.ListOptions) (result *v1alpha2.WorkspaceRoleList, err error) {
+	var timeout time.Duration
+	if opts.TimeoutSeconds != nil {
+		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
+	}
+	result = &v1alpha2.WorkspaceRoleList{}
+	err = c.client.Get().
+		Resource("workspaceroles").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Do().
+		Into(result)
+	return
+}
+
+// Watch returns a watch.Interface that watches the requested workspaceRoles.
+func (c *workspaceRoles) Watch(opts v1.ListOptions) (watch.Interface, error) {
+	var timeout time.Duration
+	if opts.TimeoutSeconds != nil {
+		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
+	}
+	opts.Watch = true
+	return c.client.Get().
+		Resource("workspaceroles").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Watch()
+}
+
+// Create takes the representation of a workspaceRole and creates it.  Returns the server's representation of the workspaceRole, and an error, if there is any.
+func (c *workspaceRoles) Create(workspaceRole *v1alpha2.WorkspaceRole) (result *v1alpha2.WorkspaceRole, err error) {
+	result = &v1alpha2.WorkspaceRole{}
+	err = c.client.Post().
+		Resource("workspaceroles").
+		Body(workspaceRole).
+		Do().
+		Into(result)
+	return
+}
+
+// Update takes the representation of a workspaceRole and updates it. Returns the server's representation of the workspaceRole, and an error, if there is any.
+func (c *workspaceRoles) Update(workspaceRole *v1alpha2.WorkspaceRole) (result *v1alpha2.WorkspaceRole, err error) {
+	result = &v1alpha2.WorkspaceRole{}
+	err = c.client.Put().
+		Resource("workspaceroles").
+		Name(workspaceRole.Name).
+		Body(workspaceRole).
+		Do().
+		Into(result)
+	return
+}
+
+// Delete takes name of the workspaceRole and deletes it. Returns an error if one occurs.
+func (c *workspaceRoles) Delete(name string, options *v1.DeleteOptions) error {
+	return c.client.Delete().
+		Resource("workspaceroles").
+		Name(name).
+		Body(options).
+		Do().
+		Error()
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *workspaceRoles) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
+	var timeout time.Duration
+	if listOptions.TimeoutSeconds != nil {
+		timeout = time.Duration(*listOptions.TimeoutSeconds) * time.Second
+	}
+	return c.client.Delete().
+		Resource("workspaceroles").
+		VersionedParams(&listOptions, scheme.ParameterCodec).
+		Timeout(timeout).
+		Body(options).
+		Do().
+		Error()
+}
+
+// Patch applies the patch and returns the patched workspaceRole.
+func (c *workspaceRoles) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.WorkspaceRole, err error) {
+	result = &v1alpha2.WorkspaceRole{}
+	err = c.client.Patch(pt).
+		Resource("workspaceroles").
+		SubResource(subresources...).
+		Name(name).
+		Body(data).
+		Do().
+		Into(result)
+	return
+}

pkg/client/clientset/versioned/typed/iam/v1alpha2/workspacerolebinding.go

@@ -0,0 +1,164 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by client-gen. DO NOT EDIT.
+
+package v1alpha2
+
+import (
+	"time"
+
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	types "k8s.io/apimachinery/pkg/types"
+	watch "k8s.io/apimachinery/pkg/watch"
+	rest "k8s.io/client-go/rest"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+	scheme "kubesphere.io/kubesphere/pkg/client/clientset/versioned/scheme"
+)
+
+// WorkspaceRoleBindingsGetter has a method to return a WorkspaceRoleBindingInterface.
+// A group's client should implement this interface.
+type WorkspaceRoleBindingsGetter interface {
+	WorkspaceRoleBindings() WorkspaceRoleBindingInterface
+}
+
+// WorkspaceRoleBindingInterface has methods to work with WorkspaceRoleBinding resources.
+type WorkspaceRoleBindingInterface interface {
+	Create(*v1alpha2.WorkspaceRoleBinding) (*v1alpha2.WorkspaceRoleBinding, error)
+	Update(*v1alpha2.WorkspaceRoleBinding) (*v1alpha2.WorkspaceRoleBinding, error)
+	Delete(name string, options *v1.DeleteOptions) error
+	DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error
+	Get(name string, options v1.GetOptions) (*v1alpha2.WorkspaceRoleBinding, error)
+	List(opts v1.ListOptions) (*v1alpha2.WorkspaceRoleBindingList, error)
+	Watch(opts v1.ListOptions) (watch.Interface, error)
+	Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.WorkspaceRoleBinding, err error)
+	WorkspaceRoleBindingExpansion
+}
+
+// workspaceRoleBindings implements WorkspaceRoleBindingInterface
+type workspaceRoleBindings struct {
+	client rest.Interface
+}
+
+// newWorkspaceRoleBindings returns a WorkspaceRoleBindings
+func newWorkspaceRoleBindings(c *IamV1alpha2Client) *workspaceRoleBindings {
+	return &workspaceRoleBindings{
+		client: c.RESTClient(),
+	}
+}
+
+// Get takes name of the workspaceRoleBinding, and returns the corresponding workspaceRoleBinding object, and an error if there is any.
+func (c *workspaceRoleBindings) Get(name string, options v1.GetOptions) (result *v1alpha2.WorkspaceRoleBinding, err error) {
+	result = &v1alpha2.WorkspaceRoleBinding{}
+	err = c.client.Get().
+		Resource("workspacerolebindings").
+		Name(name).
+		VersionedParams(&options, scheme.ParameterCodec).
+		Do().
+		Into(result)
+	return
+}
+
+// List takes label and field selectors, and returns the list of WorkspaceRoleBindings that match those selectors.
+func (c *workspaceRoleBindings) List(opts v1.ListOptions) (result *v1alpha2.WorkspaceRoleBindingList, err error) {
+	var timeout time.Duration
+	if opts.TimeoutSeconds != nil {
+		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
+	}
+	result = &v1alpha2.WorkspaceRoleBindingList{}
+	err = c.client.Get().
+		Resource("workspacerolebindings").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Do().
+		Into(result)
+	return
+}
+
+// Watch returns a watch.Interface that watches the requested workspaceRoleBindings.
+func (c *workspaceRoleBindings) Watch(opts v1.ListOptions) (watch.Interface, error) {
+	var timeout time.Duration
+	if opts.TimeoutSeconds != nil {
+		timeout = time.Duration(*opts.TimeoutSeconds) * time.Second
+	}
+	opts.Watch = true
+	return c.client.Get().
+		Resource("workspacerolebindings").
+		VersionedParams(&opts, scheme.ParameterCodec).
+		Timeout(timeout).
+		Watch()
+}
+
+// Create takes the representation of a workspaceRoleBinding and creates it.  Returns the server's representation of the workspaceRoleBinding, and an error, if there is any.
+func (c *workspaceRoleBindings) Create(workspaceRoleBinding *v1alpha2.WorkspaceRoleBinding) (result *v1alpha2.WorkspaceRoleBinding, err error) {
+	result = &v1alpha2.WorkspaceRoleBinding{}
+	err = c.client.Post().
+		Resource("workspacerolebindings").
+		Body(workspaceRoleBinding).
+		Do().
+		Into(result)
+	return
+}
+
+// Update takes the representation of a workspaceRoleBinding and updates it. Returns the server's representation of the workspaceRoleBinding, and an error, if there is any.
+func (c *workspaceRoleBindings) Update(workspaceRoleBinding *v1alpha2.WorkspaceRoleBinding) (result *v1alpha2.WorkspaceRoleBinding, err error) {
+	result = &v1alpha2.WorkspaceRoleBinding{}
+	err = c.client.Put().
+		Resource("workspacerolebindings").
+		Name(workspaceRoleBinding.Name).
+		Body(workspaceRoleBinding).
+		Do().
+		Into(result)
+	return
+}
+
+// Delete takes name of the workspaceRoleBinding and deletes it. Returns an error if one occurs.
+func (c *workspaceRoleBindings) Delete(name string, options *v1.DeleteOptions) error {
+	return c.client.Delete().
+		Resource("workspacerolebindings").
+		Name(name).
+		Body(options).
+		Do().
+		Error()
+}
+
+// DeleteCollection deletes a collection of objects.
+func (c *workspaceRoleBindings) DeleteCollection(options *v1.DeleteOptions, listOptions v1.ListOptions) error {
+	var timeout time.Duration
+	if listOptions.TimeoutSeconds != nil {
+		timeout = time.Duration(*listOptions.TimeoutSeconds) * time.Second
+	}
+	return c.client.Delete().
+		Resource("workspacerolebindings").
+		VersionedParams(&listOptions, scheme.ParameterCodec).
+		Timeout(timeout).
+		Body(options).
+		Do().
+		Error()
+}
+
+// Patch applies the patch and returns the patched workspaceRoleBinding.
+func (c *workspaceRoleBindings) Patch(name string, pt types.PatchType, data []byte, subresources ...string) (result *v1alpha2.WorkspaceRoleBinding, err error) {
+	result = &v1alpha2.WorkspaceRoleBinding{}
+	err = c.client.Patch(pt).
+		Resource("workspacerolebindings").
+		SubResource(subresources...).
+		Name(name).
+		Body(data).
+		Do().
+		Into(result)
+	return
+}

pkg/client/informers/externalversions/generic.go

@@ -81,14 +81,16 @@ func (f *sharedInformerFactory) ForResource(resource schema.GroupVersionResource
 		return &genericInformer{resource: resource.GroupResource(), informer: f.Devops().V1alpha3().Pipelines().Informer()}, nil
 
 		// Group=iam.kubesphere.io, Version=v1alpha2
-	case v1alpha2.SchemeGroupVersion.WithResource("policyrules"):
-		return &genericInformer{resource: resource.GroupResource(), informer: f.Iam().V1alpha2().PolicyRules().Informer()}, nil
-	case v1alpha2.SchemeGroupVersion.WithResource("roles"):
-		return &genericInformer{resource: resource.GroupResource(), informer: f.Iam().V1alpha2().Roles().Informer()}, nil
-	case v1alpha2.SchemeGroupVersion.WithResource("rolebindings"):
-		return &genericInformer{resource: resource.GroupResource(), informer: f.Iam().V1alpha2().RoleBindings().Informer()}, nil
+	case v1alpha2.SchemeGroupVersion.WithResource("globalroles"):
+		return &genericInformer{resource: resource.GroupResource(), informer: f.Iam().V1alpha2().GlobalRoles().Informer()}, nil
+	case v1alpha2.SchemeGroupVersion.WithResource("globalrolebindings"):
+		return &genericInformer{resource: resource.GroupResource(), informer: f.Iam().V1alpha2().GlobalRoleBindings().Informer()}, nil
 	case v1alpha2.SchemeGroupVersion.WithResource("users"):
 		return &genericInformer{resource: resource.GroupResource(), informer: f.Iam().V1alpha2().Users().Informer()}, nil
+	case v1alpha2.SchemeGroupVersion.WithResource("workspaceroles"):
+		return &genericInformer{resource: resource.GroupResource(), informer: f.Iam().V1alpha2().WorkspaceRoles().Informer()}, nil
+	case v1alpha2.SchemeGroupVersion.WithResource("workspacerolebindings"):
+		return &genericInformer{resource: resource.GroupResource(), informer: f.Iam().V1alpha2().WorkspaceRoleBindings().Informer()}, nil
 
 		// Group=network.kubesphere.io, Version=v1alpha1
 	case networkv1alpha1.SchemeGroupVersion.WithResource("namespacenetworkpolicies"):

pkg/client/informers/externalversions/iam/v1alpha2/globalrole.go

@@ -31,58 +31,58 @@ import (
 	v1alpha2 "kubesphere.io/kubesphere/pkg/client/listers/iam/v1alpha2"
 )
 
-// PolicyRuleInformer provides access to a shared informer and lister for
-// PolicyRules.
-type PolicyRuleInformer interface {
+// GlobalRoleInformer provides access to a shared informer and lister for
+// GlobalRoles.
+type GlobalRoleInformer interface {
 	Informer() cache.SharedIndexInformer
-	Lister() v1alpha2.PolicyRuleLister
+	Lister() v1alpha2.GlobalRoleLister
 }
 
-type policyRuleInformer struct {
+type globalRoleInformer struct {
 	factory          internalinterfaces.SharedInformerFactory
 	tweakListOptions internalinterfaces.TweakListOptionsFunc
 }
 
-// NewPolicyRuleInformer constructs a new informer for PolicyRule type.
+// NewGlobalRoleInformer constructs a new informer for GlobalRole type.
 // Always prefer using an informer factory to get a shared informer instead of getting an independent
 // one. This reduces memory footprint and number of connections to the server.
-func NewPolicyRuleInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers) cache.SharedIndexInformer {
-	return NewFilteredPolicyRuleInformer(client, resyncPeriod, indexers, nil)
+func NewGlobalRoleInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers) cache.SharedIndexInformer {
+	return NewFilteredGlobalRoleInformer(client, resyncPeriod, indexers, nil)
 }
 
-// NewFilteredPolicyRuleInformer constructs a new informer for PolicyRule type.
+// NewFilteredGlobalRoleInformer constructs a new informer for GlobalRole type.
 // Always prefer using an informer factory to get a shared informer instead of getting an independent
 // one. This reduces memory footprint and number of connections to the server.
-func NewFilteredPolicyRuleInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers, tweakListOptions internalinterfaces.TweakListOptionsFunc) cache.SharedIndexInformer {
+func NewFilteredGlobalRoleInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers, tweakListOptions internalinterfaces.TweakListOptionsFunc) cache.SharedIndexInformer {
 	return cache.NewSharedIndexInformer(
 		&cache.ListWatch{
 			ListFunc: func(options v1.ListOptions) (runtime.Object, error) {
 				if tweakListOptions != nil {
 					tweakListOptions(&options)
 				}
-				return client.IamV1alpha2().PolicyRules().List(options)
+				return client.IamV1alpha2().GlobalRoles().List(options)
 			},
 			WatchFunc: func(options v1.ListOptions) (watch.Interface, error) {
 				if tweakListOptions != nil {
 					tweakListOptions(&options)
 				}
-				return client.IamV1alpha2().PolicyRules().Watch(options)
+				return client.IamV1alpha2().GlobalRoles().Watch(options)
 			},
 		},
-		&iamv1alpha2.PolicyRule{},
+		&iamv1alpha2.GlobalRole{},
 		resyncPeriod,
 		indexers,
 	)
 }
 
-func (f *policyRuleInformer) defaultInformer(client versioned.Interface, resyncPeriod time.Duration) cache.SharedIndexInformer {
-	return NewFilteredPolicyRuleInformer(client, resyncPeriod, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc}, f.tweakListOptions)
+func (f *globalRoleInformer) defaultInformer(client versioned.Interface, resyncPeriod time.Duration) cache.SharedIndexInformer {
+	return NewFilteredGlobalRoleInformer(client, resyncPeriod, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc}, f.tweakListOptions)
 }
 
-func (f *policyRuleInformer) Informer() cache.SharedIndexInformer {
-	return f.factory.InformerFor(&iamv1alpha2.PolicyRule{}, f.defaultInformer)
+func (f *globalRoleInformer) Informer() cache.SharedIndexInformer {
+	return f.factory.InformerFor(&iamv1alpha2.GlobalRole{}, f.defaultInformer)
 }
 
-func (f *policyRuleInformer) Lister() v1alpha2.PolicyRuleLister {
-	return v1alpha2.NewPolicyRuleLister(f.Informer().GetIndexer())
+func (f *globalRoleInformer) Lister() v1alpha2.GlobalRoleLister {
+	return v1alpha2.NewGlobalRoleLister(f.Informer().GetIndexer())
 }

pkg/client/informers/externalversions/iam/v1alpha2/globalrolebinding.go

@@ -31,58 +31,58 @@ import (
 	v1alpha2 "kubesphere.io/kubesphere/pkg/client/listers/iam/v1alpha2"
 )
 
-// RoleInformer provides access to a shared informer and lister for
-// Roles.
-type RoleInformer interface {
+// GlobalRoleBindingInformer provides access to a shared informer and lister for
+// GlobalRoleBindings.
+type GlobalRoleBindingInformer interface {
 	Informer() cache.SharedIndexInformer
-	Lister() v1alpha2.RoleLister
+	Lister() v1alpha2.GlobalRoleBindingLister
 }
 
-type roleInformer struct {
+type globalRoleBindingInformer struct {
 	factory          internalinterfaces.SharedInformerFactory
 	tweakListOptions internalinterfaces.TweakListOptionsFunc
 }
 
-// NewRoleInformer constructs a new informer for Role type.
+// NewGlobalRoleBindingInformer constructs a new informer for GlobalRoleBinding type.
 // Always prefer using an informer factory to get a shared informer instead of getting an independent
 // one. This reduces memory footprint and number of connections to the server.
-func NewRoleInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers) cache.SharedIndexInformer {
-	return NewFilteredRoleInformer(client, resyncPeriod, indexers, nil)
+func NewGlobalRoleBindingInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers) cache.SharedIndexInformer {
+	return NewFilteredGlobalRoleBindingInformer(client, resyncPeriod, indexers, nil)
 }
 
-// NewFilteredRoleInformer constructs a new informer for Role type.
+// NewFilteredGlobalRoleBindingInformer constructs a new informer for GlobalRoleBinding type.
 // Always prefer using an informer factory to get a shared informer instead of getting an independent
 // one. This reduces memory footprint and number of connections to the server.
-func NewFilteredRoleInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers, tweakListOptions internalinterfaces.TweakListOptionsFunc) cache.SharedIndexInformer {
+func NewFilteredGlobalRoleBindingInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers, tweakListOptions internalinterfaces.TweakListOptionsFunc) cache.SharedIndexInformer {
 	return cache.NewSharedIndexInformer(
 		&cache.ListWatch{
 			ListFunc: func(options v1.ListOptions) (runtime.Object, error) {
 				if tweakListOptions != nil {
 					tweakListOptions(&options)
 				}
-				return client.IamV1alpha2().Roles().List(options)
+				return client.IamV1alpha2().GlobalRoleBindings().List(options)
 			},
 			WatchFunc: func(options v1.ListOptions) (watch.Interface, error) {
 				if tweakListOptions != nil {
 					tweakListOptions(&options)
 				}
-				return client.IamV1alpha2().Roles().Watch(options)
+				return client.IamV1alpha2().GlobalRoleBindings().Watch(options)
 			},
 		},
-		&iamv1alpha2.Role{},
+		&iamv1alpha2.GlobalRoleBinding{},
 		resyncPeriod,
 		indexers,
 	)
 }
 
-func (f *roleInformer) defaultInformer(client versioned.Interface, resyncPeriod time.Duration) cache.SharedIndexInformer {
-	return NewFilteredRoleInformer(client, resyncPeriod, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc}, f.tweakListOptions)
+func (f *globalRoleBindingInformer) defaultInformer(client versioned.Interface, resyncPeriod time.Duration) cache.SharedIndexInformer {
+	return NewFilteredGlobalRoleBindingInformer(client, resyncPeriod, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc}, f.tweakListOptions)
 }
 
-func (f *roleInformer) Informer() cache.SharedIndexInformer {
-	return f.factory.InformerFor(&iamv1alpha2.Role{}, f.defaultInformer)
+func (f *globalRoleBindingInformer) Informer() cache.SharedIndexInformer {
+	return f.factory.InformerFor(&iamv1alpha2.GlobalRoleBinding{}, f.defaultInformer)
 }
 
-func (f *roleInformer) Lister() v1alpha2.RoleLister {
-	return v1alpha2.NewRoleLister(f.Informer().GetIndexer())
+func (f *globalRoleBindingInformer) Lister() v1alpha2.GlobalRoleBindingLister {
+	return v1alpha2.NewGlobalRoleBindingLister(f.Informer().GetIndexer())
 }

pkg/client/informers/externalversions/iam/v1alpha2/interface.go

@@ -24,14 +24,16 @@ import (
 
 // Interface provides access to all the informers in this group version.
 type Interface interface {
-	// PolicyRules returns a PolicyRuleInformer.
-	PolicyRules() PolicyRuleInformer
-	// Roles returns a RoleInformer.
-	Roles() RoleInformer
-	// RoleBindings returns a RoleBindingInformer.
-	RoleBindings() RoleBindingInformer
+	// GlobalRoles returns a GlobalRoleInformer.
+	GlobalRoles() GlobalRoleInformer
+	// GlobalRoleBindings returns a GlobalRoleBindingInformer.
+	GlobalRoleBindings() GlobalRoleBindingInformer
 	// Users returns a UserInformer.
 	Users() UserInformer
+	// WorkspaceRoles returns a WorkspaceRoleInformer.
+	WorkspaceRoles() WorkspaceRoleInformer
+	// WorkspaceRoleBindings returns a WorkspaceRoleBindingInformer.
+	WorkspaceRoleBindings() WorkspaceRoleBindingInformer
 }
 
 type version struct {
@@ -45,22 +47,27 @@ func New(f internalinterfaces.SharedInformerFactory, namespace string, tweakList
 	return &version{factory: f, namespace: namespace, tweakListOptions: tweakListOptions}
 }
 
-// PolicyRules returns a PolicyRuleInformer.
-func (v *version) PolicyRules() PolicyRuleInformer {
-	return &policyRuleInformer{factory: v.factory, tweakListOptions: v.tweakListOptions}
+// GlobalRoles returns a GlobalRoleInformer.
+func (v *version) GlobalRoles() GlobalRoleInformer {
+	return &globalRoleInformer{factory: v.factory, tweakListOptions: v.tweakListOptions}
 }
 
-// Roles returns a RoleInformer.
-func (v *version) Roles() RoleInformer {
-	return &roleInformer{factory: v.factory, tweakListOptions: v.tweakListOptions}
-}
-
-// RoleBindings returns a RoleBindingInformer.
-func (v *version) RoleBindings() RoleBindingInformer {
-	return &roleBindingInformer{factory: v.factory, tweakListOptions: v.tweakListOptions}
+// GlobalRoleBindings returns a GlobalRoleBindingInformer.
+func (v *version) GlobalRoleBindings() GlobalRoleBindingInformer {
+	return &globalRoleBindingInformer{factory: v.factory, tweakListOptions: v.tweakListOptions}
 }
 
 // Users returns a UserInformer.
 func (v *version) Users() UserInformer {
 	return &userInformer{factory: v.factory, tweakListOptions: v.tweakListOptions}
 }
+
+// WorkspaceRoles returns a WorkspaceRoleInformer.
+func (v *version) WorkspaceRoles() WorkspaceRoleInformer {
+	return &workspaceRoleInformer{factory: v.factory, tweakListOptions: v.tweakListOptions}
+}
+
+// WorkspaceRoleBindings returns a WorkspaceRoleBindingInformer.
+func (v *version) WorkspaceRoleBindings() WorkspaceRoleBindingInformer {
+	return &workspaceRoleBindingInformer{factory: v.factory, tweakListOptions: v.tweakListOptions}
+}

pkg/client/informers/externalversions/iam/v1alpha2/workspacerole.go

@@ -31,58 +31,58 @@ import (
 	v1alpha2 "kubesphere.io/kubesphere/pkg/client/listers/iam/v1alpha2"
 )
 
-// RoleBindingInformer provides access to a shared informer and lister for
-// RoleBindings.
-type RoleBindingInformer interface {
+// WorkspaceRoleInformer provides access to a shared informer and lister for
+// WorkspaceRoles.
+type WorkspaceRoleInformer interface {
 	Informer() cache.SharedIndexInformer
-	Lister() v1alpha2.RoleBindingLister
+	Lister() v1alpha2.WorkspaceRoleLister
 }
 
-type roleBindingInformer struct {
+type workspaceRoleInformer struct {
 	factory          internalinterfaces.SharedInformerFactory
 	tweakListOptions internalinterfaces.TweakListOptionsFunc
 }
 
-// NewRoleBindingInformer constructs a new informer for RoleBinding type.
+// NewWorkspaceRoleInformer constructs a new informer for WorkspaceRole type.
 // Always prefer using an informer factory to get a shared informer instead of getting an independent
 // one. This reduces memory footprint and number of connections to the server.
-func NewRoleBindingInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers) cache.SharedIndexInformer {
-	return NewFilteredRoleBindingInformer(client, resyncPeriod, indexers, nil)
+func NewWorkspaceRoleInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers) cache.SharedIndexInformer {
+	return NewFilteredWorkspaceRoleInformer(client, resyncPeriod, indexers, nil)
 }
 
-// NewFilteredRoleBindingInformer constructs a new informer for RoleBinding type.
+// NewFilteredWorkspaceRoleInformer constructs a new informer for WorkspaceRole type.
 // Always prefer using an informer factory to get a shared informer instead of getting an independent
 // one. This reduces memory footprint and number of connections to the server.
-func NewFilteredRoleBindingInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers, tweakListOptions internalinterfaces.TweakListOptionsFunc) cache.SharedIndexInformer {
+func NewFilteredWorkspaceRoleInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers, tweakListOptions internalinterfaces.TweakListOptionsFunc) cache.SharedIndexInformer {
 	return cache.NewSharedIndexInformer(
 		&cache.ListWatch{
 			ListFunc: func(options v1.ListOptions) (runtime.Object, error) {
 				if tweakListOptions != nil {
 					tweakListOptions(&options)
 				}
-				return client.IamV1alpha2().RoleBindings().List(options)
+				return client.IamV1alpha2().WorkspaceRoles().List(options)
 			},
 			WatchFunc: func(options v1.ListOptions) (watch.Interface, error) {
 				if tweakListOptions != nil {
 					tweakListOptions(&options)
 				}
-				return client.IamV1alpha2().RoleBindings().Watch(options)
+				return client.IamV1alpha2().WorkspaceRoles().Watch(options)
 			},
 		},
-		&iamv1alpha2.RoleBinding{},
+		&iamv1alpha2.WorkspaceRole{},
 		resyncPeriod,
 		indexers,
 	)
 }
 
-func (f *roleBindingInformer) defaultInformer(client versioned.Interface, resyncPeriod time.Duration) cache.SharedIndexInformer {
-	return NewFilteredRoleBindingInformer(client, resyncPeriod, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc}, f.tweakListOptions)
+func (f *workspaceRoleInformer) defaultInformer(client versioned.Interface, resyncPeriod time.Duration) cache.SharedIndexInformer {
+	return NewFilteredWorkspaceRoleInformer(client, resyncPeriod, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc}, f.tweakListOptions)
 }
 
-func (f *roleBindingInformer) Informer() cache.SharedIndexInformer {
-	return f.factory.InformerFor(&iamv1alpha2.RoleBinding{}, f.defaultInformer)
+func (f *workspaceRoleInformer) Informer() cache.SharedIndexInformer {
+	return f.factory.InformerFor(&iamv1alpha2.WorkspaceRole{}, f.defaultInformer)
 }
 
-func (f *roleBindingInformer) Lister() v1alpha2.RoleBindingLister {
-	return v1alpha2.NewRoleBindingLister(f.Informer().GetIndexer())
+func (f *workspaceRoleInformer) Lister() v1alpha2.WorkspaceRoleLister {
+	return v1alpha2.NewWorkspaceRoleLister(f.Informer().GetIndexer())
 }

pkg/client/informers/externalversions/iam/v1alpha2/workspacerolebinding.go

@@ -0,0 +1,88 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by informer-gen. DO NOT EDIT.
+
+package v1alpha2
+
+import (
+	time "time"
+
+	v1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+	runtime "k8s.io/apimachinery/pkg/runtime"
+	watch "k8s.io/apimachinery/pkg/watch"
+	cache "k8s.io/client-go/tools/cache"
+	iamv1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+	versioned "kubesphere.io/kubesphere/pkg/client/clientset/versioned"
+	internalinterfaces "kubesphere.io/kubesphere/pkg/client/informers/externalversions/internalinterfaces"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/client/listers/iam/v1alpha2"
+)
+
+// WorkspaceRoleBindingInformer provides access to a shared informer and lister for
+// WorkspaceRoleBindings.
+type WorkspaceRoleBindingInformer interface {
+	Informer() cache.SharedIndexInformer
+	Lister() v1alpha2.WorkspaceRoleBindingLister
+}
+
+type workspaceRoleBindingInformer struct {
+	factory          internalinterfaces.SharedInformerFactory
+	tweakListOptions internalinterfaces.TweakListOptionsFunc
+}
+
+// NewWorkspaceRoleBindingInformer constructs a new informer for WorkspaceRoleBinding type.
+// Always prefer using an informer factory to get a shared informer instead of getting an independent
+// one. This reduces memory footprint and number of connections to the server.
+func NewWorkspaceRoleBindingInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers) cache.SharedIndexInformer {
+	return NewFilteredWorkspaceRoleBindingInformer(client, resyncPeriod, indexers, nil)
+}
+
+// NewFilteredWorkspaceRoleBindingInformer constructs a new informer for WorkspaceRoleBinding type.
+// Always prefer using an informer factory to get a shared informer instead of getting an independent
+// one. This reduces memory footprint and number of connections to the server.
+func NewFilteredWorkspaceRoleBindingInformer(client versioned.Interface, resyncPeriod time.Duration, indexers cache.Indexers, tweakListOptions internalinterfaces.TweakListOptionsFunc) cache.SharedIndexInformer {
+	return cache.NewSharedIndexInformer(
+		&cache.ListWatch{
+			ListFunc: func(options v1.ListOptions) (runtime.Object, error) {
+				if tweakListOptions != nil {
+					tweakListOptions(&options)
+				}
+				return client.IamV1alpha2().WorkspaceRoleBindings().List(options)
+			},
+			WatchFunc: func(options v1.ListOptions) (watch.Interface, error) {
+				if tweakListOptions != nil {
+					tweakListOptions(&options)
+				}
+				return client.IamV1alpha2().WorkspaceRoleBindings().Watch(options)
+			},
+		},
+		&iamv1alpha2.WorkspaceRoleBinding{},
+		resyncPeriod,
+		indexers,
+	)
+}
+
+func (f *workspaceRoleBindingInformer) defaultInformer(client versioned.Interface, resyncPeriod time.Duration) cache.SharedIndexInformer {
+	return NewFilteredWorkspaceRoleBindingInformer(client, resyncPeriod, cache.Indexers{cache.NamespaceIndex: cache.MetaNamespaceIndexFunc}, f.tweakListOptions)
+}
+
+func (f *workspaceRoleBindingInformer) Informer() cache.SharedIndexInformer {
+	return f.factory.InformerFor(&iamv1alpha2.WorkspaceRoleBinding{}, f.defaultInformer)
+}
+
+func (f *workspaceRoleBindingInformer) Lister() v1alpha2.WorkspaceRoleBindingLister {
+	return v1alpha2.NewWorkspaceRoleBindingLister(f.Informer().GetIndexer())
+}

pkg/client/listers/iam/v1alpha2/expansion_generated.go

@@ -18,18 +18,22 @@ limitations under the License.
 
 package v1alpha2
 
-// PolicyRuleListerExpansion allows custom methods to be added to
-// PolicyRuleLister.
-type PolicyRuleListerExpansion interface{}
+// GlobalRoleListerExpansion allows custom methods to be added to
+// GlobalRoleLister.
+type GlobalRoleListerExpansion interface{}
 
-// RoleListerExpansion allows custom methods to be added to
-// RoleLister.
-type RoleListerExpansion interface{}
-
-// RoleBindingListerExpansion allows custom methods to be added to
-// RoleBindingLister.
-type RoleBindingListerExpansion interface{}
+// GlobalRoleBindingListerExpansion allows custom methods to be added to
+// GlobalRoleBindingLister.
+type GlobalRoleBindingListerExpansion interface{}
 
 // UserListerExpansion allows custom methods to be added to
 // UserLister.
 type UserListerExpansion interface{}
+
+// WorkspaceRoleListerExpansion allows custom methods to be added to
+// WorkspaceRoleLister.
+type WorkspaceRoleListerExpansion interface{}
+
+// WorkspaceRoleBindingListerExpansion allows custom methods to be added to
+// WorkspaceRoleBindingLister.
+type WorkspaceRoleBindingListerExpansion interface{}

pkg/client/listers/iam/v1alpha2/globalrole.go

@@ -25,41 +25,41 @@ import (
 	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
 )
 
-// PolicyRuleLister helps list PolicyRules.
-type PolicyRuleLister interface {
-	// List lists all PolicyRules in the indexer.
-	List(selector labels.Selector) (ret []*v1alpha2.PolicyRule, err error)
-	// Get retrieves the PolicyRule from the index for a given name.
-	Get(name string) (*v1alpha2.PolicyRule, error)
-	PolicyRuleListerExpansion
+// GlobalRoleLister helps list GlobalRoles.
+type GlobalRoleLister interface {
+	// List lists all GlobalRoles in the indexer.
+	List(selector labels.Selector) (ret []*v1alpha2.GlobalRole, err error)
+	// Get retrieves the GlobalRole from the index for a given name.
+	Get(name string) (*v1alpha2.GlobalRole, error)
+	GlobalRoleListerExpansion
 }
 
-// policyRuleLister implements the PolicyRuleLister interface.
-type policyRuleLister struct {
+// globalRoleLister implements the GlobalRoleLister interface.
+type globalRoleLister struct {
 	indexer cache.Indexer
 }
 
-// NewPolicyRuleLister returns a new PolicyRuleLister.
-func NewPolicyRuleLister(indexer cache.Indexer) PolicyRuleLister {
-	return &policyRuleLister{indexer: indexer}
+// NewGlobalRoleLister returns a new GlobalRoleLister.
+func NewGlobalRoleLister(indexer cache.Indexer) GlobalRoleLister {
+	return &globalRoleLister{indexer: indexer}
 }
 
-// List lists all PolicyRules in the indexer.
-func (s *policyRuleLister) List(selector labels.Selector) (ret []*v1alpha2.PolicyRule, err error) {
+// List lists all GlobalRoles in the indexer.
+func (s *globalRoleLister) List(selector labels.Selector) (ret []*v1alpha2.GlobalRole, err error) {
 	err = cache.ListAll(s.indexer, selector, func(m interface{}) {
-		ret = append(ret, m.(*v1alpha2.PolicyRule))
+		ret = append(ret, m.(*v1alpha2.GlobalRole))
 	})
 	return ret, err
 }
 
-// Get retrieves the PolicyRule from the index for a given name.
-func (s *policyRuleLister) Get(name string) (*v1alpha2.PolicyRule, error) {
+// Get retrieves the GlobalRole from the index for a given name.
+func (s *globalRoleLister) Get(name string) (*v1alpha2.GlobalRole, error) {
 	obj, exists, err := s.indexer.GetByKey(name)
 	if err != nil {
 		return nil, err
 	}
 	if !exists {
-		return nil, errors.NewNotFound(v1alpha2.Resource("policyrule"), name)
+		return nil, errors.NewNotFound(v1alpha2.Resource("globalrole"), name)
 	}
-	return obj.(*v1alpha2.PolicyRule), nil
+	return obj.(*v1alpha2.GlobalRole), nil
 }

pkg/client/listers/iam/v1alpha2/globalrolebinding.go

@@ -0,0 +1,65 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by lister-gen. DO NOT EDIT.
+
+package v1alpha2
+
+import (
+	"k8s.io/apimachinery/pkg/api/errors"
+	"k8s.io/apimachinery/pkg/labels"
+	"k8s.io/client-go/tools/cache"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+)
+
+// GlobalRoleBindingLister helps list GlobalRoleBindings.
+type GlobalRoleBindingLister interface {
+	// List lists all GlobalRoleBindings in the indexer.
+	List(selector labels.Selector) (ret []*v1alpha2.GlobalRoleBinding, err error)
+	// Get retrieves the GlobalRoleBinding from the index for a given name.
+	Get(name string) (*v1alpha2.GlobalRoleBinding, error)
+	GlobalRoleBindingListerExpansion
+}
+
+// globalRoleBindingLister implements the GlobalRoleBindingLister interface.
+type globalRoleBindingLister struct {
+	indexer cache.Indexer
+}
+
+// NewGlobalRoleBindingLister returns a new GlobalRoleBindingLister.
+func NewGlobalRoleBindingLister(indexer cache.Indexer) GlobalRoleBindingLister {
+	return &globalRoleBindingLister{indexer: indexer}
+}
+
+// List lists all GlobalRoleBindings in the indexer.
+func (s *globalRoleBindingLister) List(selector labels.Selector) (ret []*v1alpha2.GlobalRoleBinding, err error) {
+	err = cache.ListAll(s.indexer, selector, func(m interface{}) {
+		ret = append(ret, m.(*v1alpha2.GlobalRoleBinding))
+	})
+	return ret, err
+}
+
+// Get retrieves the GlobalRoleBinding from the index for a given name.
+func (s *globalRoleBindingLister) Get(name string) (*v1alpha2.GlobalRoleBinding, error) {
+	obj, exists, err := s.indexer.GetByKey(name)
+	if err != nil {
+		return nil, err
+	}
+	if !exists {
+		return nil, errors.NewNotFound(v1alpha2.Resource("globalrolebinding"), name)
+	}
+	return obj.(*v1alpha2.GlobalRoleBinding), nil
+}

pkg/client/listers/iam/v1alpha2/role.go

@@ -1,65 +0,0 @@
-/*
-Copyright 2019 The KubeSphere authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by lister-gen. DO NOT EDIT.
-
-package v1alpha2
-
-import (
-	"k8s.io/apimachinery/pkg/api/errors"
-	"k8s.io/apimachinery/pkg/labels"
-	"k8s.io/client-go/tools/cache"
-	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
-)
-
-// RoleLister helps list Roles.
-type RoleLister interface {
-	// List lists all Roles in the indexer.
-	List(selector labels.Selector) (ret []*v1alpha2.Role, err error)
-	// Get retrieves the Role from the index for a given name.
-	Get(name string) (*v1alpha2.Role, error)
-	RoleListerExpansion
-}
-
-// roleLister implements the RoleLister interface.
-type roleLister struct {
-	indexer cache.Indexer
-}
-
-// NewRoleLister returns a new RoleLister.
-func NewRoleLister(indexer cache.Indexer) RoleLister {
-	return &roleLister{indexer: indexer}
-}
-
-// List lists all Roles in the indexer.
-func (s *roleLister) List(selector labels.Selector) (ret []*v1alpha2.Role, err error) {
-	err = cache.ListAll(s.indexer, selector, func(m interface{}) {
-		ret = append(ret, m.(*v1alpha2.Role))
-	})
-	return ret, err
-}
-
-// Get retrieves the Role from the index for a given name.
-func (s *roleLister) Get(name string) (*v1alpha2.Role, error) {
-	obj, exists, err := s.indexer.GetByKey(name)
-	if err != nil {
-		return nil, err
-	}
-	if !exists {
-		return nil, errors.NewNotFound(v1alpha2.Resource("role"), name)
-	}
-	return obj.(*v1alpha2.Role), nil
-}

pkg/client/listers/iam/v1alpha2/rolebinding.go

@@ -1,65 +0,0 @@
-/*
-Copyright 2019 The KubeSphere authors.
-
-Licensed under the Apache License, Version 2.0 (the "License");
-you may not use this file except in compliance with the License.
-You may obtain a copy of the License at
-
-    http://www.apache.org/licenses/LICENSE-2.0
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the License is distributed on an "AS IS" BASIS,
-WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-See the License for the specific language governing permissions and
-limitations under the License.
-*/
-
-// Code generated by lister-gen. DO NOT EDIT.
-
-package v1alpha2
-
-import (
-	"k8s.io/apimachinery/pkg/api/errors"
-	"k8s.io/apimachinery/pkg/labels"
-	"k8s.io/client-go/tools/cache"
-	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
-)
-
-// RoleBindingLister helps list RoleBindings.
-type RoleBindingLister interface {
-	// List lists all RoleBindings in the indexer.
-	List(selector labels.Selector) (ret []*v1alpha2.RoleBinding, err error)
-	// Get retrieves the RoleBinding from the index for a given name.
-	Get(name string) (*v1alpha2.RoleBinding, error)
-	RoleBindingListerExpansion
-}
-
-// roleBindingLister implements the RoleBindingLister interface.
-type roleBindingLister struct {
-	indexer cache.Indexer
-}
-
-// NewRoleBindingLister returns a new RoleBindingLister.
-func NewRoleBindingLister(indexer cache.Indexer) RoleBindingLister {
-	return &roleBindingLister{indexer: indexer}
-}
-
-// List lists all RoleBindings in the indexer.
-func (s *roleBindingLister) List(selector labels.Selector) (ret []*v1alpha2.RoleBinding, err error) {
-	err = cache.ListAll(s.indexer, selector, func(m interface{}) {
-		ret = append(ret, m.(*v1alpha2.RoleBinding))
-	})
-	return ret, err
-}
-
-// Get retrieves the RoleBinding from the index for a given name.
-func (s *roleBindingLister) Get(name string) (*v1alpha2.RoleBinding, error) {
-	obj, exists, err := s.indexer.GetByKey(name)
-	if err != nil {
-		return nil, err
-	}
-	if !exists {
-		return nil, errors.NewNotFound(v1alpha2.Resource("rolebinding"), name)
-	}
-	return obj.(*v1alpha2.RoleBinding), nil
-}

pkg/client/listers/iam/v1alpha2/workspacerole.go

@@ -0,0 +1,65 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by lister-gen. DO NOT EDIT.
+
+package v1alpha2
+
+import (
+	"k8s.io/apimachinery/pkg/api/errors"
+	"k8s.io/apimachinery/pkg/labels"
+	"k8s.io/client-go/tools/cache"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+)
+
+// WorkspaceRoleLister helps list WorkspaceRoles.
+type WorkspaceRoleLister interface {
+	// List lists all WorkspaceRoles in the indexer.
+	List(selector labels.Selector) (ret []*v1alpha2.WorkspaceRole, err error)
+	// Get retrieves the WorkspaceRole from the index for a given name.
+	Get(name string) (*v1alpha2.WorkspaceRole, error)
+	WorkspaceRoleListerExpansion
+}
+
+// workspaceRoleLister implements the WorkspaceRoleLister interface.
+type workspaceRoleLister struct {
+	indexer cache.Indexer
+}
+
+// NewWorkspaceRoleLister returns a new WorkspaceRoleLister.
+func NewWorkspaceRoleLister(indexer cache.Indexer) WorkspaceRoleLister {
+	return &workspaceRoleLister{indexer: indexer}
+}
+
+// List lists all WorkspaceRoles in the indexer.
+func (s *workspaceRoleLister) List(selector labels.Selector) (ret []*v1alpha2.WorkspaceRole, err error) {
+	err = cache.ListAll(s.indexer, selector, func(m interface{}) {
+		ret = append(ret, m.(*v1alpha2.WorkspaceRole))
+	})
+	return ret, err
+}
+
+// Get retrieves the WorkspaceRole from the index for a given name.
+func (s *workspaceRoleLister) Get(name string) (*v1alpha2.WorkspaceRole, error) {
+	obj, exists, err := s.indexer.GetByKey(name)
+	if err != nil {
+		return nil, err
+	}
+	if !exists {
+		return nil, errors.NewNotFound(v1alpha2.Resource("workspacerole"), name)
+	}
+	return obj.(*v1alpha2.WorkspaceRole), nil
+}

pkg/client/listers/iam/v1alpha2/workspacerolebinding.go

@@ -0,0 +1,65 @@
+/*
+Copyright 2019 The KubeSphere authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+// Code generated by lister-gen. DO NOT EDIT.
+
+package v1alpha2
+
+import (
+	"k8s.io/apimachinery/pkg/api/errors"
+	"k8s.io/apimachinery/pkg/labels"
+	"k8s.io/client-go/tools/cache"
+	v1alpha2 "kubesphere.io/kubesphere/pkg/apis/iam/v1alpha2"
+)
+
+// WorkspaceRoleBindingLister helps list WorkspaceRoleBindings.
+type WorkspaceRoleBindingLister interface {
+	// List lists all WorkspaceRoleBindings in the indexer.
+	List(selector labels.Selector) (ret []*v1alpha2.WorkspaceRoleBinding, err error)
+	// Get retrieves the WorkspaceRoleBinding from the index for a given name.
+	Get(name string) (*v1alpha2.WorkspaceRoleBinding, error)
+	WorkspaceRoleBindingListerExpansion
+}
+
+// workspaceRoleBindingLister implements the WorkspaceRoleBindingLister interface.
+type workspaceRoleBindingLister struct {
+	indexer cache.Indexer
+}
+
+// NewWorkspaceRoleBindingLister returns a new WorkspaceRoleBindingLister.
+func NewWorkspaceRoleBindingLister(indexer cache.Indexer) WorkspaceRoleBindingLister {
+	return &workspaceRoleBindingLister{indexer: indexer}
+}
+
+// List lists all WorkspaceRoleBindings in the indexer.
+func (s *workspaceRoleBindingLister) List(selector labels.Selector) (ret []*v1alpha2.WorkspaceRoleBinding, err error) {
+	err = cache.ListAll(s.indexer, selector, func(m interface{}) {
+		ret = append(ret, m.(*v1alpha2.WorkspaceRoleBinding))
+	})
+	return ret, err
+}
+
+// Get retrieves the WorkspaceRoleBinding from the index for a given name.
+func (s *workspaceRoleBindingLister) Get(name string) (*v1alpha2.WorkspaceRoleBinding, error) {
+	obj, exists, err := s.indexer.GetByKey(name)
+	if err != nil {
+		return nil, err
+	}
+	if !exists {
+		return nil, errors.NewNotFound(v1alpha2.Resource("workspacerolebinding"), name)
+	}
+	return obj.(*v1alpha2.WorkspaceRoleBinding), nil
+}