Merge pull request #831 from zerotens/master

Policy validator add specialized verbs

Author: rawmind0

docs/resources/global_role.md

@@ -51,7 +51,7 @@ The following attributes are exported:
 * `non_resource_urls` - (Optional) Policy rule non resource urls (list)
 * `resource_names` - (Optional) Policy rule resource names (list)
 * `resources` - (Optional) Policy rule resources (list)
-* `verbs` - (Optional) Policy rule verbs. `create`, `delete`, `deletecollection`, `get`, `list`, `patch`, `update`, `view`, `watch`, `own` and `*` values are supported (list)
+* `verbs` - (Optional) Policy rule verbs. `bind`, `create`, `delete`, `deletecollection`, `escalate`, `get`, `impersonate`, `list`, `patch`, `update`, `use`, `view`, `watch`, `own` and `*` values are supported (list)
 
 ## Timeouts
 

docs/resources/role_template.md

@@ -74,7 +74,7 @@ The following attributes are exported:
 * `non_resource_urls` - (Optional) Policy rule non resource urls (list)
 * `resource_names` - (Optional) Policy rule resource names (list)
 * `resources` - (Optional) Policy rule resources (list)
-* `verbs` - (Optional) Policy rule verbs. `create`, `delete`, `deletecollection`, `get`, `list`, `patch`, `update`, `view`, `watch`, `own` and `*` values are supported (list)
+* `verbs` - (Optional) Policy rule verbs. `bind`, `create`, `delete`, `deletecollection`, `escalate`, `get`, `impersonate`, `list`, `patch`, `update`, `use`, `view`, `watch`, `own` and `*` values are supported (list)
 
 ## Timeouts
 

rancher2/schema_policy_rule.go

@@ -17,6 +17,10 @@ const (
 	policyRuleVerbView             = "view"
 	policyRuleVerbWatch            = "watch"
 	policyRuleVerbOwn              = "own"
+	policyRuleVerbUse              = "use"
+	policyRuleVerbBind             = "bind"
+	policyRuleVerbEscalate         = "escalate"
+	policyRuleVerbImpersonate      = "impersonate"
 )
 
 var (
@@ -32,6 +36,10 @@ var (
 		policyRuleVerbView,
 		policyRuleVerbWatch,
 		policyRuleVerbOwn,
+		policyRuleVerbUse,
+		policyRuleVerbBind,
+		policyRuleVerbEscalate,
+		policyRuleVerbImpersonate,
 	}
 )