func verbMatches(p api.Policy, a authorizer.Attributes) bool { // TODO: match on verb // All policies allow read only requests if a.IsReadOnly() { return true } // Allow if policy is not readonly if !p.Spec.Readonly { return true } return false }