Add crds
diff --git a/ca/pkg/rule/authorization/handler.go b/ca/pkg/rule/authorization/handler.go
new file mode 100644
index 0000000..1a4e4e4
--- /dev/null
+++ b/ca/pkg/rule/authorization/handler.go
@@ -0,0 +1,46 @@
+// Licensed to the Apache Software Foundation (ASF) under one or more
+// contributor license agreements. See the NOTICE file distributed with
+// this work for additional information regarding copyright ownership.
+// The ASF licenses this file to You under the Apache License, Version 2.0
+// (the "License"); you may not use this file except in compliance with
+// the License. You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package authorization
+
+type Handler interface {
+ Add(key string, obj *Policy)
+ Update(key string, newObj *Policy)
+ Delete(key string)
+}
+
+type Impl struct {
+ Handler
+
+ cache map[string]*Policy
+}
+
+func NewHandler() Handler {
+ return &Impl{
+ cache: map[string]*Policy{},
+ }
+}
+
+func (i *Impl) Add(key string, obj *Policy) {
+ i.cache[key] = obj
+}
+
+func (i *Impl) Update(key string, newObj *Policy) {
+ i.cache[key] = newObj
+}
+
+func (i *Impl) Delete(key string) {
+ delete(i.cache, key)
+}
