Add missing UID in SubjectAccessReviewSpec
WebhookAuthorizer's Authorize should send *all* the information present in the user.Info data structure. We are not sending the UID currently. Kubernetes-commit: 9a761b16c1558106800222dbc52f6ab03c40c64c
This commit is contained in:
parent
2c66dfcbee
commit
7d27fa3fec
|
|
@ -144,6 +144,7 @@ func (w *WebhookAuthorizer) Authorize(attr authorizer.Attributes) (authorized bo
|
|||
if user := attr.GetUser(); user != nil {
|
||||
r.Spec = authorization.SubjectAccessReviewSpec{
|
||||
User: user.GetName(),
|
||||
UID: user.GetUID(),
|
||||
Groups: user.GetGroups(),
|
||||
Extra: convertToSARExtra(user.GetExtra()),
|
||||
}
|
||||
|
|
|
|||
|
|
@ -505,6 +505,7 @@ func TestWebhook(t *testing.T) {
|
|||
TypeMeta: expTypeMeta,
|
||||
Spec: v1beta1.SubjectAccessReviewSpec{
|
||||
User: "jane",
|
||||
UID: "1",
|
||||
Groups: []string{"group1", "group2"},
|
||||
ResourceAttributes: &v1beta1.ResourceAttributes{
|
||||
Verb: "GET",
|
||||
|
|
|
|||
Loading…
Reference in New Issue