From bc66c6187c8c51eb65b6a4e3517d746d54538176 Mon Sep 17 00:00:00 2001 From: Justin Santa Barbara Date: Sat, 26 Aug 2017 15:56:33 -0400 Subject: [PATCH] Fix NodeIdentifier godocs: IdentifyNode -> NodeIdentity The godocs had an older name for the NodeIdentity function. --- pkg/auth/nodeidentifier/interfaces.go | 2 +- plugin/pkg/auth/authorizer/node/node_authorizer.go | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/pkg/auth/nodeidentifier/interfaces.go b/pkg/auth/nodeidentifier/interfaces.go index 917bebaf9d9..df10a88a840 100644 --- a/pkg/auth/nodeidentifier/interfaces.go +++ b/pkg/auth/nodeidentifier/interfaces.go @@ -22,7 +22,7 @@ import ( // NodeIdentifier determines node information from a given user type NodeIdentifier interface { - // IdentifyNode determines node information from the given user.Info. + // NodeIdentity determines node information from the given user.Info. // nodeName is the name of the Node API object associated with the user.Info, // and may be empty if a specific node cannot be determined. // isNode is true if the user.Info represents an identity issued to a node. diff --git a/plugin/pkg/auth/authorizer/node/node_authorizer.go b/plugin/pkg/auth/authorizer/node/node_authorizer.go index 46a24eba1e0..01300801cb4 100644 --- a/plugin/pkg/auth/authorizer/node/node_authorizer.go +++ b/plugin/pkg/auth/authorizer/node/node_authorizer.go @@ -32,8 +32,8 @@ import ( ) // NodeAuthorizer authorizes requests from kubelets, with the following logic: -// 1. If a request is not from a node (IdentifyNode() returns isNode=false), reject -// 2. If a specific node cannot be identified (IdentifyNode() returns nodeName=""), reject +// 1. If a request is not from a node (NodeIdentity() returns isNode=false), reject +// 2. If a specific node cannot be identified (NodeIdentity() returns nodeName=""), reject // 3. If a request is for a secret, configmap, persistent volume or persistent volume claim, reject unless the verb is get, and the requested object is related to the requesting node: // node <- pod // node <- pod <- secret