Merge pull request #105598 from gy95/match

break the pointless loop when group matched

pkg/auth/authorizer/abac/abac.go

@@ -164,6 +164,7 @@ func subjectMatches(p abac.Policy, user user.Info) bool {
 			for _, group := range groups {
 				if p.Spec.Group == group {
 					matched = true
+					break
 				}
 			}
 			if !matched {