github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-09-12 20:57:20 +00:00
Code Issues Projects Releases Wiki Activity

adds metrics for authorization webhook

Browse Source
This commit is contained in:
Lukasz Szaszkiewicz
2021-03-17 16:30:40 +01:00
parent 696d0f5772
commit 4a2aef00d6
9 changed files with 321 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
cmd/kubelet/app/auth.go
View File

@@ -42,11 +42,11 @@ func BuildAuth(nodeName types.NodeName, client clientset.Interface, config kubel
// Get clients, if provided
var (
tokenClient authenticationclient.AuthenticationV1Interface
sarClient authorizationclient.SubjectAccessReviewInterface
sarClient authorizationclient.AuthorizationV1Interface
)
if client != nil && !reflect.ValueOf(client).IsNil() {
tokenClient = client.AuthenticationV1()
sarClient = client.AuthorizationV1().SubjectAccessReviews()
sarClient = client.AuthorizationV1()
}
authenticator, runAuthenticatorCAReload, err := BuildAuthn(tokenClient, config.Authentication)
@@ -102,7 +102,7 @@ func BuildAuthn(client authenticationclient.AuthenticationV1Interface, authn kub
}
// BuildAuthz creates an authorizer compatible with the kubelet's needs
func BuildAuthz(client authorizationclient.SubjectAccessReviewInterface, authz kubeletconfig.KubeletAuthorization) (authorizer.Authorizer, error) {
func BuildAuthz(client authorizationclient.AuthorizationV1Interface, authz kubeletconfig.KubeletAuthorization) (authorizer.Authorizer, error) {
switch authz.Mode {
case kubeletconfig.KubeletAuthorizationModeAlwaysAllow:
return authorizerfactory.NewAlwaysAllowAuthorizer(), nil