diff --git a/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/oidc.go b/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/oidc.go index 03f294abdcd..0309fb581ca 100644 --- a/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/oidc.go +++ b/staging/src/k8s.io/apiserver/plugin/pkg/authenticator/token/oidc/oidc.go @@ -662,11 +662,11 @@ func getClaimJWT(client *http.Client, url, accessToken string) (string, error) { if err != nil { return "", err } + defer response.Body.Close() // Report non-OK status code as an error. if response.StatusCode < http.StatusOK || response.StatusCode > http.StatusIMUsed { return "", fmt.Errorf("error while getting distributed claim JWT: %v", response.Status) } - defer response.Body.Close() responseBytes, err := ioutil.ReadAll(response.Body) if err != nil { return "", fmt.Errorf("could not decode distributed claim response")