mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-09-03 02:07:38 +00:00
modified: staging/src/k8s.io/apiserver/pkg/endpoints/filters/authorization.go
This commit is contained in:
@@ -47,6 +47,7 @@ func WithAuthorization(handler http.Handler, requestContextMapper request.Reques
|
|||||||
return
|
return
|
||||||
}
|
}
|
||||||
authorized, reason, err := a.Authorize(attributes)
|
authorized, reason, err := a.Authorize(attributes)
|
||||||
|
// an authorizer like RBAC could encounter evaluation errors and still allow the request, so authorizer decision is checked before error here.
|
||||||
if authorized == authorizer.DecisionAllow {
|
if authorized == authorizer.DecisionAllow {
|
||||||
handler.ServeHTTP(w, req)
|
handler.ServeHTTP(w, req)
|
||||||
return
|
return
|
||||||
|
Reference in New Issue
Block a user