Add missing UID in SubjectAccessReviewSpec

WebhookAuthorizer's Authorize should send *all* the information
present in the user.Info data structure. We are not sending the
UID currently.
This commit is contained in:
Davanum Srinivas
2017-07-26 21:34:11 -04:00
parent dd819b5013
commit 9a761b16c1
22 changed files with 460 additions and 210 deletions

View File

@@ -120,6 +120,7 @@ func (a *sarApprover) authorize(csr *capi.CertificateSigningRequest, rattrs auth
sar := &authorization.SubjectAccessReview{
Spec: authorization.SubjectAccessReviewSpec{
User: csr.Spec.Username,
UID: csr.Spec.UID,
Groups: csr.Spec.Groups,
Extra: extra,
ResourceAttributes: &rattrs,