diff --git a/pkg/auth/nodeidentifier/interfaces.go b/pkg/auth/nodeidentifier/interfaces.go index 917bebaf9d9..df10a88a840 100644 --- a/pkg/auth/nodeidentifier/interfaces.go +++ b/pkg/auth/nodeidentifier/interfaces.go @@ -22,7 +22,7 @@ import ( // NodeIdentifier determines node information from a given user type NodeIdentifier interface { - // IdentifyNode determines node information from the given user.Info. + // NodeIdentity determines node information from the given user.Info. // nodeName is the name of the Node API object associated with the user.Info, // and may be empty if a specific node cannot be determined. // isNode is true if the user.Info represents an identity issued to a node. diff --git a/plugin/pkg/auth/authorizer/node/node_authorizer.go b/plugin/pkg/auth/authorizer/node/node_authorizer.go index 46a24eba1e0..01300801cb4 100644 --- a/plugin/pkg/auth/authorizer/node/node_authorizer.go +++ b/plugin/pkg/auth/authorizer/node/node_authorizer.go @@ -32,8 +32,8 @@ import ( ) // NodeAuthorizer authorizes requests from kubelets, with the following logic: -// 1. If a request is not from a node (IdentifyNode() returns isNode=false), reject -// 2. If a specific node cannot be identified (IdentifyNode() returns nodeName=""), reject +// 1. If a request is not from a node (NodeIdentity() returns isNode=false), reject +// 2. If a specific node cannot be identified (NodeIdentity() returns nodeName=""), reject // 3. If a request is for a secret, configmap, persistent volume or persistent volume claim, reject unless the verb is get, and the requested object is related to the requesting node: // node <- pod // node <- pod <- secret