From cf6d113f2468f08eb6e4b4856f757beb5e153ddb Mon Sep 17 00:00:00 2001 From: Mangirdas Judeikis Date: Sun, 22 Sep 2024 16:04:48 +0300 Subject: [PATCH] fix npe in serviceAccount flow --- pkg/kubeapiserver/authenticator/config.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/kubeapiserver/authenticator/config.go b/pkg/kubeapiserver/authenticator/config.go index fe583eca253..2e1b78b80bd 100644 --- a/pkg/kubeapiserver/authenticator/config.go +++ b/pkg/kubeapiserver/authenticator/config.go @@ -138,7 +138,7 @@ func (config Config) New(serverLifecycle context.Context) (authenticator.Request } tokenAuthenticators = append(tokenAuthenticators, serviceAccountAuth) } - if len(config.ServiceAccountIssuers) > 0 { + if len(config.ServiceAccountIssuers) > 0 && config.ServiceAccountPublicKeysGetter != nil { serviceAccountAuth, err := newServiceAccountAuthenticator(config.ServiceAccountIssuers, config.ServiceAccountPublicKeysGetter, config.APIAudiences, config.ServiceAccountTokenGetter) if err != nil { return nil, nil, nil, nil, err