mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-09-29 14:16:26 +00:00
Automatic merge from submit-queue enable resource name and service account cases for impersonation Adds the resource name check since that attribute was added for authorization. Also adds a check against a separate resource for service accounts. Allowing impersonation of service accounts to use a different resource check places control of impersonation with the same users to have the power to get the SA tokens directly. @kubernetes/kube-iam @sgallagher FYI