test access store

This commit is contained in:
niusmallnan 2021-10-19 10:15:57 +08:00
parent c96add68ed
commit 0ae672e010

View File

@ -6,6 +6,7 @@ import (
"sort" "sort"
v1 "github.com/rancher/wrangler/pkg/generated/controllers/rbac/v1" v1 "github.com/rancher/wrangler/pkg/generated/controllers/rbac/v1"
"github.com/sirupsen/logrus"
rbacv1 "k8s.io/api/rbac/v1" rbacv1 "k8s.io/api/rbac/v1"
"k8s.io/apimachinery/pkg/runtime/schema" "k8s.io/apimachinery/pkg/runtime/schema"
) )
@ -79,6 +80,7 @@ func (p *policyRuleIndex) addRolesToHash(digest hash.Hash, subjectName string) {
digest.Write([]byte(crb.RoleRef.Name)) digest.Write([]byte(crb.RoleRef.Name))
digest.Write([]byte(p.revisions.roleRevision("", crb.RoleRef.Name))) digest.Write([]byte(p.revisions.roleRevision("", crb.RoleRef.Name)))
digest.Write(null) digest.Write(null)
logrus.Infof("^^^^^^ addRolesToHash ClusterRoleBindings %s, %s, %s", subjectName, crb.RoleRef.Name, p.revisions.roleRevision("", crb.RoleRef.Name))
} }
for _, rb := range p.getRoleBindings(subjectName) { for _, rb := range p.getRoleBindings(subjectName) {
@ -88,10 +90,12 @@ func (p *policyRuleIndex) addRolesToHash(digest hash.Hash, subjectName string) {
digest.Write([]byte(rb.Namespace)) digest.Write([]byte(rb.Namespace))
digest.Write([]byte(p.revisions.roleRevision(rb.Namespace, rb.RoleRef.Name))) digest.Write([]byte(p.revisions.roleRevision(rb.Namespace, rb.RoleRef.Name)))
digest.Write(null) digest.Write(null)
logrus.Infof("^^^^^^ addRolesToHash Role %s, %s-%s, %s", subjectName, rb.RoleRef.Name, rb.Namespace, p.revisions.roleRevision(rb.Namespace, rb.RoleRef.Name))
case "ClusterRole": case "ClusterRole":
digest.Write([]byte(rb.RoleRef.Name)) digest.Write([]byte(rb.RoleRef.Name))
digest.Write([]byte(rb.Namespace)) digest.Write([]byte(rb.Namespace))
digest.Write([]byte(p.revisions.roleRevision(rb.Namespace, rb.RoleRef.Name))) digest.Write([]byte(p.revisions.roleRevision(rb.Namespace, rb.RoleRef.Name)))
logrus.Infof("^^^^^^ addRolesToHash ClusterRole %s, %s-%s, %s", subjectName, rb.RoleRef.Name, rb.Namespace, p.revisions.roleRevision(rb.Namespace, rb.RoleRef.Name))
digest.Write(null) digest.Write(null)
} }
} }