From 5e5c9a8d04042f9e1d939b1863f62d3a80a2bf79 Mon Sep 17 00:00:00 2001 From: lynxcat Date: Mon, 10 Jan 2022 15:34:04 +0800 Subject: [PATCH] Update pkg/kapis/terminal/v1alpha2/handler.go Co-authored-by: hongming --- pkg/kapis/terminal/v1alpha2/handler.go | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/pkg/kapis/terminal/v1alpha2/handler.go b/pkg/kapis/terminal/v1alpha2/handler.go index 9e093a2f5..5a3e114b6 100644 --- a/pkg/kapis/terminal/v1alpha2/handler.go +++ b/pkg/kapis/terminal/v1alpha2/handler.go @@ -95,14 +95,13 @@ func (t *terminalHandler) handleShellAccessToNode(request *restful.Request, resp user, _ := requestctx.UserFrom(request.Request.Context()) - createPodsExec := authorizer.AttributesRecord{ + createNodesExec := authorizer.AttributesRecord{ User: user, Verb: "create", - Resource: "pods", + Resource: "nodes", Subresource: "exec", - Namespace: "kubesphere-controls-system", ResourceRequest: true, - ResourceScope: requestctx.NamespaceScope, + ResourceScope: requestctx.ClusterScope, } decision, reason, err := t.authorizer.Authorize(createPodsExec)