logging: update rolebinding check

Signed-off-by: huanggze <loganhuang@yunify.com>
This commit is contained in:
huanggze
2020-06-27 10:37:59 +08:00
parent d91047588f
commit b92e768beb

View File

@@ -579,6 +579,7 @@ func (t *tenantOperator) QueryLogs(user user.Info, query *loggingv1alpha2.Query)
Resource: "pods",
Subresource: "log",
ResourceRequest: true,
ResourceScope: request.NamespaceScope,
}
decision, _, err := t.authorizer.Authorize(podLogs)
if err != nil {
@@ -649,6 +650,7 @@ func (t *tenantOperator) ExportLogs(user user.Info, query *loggingv1alpha2.Query
Resource: "pods",
Subresource: "log",
ResourceRequest: true,
ResourceScope: request.NamespaceScope,
}
decision, _, err := t.authorizer.Authorize(podLogs)
if err != nil {