From b92e768beb82298e58e7c56f4c1ddb9983c94d40 Mon Sep 17 00:00:00 2001 From: huanggze Date: Sat, 27 Jun 2020 10:37:59 +0800 Subject: [PATCH] logging: update rolebinding check Signed-off-by: huanggze --- pkg/models/tenant/tenant.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/pkg/models/tenant/tenant.go b/pkg/models/tenant/tenant.go index 68a92670a..4d4e72a45 100644 --- a/pkg/models/tenant/tenant.go +++ b/pkg/models/tenant/tenant.go @@ -579,6 +579,7 @@ func (t *tenantOperator) QueryLogs(user user.Info, query *loggingv1alpha2.Query) Resource: "pods", Subresource: "log", ResourceRequest: true, + ResourceScope: request.NamespaceScope, } decision, _, err := t.authorizer.Authorize(podLogs) if err != nil { @@ -649,6 +650,7 @@ func (t *tenantOperator) ExportLogs(user user.Info, query *loggingv1alpha2.Query Resource: "pods", Subresource: "log", ResourceRequest: true, + ResourceScope: request.NamespaceScope, } decision, _, err := t.authorizer.Authorize(podLogs) if err != nil {