Merge pull request #2256 from huanggze/role
logging: update rolebinding check
This commit is contained in:
@@ -585,6 +585,7 @@ func (t *tenantOperator) QueryLogs(user user.Info, query *loggingv1alpha2.Query)
|
|||||||
Resource: "pods",
|
Resource: "pods",
|
||||||
Subresource: "log",
|
Subresource: "log",
|
||||||
ResourceRequest: true,
|
ResourceRequest: true,
|
||||||
|
ResourceScope: request.NamespaceScope,
|
||||||
}
|
}
|
||||||
decision, _, err := t.authorizer.Authorize(podLogs)
|
decision, _, err := t.authorizer.Authorize(podLogs)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
@@ -655,6 +656,7 @@ func (t *tenantOperator) ExportLogs(user user.Info, query *loggingv1alpha2.Query
|
|||||||
Resource: "pods",
|
Resource: "pods",
|
||||||
Subresource: "log",
|
Subresource: "log",
|
||||||
ResourceRequest: true,
|
ResourceRequest: true,
|
||||||
|
ResourceScope: request.NamespaceScope,
|
||||||
}
|
}
|
||||||
decision, _, err := t.authorizer.Authorize(podLogs)
|
decision, _, err := t.authorizer.Authorize(podLogs)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
|||||||
Reference in New Issue
Block a user