kube-rbac-proxy
kube-rbac-proxy copied to clipboard
Issue-356: Drop unnecessary Authorizer
What
- Remove non resource attributes generator.
Why
- We might not need it. Normal requests already have the given form of only "path", "verb" and "user".
- It might be more secure, as we don't mask other attributes.
Notes
- It is theoretically a regression.
- Ref: https://github.com/brancz/kube-rbac-proxy/issues/356
@ibihim add log output before change, to show an exemplary resource attribute for that case.
Make a (manual) test for what would happen, if you have a resource request.