kube-rbac-proxy icon indicating copy to clipboard operation
kube-rbac-proxy copied to clipboard

Issue-356: Drop unnecessary Authorizer

Open ibihim opened this issue 8 months ago • 1 comments

What

  • Remove non resource attributes generator.

Why

  • We might not need it. Normal requests already have the given form of only "path", "verb" and "user".
  • It might be more secure, as we don't mask other attributes.

Notes

  • It is theoretically a regression.
  • Ref: https://github.com/brancz/kube-rbac-proxy/issues/356

ibihim avatar Mar 13 '25 17:03 ibihim

@ibihim add log output before change, to show an exemplary resource attribute for that case.

Make a (manual) test for what would happen, if you have a resource request.

ibihim avatar Apr 04 '25 11:04 ibihim