Deprecate RBAC UserAll, convert v1alpha1 User * rolebindings to Group system:authenticated

2017-01-04 17:11:16 -05:00
parent 6b70211568
commit b8c2ad6d42
10 changed files with 230 additions and 18 deletions
--- a/pkg/apis/rbac/validation/rulevalidation.go
+++ b/pkg/apis/rbac/validation/rulevalidation.go
@@ -168,7 +168,7 @@ func appliesTo(user user.Info, bindingSubjects []rbac.Subject, namespace string)
 func appliesToUser(user user.Info, subject rbac.Subject, namespace string) bool {
 	switch subject.Kind {
 	case rbac.UserKind:
-		return subject.Name == rbac.UserAll || user.GetName() == subject.Name
+		return user.GetName() == subject.Name

 	case rbac.GroupKind:
 		return has(user.GetGroups(), subject.Name)