k8s-merge-robot 1a1229e206 Merge pull request #24795 from deads2k/use-all-attributes ...

Automatic merge from submit-queue

enable resource name and service account cases for impersonation

Adds the resource name check since that attribute was added for authorization.  Also adds a check against a separate resource for service accounts.  Allowing impersonation of service accounts to use a different resource check places control of impersonation with the same users to have the power to get the SA tokens directly.

@kubernetes/kube-iam 
@sgallagher FYI

2016-05-09 04:58:19 -07:00

38 KiB

Raw Blame History

View Raw