From a70d9e6b8badf99ed681d9438b1422e67da70d5d Mon Sep 17 00:00:00 2001 From: zwtop Date: Tue, 28 May 2024 20:54:00 +0800 Subject: [PATCH] feat: default authorization to always allow Signed-off-by: zwtop --- pkg/options/options.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pkg/options/options.go b/pkg/options/options.go index 910c088..5ca3e5b 100644 --- a/pkg/options/options.go +++ b/pkg/options/options.go @@ -6,6 +6,7 @@ import ( "github.com/spf13/pflag" "k8s.io/apimachinery/pkg/runtime" "k8s.io/apimachinery/pkg/runtime/serializer" + "k8s.io/apiserver/pkg/authorization/authorizerfactory" genericapiserver "k8s.io/apiserver/pkg/server" genericoptions "k8s.io/apiserver/pkg/server/options" "k8s.io/apiserver/pkg/storage/storagebackend" @@ -26,8 +27,10 @@ type RecommendedConfig struct { // NewRecommendedConfig returns a RecommendedConfig struct with the default values func NewRecommendedConfig(codecs serializer.CodecFactory) *RecommendedConfig { + config := genericapiserver.NewRecommendedConfig(codecs) + config.Authorization.Authorizer = authorizerfactory.NewAlwaysAllowAuthorizer() return &RecommendedConfig{ - RecommendedConfig: *genericapiserver.NewRecommendedConfig(codecs), + RecommendedConfig: *config, LeaderCallbacks: leaderelection.LeaderCallbacks{}, } }