kubernetes-sigs/kustomize
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kustomize.git synced 2026-09-15 12:18:57 +00:00
Code Issues Packages Projects Releases 1 Wiki Activity

Add function to check role binding namespace

Browse Source
This commit is contained in:
Donny Xia
2020-07-22 10:17:56 -07:00
parent b7f7536cfa
commit 3907643880
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
api/resmap/resmap.go
View File

@@ -618,13 +618,19 @@ func (m *resWrangler) SubsetThatCouldBeReferencedByResource(
// the outer most suffix and the last prefix. Use PrefixedSuffixesEquals instead. // the outer most suffix and the last prefix. Use PrefixedSuffixesEquals instead.
resId := r.CurId() resId := r.CurId()
if (!isInputIdNamespaceable || !resId.IsNamespaceableKind() || resId.IsNsEquals(inputId) || if (!isInputIdNamespaceable || !resId.IsNamespaceableKind() || resId.IsNsEquals(inputId) ||
subjectNamespaces[r.GetNamespace()]) && r.InSameKustomizeCtx(rctxm) { isRoleBindingNamespace(&subjectNamespaces, r.GetNamespace())) && r.InSameKustomizeCtx(rctxm) {
result.append(r) result.append(r)
} }
} }
return result return result
} }
// isRoleBindingNamespace returns true is the namespace `ns` is in role binding
// namespaces `m`
func isRoleBindingNamespace(m *map[string]bool, ns string) bool {
return (*m)[ns]
}
// getNamespacesForRoleBinding returns referenced ServiceAccount namespaces if the inputRes is // getNamespacesForRoleBinding returns referenced ServiceAccount namespaces if the inputRes is
// a RoleBinding // a RoleBinding
func getNamespacesForRoleBinding(inputRes *resource.Resource) map[string]bool { func getNamespacesForRoleBinding(inputRes *resource.Resource) map[string]bool {