mirror of
https://github.com/projectcapsule/capsule.git
synced 2026-08-23 06:26:43 +00:00
cc4fb45d70
feat: upstream enterprise preview --------- Signed-off-by: Oliver Baehler <oliver@sudo-i.net> Co-authored-by: CorentinPtrl <pitrel.corentin@gmail.com>
50 lines
1.1 KiB
Go
50 lines
1.1 KiB
Go
// Copyright 2020-2026 Project Capsule Authors
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package handlers
|
|
|
|
import (
|
|
"context"
|
|
|
|
"sigs.k8s.io/controller-runtime/pkg/client"
|
|
"sigs.k8s.io/controller-runtime/pkg/webhook/admission"
|
|
|
|
"github.com/projectcapsule/capsule/pkg/runtime/configuration"
|
|
"github.com/projectcapsule/capsule/pkg/users"
|
|
)
|
|
|
|
type NewObjectFunc[T client.Object] func() T
|
|
|
|
func ResolveAdmissionUser(
|
|
ctx context.Context,
|
|
c client.Client,
|
|
req admission.Request,
|
|
config configuration.Configuration,
|
|
) users.AdmissionUser {
|
|
user := users.NewAdmissionUser(users.AdmissionUserUnknown, req.UserInfo)
|
|
|
|
if user.IsControllerServiceAccount() {
|
|
user.Type = users.AdmissionUserAdmin
|
|
|
|
return user
|
|
}
|
|
|
|
if users.HasIgnoredGroup(req.UserInfo.Groups, config.IgnoreUserWithGroups()) {
|
|
return user
|
|
}
|
|
|
|
if config.Administrators().IsPresent(req.UserInfo.Username, req.UserInfo.Groups) {
|
|
user.Type = users.AdmissionUserAdmin
|
|
|
|
return user
|
|
}
|
|
|
|
if users.IsCapsuleUser(ctx, c, config, req.UserInfo.Username, req.UserInfo.Groups) {
|
|
user.Type = users.AdmissionUserCapsule
|
|
|
|
return user
|
|
}
|
|
|
|
return user
|
|
}
|