capsule/pkg/webhook/utils/is_tenant_owner.go

package utils

import (
	authenticationv1 "k8s.io/api/authentication/v1"

	capsulev1beta1 "github.com/clastix/capsule/api/v1beta1"
)

func IsTenantOwner(owners capsulev1beta1.OwnerListSpec, userInfo authenticationv1.UserInfo) bool {
	for _, owner := range owners {
		switch owner.Kind {
		case capsulev1beta1.UserOwner, capsulev1beta1.ServiceAccountOwner:
			if userInfo.Username == owner.Name {
				return true
			}
		case capsulev1beta1.GroupOwner:
			for _, group := range userInfo.Groups {
				if group == owner.Name {
					return true
				}
			}
		}
	}

	return false
}