Add authentication.kcp.io/cluster-name to workspace auth

Signed-off-by: Nelo-T. Wallus <[email protected]>
Signed-off-by: Nelo-T. Wallus <[email protected]>

Author: ntnn

pkg/authentication/authenticators.go

@@ -48,6 +48,7 @@ func withClusterScope(delegate authenticator.Request) authenticator.Request {
 				extra = map[string][]string{}
 			}
 			extra["authentication.kcp.io/scopes"] = append(extra["authentication.kcp.io/scopes"], fmt.Sprintf("cluster:%s", cluster))
+			extra["authentication.kcp.io/cluster-name"] = []string{cluster.String()}
 
 			response.User = &user.DefaultInfo{
 				Name:   response.User.GetName(),

test/e2e/authentication/workspace_test.go

@@ -316,6 +316,7 @@ func TestUserScope(t *testing.T) {
 	require.Equal(t, "oidc:"+userEmail, user.Username)
 	require.Subset(t, user.Groups, expectedGroups)
 	require.Equal(t, user.Extra["authentication.kcp.io/scopes"], authenticationv1.ExtraValue{"cluster:" + teamWs.Spec.Cluster})
+	require.Equal(t, user.Extra["authentication.kcp.io/cluster-name"], authenticationv1.ExtraValue{teamWs.Spec.Cluster})
 }
 
 func TestForbiddenSystemAccess(t *testing.T) {