Reflect DecisionNoOpinion in RBAC authorizer logs (kubernetes#89608)

gauravsofat · web-flow · commit ac0ce7338ef2 · 2020-04-08T13:37:44.000-07:00
* Reflect DecisionNoOpinion in RBAC authorizer logs

* Modify RBAC authorizer log message
diff --git a/plugin/pkg/auth/authorizer/rbac/rbac.go b/plugin/pkg/auth/authorizer/rbac/rbac.go
@@ -116,7 +116,7 @@ func (r *RBACAuthorizer) Authorize(ctx context.Context, requestAttributes author
 			scope = "cluster-wide"
 		}
 
-		klog.Infof("RBAC DENY: user %q groups %q cannot %s %s", requestAttributes.GetUser().GetName(), requestAttributes.GetUser().GetGroups(), operation, scope)
+		klog.Infof("RBAC: no rules authorize user %q with groups %q to %s %s", requestAttributes.GetUser().GetName(), requestAttributes.GetUser().GetGroups(), operation, scope)
 	}
 
 	reason := ""

Original file line number	Diff line number	Diff line change
`@@ -116,7 +116,7 @@ func (r *RBACAuthorizer) Authorize(ctx context.Context, requestAttributes author`
`116`	`116`	`scope = "cluster-wide"`
`117`	`117`	`}`
`118`	`118`
`119`		`- klog.Infof("RBAC DENY: user %q groups %q cannot %s %s", requestAttributes.GetUser().GetName(), requestAttributes.GetUser().GetGroups(), operation, scope)`
	`119`	`+ klog.Infof("RBAC: no rules authorize user %q with groups %q to %s %s", requestAttributes.GetUser().GetName(), requestAttributes.GetUser().GetGroups(), operation, scope)`
`120`	`120`	`}`
`121`	`121`
`122`	`122`	`reason := ""`