Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v11] Fix audit log report of kubernetes_users and kubernetes_groups #28339

Merged
merged 1 commit into from
Jun 27, 2023

Conversation

tigrato
Copy link
Contributor

@tigrato tigrato commented Jun 27, 2023

Backport of #28204 to branch/v11

lib/kube/proxy/forwarder.go Outdated Show resolved Hide resolved
…28204)

Prior to this commit, if the user specified a filter for a user -
`--as` - or group - `--as-group` -, Teleport incorrectly reported the
used groups and users for the request. It reported all users and groups
the user is allowed to impersonate instead of the ones actually used for
the request.

This commit fixes that behavior by applying a filter based on the users
and groups received from Impersonation headers.

Fixes #28166
@tigrato tigrato force-pushed the tigrato/backport-28204-v11 branch from 587c3c5 to a3faf33 Compare June 27, 2023 13:39
@tigrato tigrato enabled auto-merge June 27, 2023 13:39
@tigrato tigrato added this pull request to the merge queue Jun 27, 2023
Merged via the queue into branch/v11 with commit 618fa6b Jun 27, 2023
16 checks passed
@tigrato tigrato deleted the tigrato/backport-28204-v11 branch June 27, 2023 14:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants