fix(platform): set cluster user as privileged user (#2066)

tkestack · Aug 22, 2022 · 6b8e4f4 · 6b8e4f4
1 parent e8739f5
commit 6b8e4f4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/auth/filter/inspector.go b/pkg/auth/filter/inspector.go
@@ -59,7 +59,7 @@ func (i *clusterInspector) Inspect(handler http.Handler, c *genericapiserver.Con
 		}
 		ctx := req.Context()
 		username, tenantID := authentication.UsernameAndTenantID(ctx)
-		if (username == i.privilegedUsername || username == "system:apiserver") && tenantID == "" {
+		if (username == i.privilegedUsername || username == "system:apiserver" || username == "system:serviceaccount:clusternet-system:clusternet-app-deployer") && tenantID == "" {
 			handler.ServeHTTP(w, req)
 			return
 		}