fix: preventing index out of range when sa is impersonating

Stratio · Mar 2, 2023 · da78423 · da78423
1 parent 3991359
commit da78423
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/webhook/utils/is_capsule_user.go b/pkg/webhook/utils/is_capsule_user.go
@@ -28,9 +28,9 @@ func IsCapsuleUser(ctx context.Context, req admission.Request, clt client.Client
 	if sets.NewString(req.UserInfo.Groups...).Has("system:serviceaccounts") {
 		parts := strings.Split(req.UserInfo.Username, ":")
 
-		targetNamespace := parts[2]
+		if len(parts) == 4 {
+			targetNamespace := parts[2]
 
-		if len(targetNamespace) > 0 {
 			tl := &capsulev1beta2.TenantList{}
 			if err := clt.List(ctx, tl, client.MatchingFieldsSelector{Selector: fields.OneTermEqualSelector(".status.namespaces", targetNamespace)}); err != nil {
 				return false