bugfix: add nil check on label selectors

datum-cloud · Dec 13, 2024 · e5d868c · e5d868c
1 parent edd96f3
commit e5d868c
Showing 1 changed file with 9 additions and 7 deletions.
diff --git a/cmd/datum-authorization-webhook/app/internal/webhook/webhook.go b/cmd/datum-authorization-webhook/app/internal/webhook/webhook.go
@@ -35,13 +35,15 @@ func NewAuthorizerWebhook(authzer authorizer.Authorizer) *Webhook {
 				attrs.Subresource = resourceAttrs.Subresource
 				attrs.Name = resourceAttrs.Name
 				attrs.ResourceRequest = true
-				for _, requirement := range r.Spec.ResourceAttributes.LabelSelector.Requirements {
-					req, _ := labels.NewRequirement(
-						requirement.Key,
-						selection.Operator(requirement.Operator),
-						requirement.Values,
-					)
-					attrs.LabelSelectorRequirements = append(attrs.LabelSelectorRequirements, *req)
+				if resourceAttrs.LabelSelector != nil {
+					for _, requirement := range resourceAttrs.LabelSelector.Requirements {
+						req, _ := labels.NewRequirement(
+							requirement.Key,
+							selection.Operator(requirement.Operator),
+							requirement.Values,
+						)
+						attrs.LabelSelectorRequirements = append(attrs.LabelSelectorRequirements, *req)
+					}
 				}
 			}