fix: use groups and username from tokenreview auth step in authconfig…

…, fixes RHOAIENG-16025 Signed-off-by: Dhiraj Bokde <[email protected]>
opendatahub-io · Nov 18, 2024 · 793c869 · 793c869
1 parent 4dc22a7
commit 793c869
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/internal/controller/config/templates/istio/authconfig.yaml.tmpl b/internal/controller/config/templates/istio/authconfig.yaml.tmpl
@@ -35,9 +35,9 @@ spec:
     k8s-rbac:
       kubernetesSubjectAccessReview:
         user:
-          selector: auth.identity.metadata.annotations.userid
-        groups:
-          - {{.Name}}-users
+          selector: auth.identity.user.username
+        authorizationGroups:
+          selector: auth.identity.user.groups
         resourceAttributes:
           verb:
             value: get