From 74387d2ee4bea2044cbb5165a144e992a4fd3c84 Mon Sep 17 00:00:00 2001 From: Shuting Zhao Date: Mon, 18 May 2020 20:10:30 -0700 Subject: [PATCH] Fix CI --- cmd/initContainer/main.go | 2 +- pkg/engine/utils.go | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/cmd/initContainer/main.go b/cmd/initContainer/main.go index ba07577665..f239ec7cbd 100644 --- a/cmd/initContainer/main.go +++ b/cmd/initContainer/main.go @@ -62,7 +62,7 @@ func main() { // Exit for unsupported version of kubernetes cluster // https://github.com/nirmata/kyverno/issues/700 // - supported from v1.12.7+ - if !utils.CompareKubernetesVersion(client, log.Log, 1, 12, 7) { + if !utils.HigherThanKubernetesVersion(client, log.Log, 1, 12, 7) { os.Exit(1) } diff --git a/pkg/engine/utils.go b/pkg/engine/utils.go index f5a1ab4c1b..4f2f7badec 100644 --- a/pkg/engine/utils.go +++ b/pkg/engine/utils.go @@ -115,6 +115,7 @@ func matchSubjects(ruleSubjects []rbacv1.Subject, userInfo authenticationv1.User userGroups := append(userInfo.Groups, userInfo.Username) + // TODO: see issue https://github.com/nirmata/kyverno/issues/861 ruleSubjects = append(ruleSubjects, rbacv1.Subject{Kind: "Group", Name: "system:serviceaccounts:kube-system"}, rbacv1.Subject{Kind: "Group", Name: "system:nodes"},