Merge pull request #504 from sangkenlee/policy-guardrule-fix

policy guard rule audit bugfix
openinfradev · May 23, 2024 · 0906ad3 · 0906ad3
2 parents e0c8cd8 + 552526b
commit 0906ad3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/policy-template/tksguard-rego.go b/internal/policy-template/tksguard-rego.go
@@ -23,7 +23,7 @@ const tks_guard_rego_rulename = `  # Do not delete following line, added by TKS
 const tks_guard_rego_rulelogic = `
 # Do not delete or edit following rule, managed by TKS
 ___not_tks_triggered_request___ {
-  not input.review.userInfo
+  not input.review.userInfo.username
 } {
   tks_users := {"kubernetes-admin","system:serviceaccount:kube-system:argocd-manager"}
   tks_groups := {"system:masters"}