Merge pull request #45112 from liggitt/quote-log-message

Automatic merge from submit-queue Quote groups in deny log message Helps distinguish cases where an external authenticator is incorrectly combining multiple groups into one. Before: > RBAC DENY: user "bob" groups [system:masters view system:authenticated] cannot "list" resource "pods" cluster-wide After: > RBAC DENY: user "bob" groups ["system:masters view" "system:authenticated"] cannot "list" resource "pods" cluster-wide

Merge pull request #45112 from liggitt/quote-log-message
dc5744b6 · Kubernetes Submit Queue · GitHub · ce01882e · e87bce1f · dc5744b6
Commit dc5744b6 authored Apr 28, 2017 by Kubernetes Submit Queue Committed by GitHub Apr 28, 2017
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

rbac.go plugin/pkg/auth/authorizer/rbac/rbac.go +1 -1

No files found.
--- a/plugin/pkg/auth/authorizer/rbac/rbac.go
+++ b/plugin/pkg/auth/authorizer/rbac/rbac.go
@@ -111,7 +111,7 @@ func (r *RBACAuthorizer) Authorize(requestAttributes authorizer.Attributes) (boo
 			scope = "cluster-wide"
 		}
-		glog.Infof("RBAC DENY: user %q groups %v cannot %s %s", requestAttributes.GetUser().GetName(), requestAttributes.GetUser().GetGroups(), operation, scope)
+		glog.Infof("RBAC DENY: user %q groups %q cannot %s %s", requestAttributes.GetUser().GetName(), requestAttributes.GetUser().GetGroups(), operation, scope)
 	}
 	reason := ""