opensource/teleport
3
0
Fork 0
mirror of https://github.com/gravitational/teleport.git synced 2026-10-28 03:19:47 +08:00
Code Issues Packages Projects Releases Wiki Activity

Improved error when sending k8s traffic to the proxy's web port (#2918)

Browse Source
This commit is contained in:
Gus Luxton
2019-08-12 14:44:38 -07:00
committed by Alexander Klizhentas
parent f8b4282457
commit 08902c5c2b
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/kube/proxy/forwarder.go
+2
View File
@@ -283,6 +283,8 @@ func (f *Forwarder) authenticate(req *http.Request) (*authContext, error) {
case auth.RemoteUser:
isRemoteUser = true
case auth.BuiltinRole:
f.Warningf("Denying proxy access to unauthenticated user of type %T - this can sometimes be caused by inadvertently sending Kubernetes traffic to the proxy's web port.", userTypeI)
default:
f.Warningf("Denying proxy access to unsupported user type: %T.", userTypeI)
return nil, trace.AccessDenied(accessDeniedMsg)