Skip to content

Commit 62c60a7

Browse files
fsul7ofsul7o
authored
add: logging authorized principal name (#52)
* add: logging authorized principal name Signed-off-by: fsul7o <75571344+fsul7o@users.noreply.github.com> * fix: authorizer version Signed-off-by: fsul7o <75571344+fsul7o@users.noreply.github.com> * fix: authorizer version Signed-off-by: fsul7o <75571344+fsul7o@users.noreply.github.com> * fix: go mod Signed-off-by: fsul7o <75571344+fsul7o@users.noreply.github.com> * fix: config name Signed-off-by: fsul7o <75571344+fsul7o@users.noreply.github.com> * add: test Signed-off-by: fsul7o <75571344+fsul7o@users.noreply.github.com> * fix: authorizer version Signed-off-by: fsul7o <75571344+fsul7o@users.noreply.github.com> --------- Signed-off-by: fsul7o <75571344+fsul7o@users.noreply.github.com>
1 parent fb39bf8 commit 62c60a7

File tree

7 files changed

+90
-40
lines changed

7 files changed

+90
-40
lines changed

‎config/config.go

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -296,6 +296,9 @@ type Log struct {
296296

297297
// Color represents whether to print ANSI escape code.
298298
Color bool `yaml:"color"`
299+
300+
// Output the name of the authenticated Principal to the log
301+
OutputAuthorizedPrincipalName bool `yaml:"outputAuthorizedPrincipalName"`
299302
}
300303

301304
// Transport exposes a subset of Transport parameters. reference: https://github.com/golang/go/blob/master/src/net/http/transport.go#L95

‎config/config_test.go

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -222,8 +222,9 @@ func TestNew(t *testing.T) {
222222
},
223223
},
224224
Log: Log{
225-
Level: "debug",
226-
Color: true,
225+
Level: "debug",
226+
Color: true,
227+
OutputAuthorizedPrincipalName: false,
227228
},
228229
},
229230
},

‎go.mod

Lines changed: 15 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -28,37 +28,38 @@ replace (
2828
)
2929

3030
require (
31-
github.com/AthenZ/athenz-authorizer/v5 v5.6.2
31+
github.com/AthenZ/athenz-authorizer/v5 v5.7.0
3232
github.com/kpango/glg v1.6.15
3333
github.com/mwitkow/grpc-proxy v0.0.0-20181017164139-0f1106ef9c76
3434
github.com/pkg/errors v0.9.1
3535
github.com/prometheus/client_golang v1.19.1
3636
github.com/prometheus/client_model v0.5.0
37-
golang.org/x/sync v0.8.0
38-
google.golang.org/grpc v1.67.1
39-
google.golang.org/protobuf v1.35.1
37+
golang.org/x/sync v0.12.0
38+
google.golang.org/grpc v1.71.0
39+
google.golang.org/protobuf v1.36.5
4040
gopkg.in/yaml.v2 v2.4.0
4141
)
4242

4343
require (
44-
github.com/AthenZ/athenz v1.12.3 // indirect
44+
github.com/AthenZ/athenz v1.12.13 // indirect
4545
github.com/ardielle/ardielle-go v1.5.2 // indirect
4646
github.com/beorn7/perks v1.0.1 // indirect
4747
github.com/cespare/xxhash/v2 v2.2.0 // indirect
4848
github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.0 // indirect
4949
github.com/fxamacker/cbor/v2 v2.7.0 // indirect
5050
github.com/go-jose/go-jose/v4 v4.0.5 // indirect
5151
github.com/go-logr/logr v1.4.2 // indirect
52-
github.com/goccy/go-json v0.10.3 // indirect
52+
github.com/goccy/go-json v0.10.5 // indirect
5353
github.com/gogo/protobuf v1.3.2 // indirect
5454
github.com/golang-jwt/jwt/v4 v4.5.2 // indirect
5555
github.com/golang/protobuf v1.5.4 // indirect
5656
github.com/google/gofuzz v1.2.0 // indirect
5757
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
5858
github.com/json-iterator/go v1.1.12 // indirect
59-
github.com/klauspost/cpuid/v2 v2.2.8 // indirect
59+
github.com/klauspost/cpuid/v2 v2.2.10 // indirect
6060
github.com/kpango/fastime v1.1.9 // indirect
6161
github.com/kpango/gache/v2 v2.1.1 // indirect
62+
github.com/kr/text v0.2.0 // indirect
6263
github.com/lestrrat-go/blackmagic v1.0.2 // indirect
6364
github.com/lestrrat-go/httpcc v1.0.1 // indirect
6465
github.com/lestrrat-go/httprc/v3 v3.0.0-beta1 // indirect
@@ -72,16 +73,17 @@ require (
7273
github.com/x448/float16 v0.8.4 // indirect
7374
github.com/zeebo/xxh3 v1.0.2 // indirect
7475
golang.org/x/crypto v0.36.0 // indirect
75-
golang.org/x/net v0.33.0 // indirect
76+
golang.org/x/net v0.38.0 // indirect
7677
golang.org/x/sys v0.31.0 // indirect
7778
golang.org/x/text v0.23.0 // indirect
78-
google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 // indirect
79+
google.golang.org/genproto/googleapis/rpc v0.0.0-20250227231956-55c901821b1e // indirect
7980
gopkg.in/inf.v0 v0.9.1 // indirect
8081
gopkg.in/yaml.v3 v3.0.1 // indirect
81-
k8s.io/apimachinery v0.31.2 // indirect
82-
k8s.io/client-go v0.31.2 // indirect
82+
k8s.io/apimachinery v0.32.3 // indirect
83+
k8s.io/client-go v0.32.3 // indirect
8384
k8s.io/klog/v2 v2.130.1 // indirect
84-
k8s.io/utils v0.0.0-20240921022957-49e7df575cb6 // indirect
85+
k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e // indirect
8586
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
86-
sigs.k8s.io/structured-merge-diff/v4 v4.4.1 // indirect
87+
sigs.k8s.io/structured-merge-diff/v4 v4.6.0 // indirect
88+
sigs.k8s.io/yaml v1.4.0 // indirect
8789
)

‎go.sum

Lines changed: 26 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,14 @@
1-
github.com/AthenZ/athenz v1.12.3 h1:aSOS0uTJmyh+dxzPGTXNVM0XQnychDdHKR87S4InEVg=
2-
github.com/AthenZ/athenz v1.12.3/go.mod h1:jFu1eTo+nuroAADlhPtG7xSU/26DsuOFtv5y66zzMn8=
3-
github.com/AthenZ/athenz-authorizer/v5 v5.6.2 h1:uLhVzj+exTUO2AOqxxEj0EP92g2g1TVfN5xb3EPZx7A=
4-
github.com/AthenZ/athenz-authorizer/v5 v5.6.2/go.mod h1:ke1An6DZdEWFaVNCQId64bWWWj94i27sWw5XDODPmMI=
1+
github.com/AthenZ/athenz v1.12.13 h1:OhZNqZsoBXNrKBJobeUUEirPDnwt0HRo4kQMIO1UwwQ=
2+
github.com/AthenZ/athenz v1.12.13/go.mod h1:XXDXXgaQzXaBXnJX6x/bH4yF6eon2lkyzQZ0z/dxprE=
3+
github.com/AthenZ/athenz-authorizer/v5 v5.7.0 h1:dv8stDthB7hSFFhSTRserVrA3Jzdn10vNjg9IUCJi4k=
4+
github.com/AthenZ/athenz-authorizer/v5 v5.7.0/go.mod h1:ke1An6DZdEWFaVNCQId64bWWWj94i27sWw5XDODPmMI=
55
github.com/ardielle/ardielle-go v1.5.2 h1:TilHTpHIQJ27R1Tl/iITBzMwiUGSlVfiVhwDNGM3Zj4=
66
github.com/ardielle/ardielle-go v1.5.2/go.mod h1:I4hy1n795cUhaVt/ojz83SNVCYIGsAFAONtv2Dr7HUI=
77
github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
88
github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
99
github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=
1010
github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
11+
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
1112
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
1213
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
1314
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM=
@@ -22,8 +23,8 @@ github.com/go-jose/go-jose/v4 v4.0.5 h1:M6T8+mKZl/+fNNuFHvGIzDz7BTLQPIounk/b9dw3
2223
github.com/go-jose/go-jose/v4 v4.0.5/go.mod h1:s3P1lRrkT8igV8D9OjyL4WRyHvjB6a4JSllnOrmmBOA=
2324
github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY=
2425
github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY=
25-
github.com/goccy/go-json v0.10.3 h1:KZ5WoDbxAIgm2HNbYckL0se1fHD6rz5j4ywS6ebzDqA=
26-
github.com/goccy/go-json v0.10.3/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M=
26+
github.com/goccy/go-json v0.10.5 h1:Fq85nIqj+gXn/S5ahsiTlK3TmC85qgirsdTP/+DeaC4=
27+
github.com/goccy/go-json v0.10.5/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M=
2728
github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
2829
github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
2930
github.com/golang-jwt/jwt/v4 v4.5.2 h1:YtQM7lnr8iZ+j5q71MGKkNw9Mn7AjHM68uc9g5fXeUI=
@@ -41,8 +42,8 @@ github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnr
4142
github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
4243
github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
4344
github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
44-
github.com/klauspost/cpuid/v2 v2.2.8 h1:+StwCXwm9PdpiEkPyzBXIy+M9KUb4ODm0Zarf1kS5BM=
45-
github.com/klauspost/cpuid/v2 v2.2.8/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
45+
github.com/klauspost/cpuid/v2 v2.2.10 h1:tBs3QSyvjDyFTq3uoc/9xFpCuOsJQFNPiAhYdw2skhE=
46+
github.com/klauspost/cpuid/v2 v2.2.10/go.mod h1:hqwkgyIinND0mEev00jJYCxPNVRVXFQeu1XKlok6oO0=
4647
github.com/kpango/fastime v1.1.9 h1:xVQHcqyPt5M69DyFH7g1EPRns1YQNap9d5eLhl/Jy84=
4748
github.com/kpango/fastime v1.1.9/go.mod h1:vyD7FnUn08zxY4b/QFBZVG+9EWMYsNl+QF0uE46urD4=
4849
github.com/kpango/gache/v2 v2.1.1 h1:nOuVy7saIbs+tMtOyvPIf71Be2lUL88ymV7SQoICOkw=
@@ -83,8 +84,8 @@ github.com/prometheus/common v0.48.0 h1:QO8U2CdOzSn1BBsmXJXduaaW+dY/5QLjfB8svtSz
8384
github.com/prometheus/common v0.48.0/go.mod h1:0/KsvlIEfPQCQ5I2iNSAWKPZziNCvRs5EC6ILDTlAPc=
8485
github.com/prometheus/procfs v0.12.0 h1:jluTpSng7V9hY0O2R9DzzJHYb2xULk9VTR1V1R/k6Bo=
8586
github.com/prometheus/procfs v0.12.0/go.mod h1:pcuDEFsWDnvcgNzo4EEweacyhjeA9Zk3cnaOZAZEfOo=
86-
github.com/rogpeppe/go-internal v1.12.0 h1:exVL4IDcn6na9z1rAb56Vxr+CgyK3nn3O+epU5NdKM8=
87-
github.com/rogpeppe/go-internal v1.12.0/go.mod h1:E+RYuTGaKKdloAfM02xzb0FW3Paa99yedzYV+kq4uf4=
87+
github.com/rogpeppe/go-internal v1.10.0 h1:TMyTOH3F/DB16zRVcYyreMH6GnZZrwQVAoYjRBZyWFQ=
88+
github.com/rogpeppe/go-internal v1.10.0/go.mod h1:UQnix2H7Ngw/k4C5ijL5+65zddjncjaFoBhdsK/akog=
8889
github.com/segmentio/asm v1.2.0 h1:9BQrFxC+YOHJlTlHGkTrFWf59nbL3XnCoFLTwDCI7ys=
8990
github.com/segmentio/asm v1.2.0/go.mod h1:BqMnlJP91P8d+4ibuonYZw9mfnzI9HfxselHZr5aAcs=
9091
github.com/sirupsen/logrus v1.9.0 h1:trlNQbNUG3OdDrDil03MCb1H2o9nJ1x4/5LYw7byDE0=
@@ -118,12 +119,12 @@ golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c=
118119
golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
119120
golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
120121
golang.org/x/net v0.24.0/go.mod h1:2Q7sJY5mzlzWjKtYUEXSlBWCdyaioyXzRB2RtU8KVE8=
121-
golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
122-
golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
122+
golang.org/x/net v0.38.0 h1:vRMAPTMaeGqVhG5QyLJHqNDwecKTomGeqbnfZyKlBI8=
123+
golang.org/x/net v0.38.0/go.mod h1:ivrbrMbzFq5J41QOQh0siUuly180yBYtLp+CKbEaFx8=
123124
golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
124125
golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
125-
golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
126-
golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
126+
golang.org/x/sync v0.12.0 h1:MHc5BpPuC30uJk597Ri8TV3CNZcTLu6B6z4lJy+g6Jw=
127+
golang.org/x/sync v0.12.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
127128
golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
128129
golang.org/x/sys v0.8.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
129130
golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
@@ -135,8 +136,8 @@ golang.org/x/term v0.19.0/go.mod h1:2CuTdWZ7KHSQwUzKva0cbMg6q2DMI3Mmxp+gKJbskEk=
135136
golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
136137
golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
137138
golang.org/x/tools v0.20.0/go.mod h1:WvitBU7JJf6A4jOdg4S1tviW9bhUxkgeCui/0JHctQg=
138-
google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53 h1:X58yt85/IXCx0Y3ZwN6sEIKZzQtDEYaBWrDvErdXrRE=
139-
google.golang.org/genproto/googleapis/rpc v0.0.0-20241015192408-796eee8c2d53/go.mod h1:GX3210XPVPUjJbTUbvwI8f2IpZDMZuPJWDzDuebbviI=
139+
google.golang.org/genproto/googleapis/rpc v0.0.0-20250227231956-55c901821b1e h1:YA5lmSs3zc/5w+xsRcHqpETkaYyK63ivEPzNTcUUlSA=
140+
google.golang.org/genproto/googleapis/rpc v0.0.0-20250227231956-55c901821b1e/go.mod h1:LuRYeWDFV6WOn90g357N17oMCaxpgCnbi/44qJvDn2I=
140141
google.golang.org/grpc v1.63.2 h1:MUeiw1B2maTVZthpU5xvASfTh3LDbxHd6IJ6QQVU+xM=
141142
google.golang.org/grpc v1.63.2/go.mod h1:WAX/8DgncnokcFUldAxq7GeB5DXHDbMF+lLvDomNkRA=
142143
google.golang.org/protobuf v1.33.0 h1:uNO2rsAINq/JlFpSdYEKIZ0uKD/R9cpdv0T+yoGwGmI=
@@ -146,23 +147,23 @@ gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntN
146147
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q=
147148
gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
148149
gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
149-
gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
150150
gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
151151
gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
152152
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
153153
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
154154
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
155-
k8s.io/apimachinery v0.31.2 h1:i4vUt2hPK56W6mlT7Ry+AO8eEsyxMD1U44NR22CLTYw=
156-
k8s.io/apimachinery v0.31.2/go.mod h1:rsPdaZJfTfLsNJSQzNHQvYoTmxhoOEofxtOsF3rtsMo=
157-
k8s.io/client-go v0.31.2 h1:Y2F4dxU5d3AQj+ybwSMqQnpZH9F30//1ObxOKlTI9yc=
158-
k8s.io/client-go v0.31.2/go.mod h1:NPa74jSVR/+eez2dFsEIHNa+3o09vtNaWwWwb1qSxSs=
155+
k8s.io/apimachinery v0.32.3 h1:JmDuDarhDmA/Li7j3aPrwhpNBA94Nvk5zLeOge9HH1U=
156+
k8s.io/apimachinery v0.32.3/go.mod h1:GpHVgxoKlTxClKcteaeuF1Ul/lDVb74KpZcxcmLDElE=
157+
k8s.io/client-go v0.32.3 h1:RKPVltzopkSgHS7aS98QdscAgtgah/+zmpAogooIqVU=
158+
k8s.io/client-go v0.32.3/go.mod h1:3v0+3k4IcT9bXTc4V2rt+d2ZPPG700Xy6Oi0Gdl2PaY=
159159
k8s.io/klog/v2 v2.130.1 h1:n9Xl7H1Xvksem4KFG4PYbdQCQxqc/tTUyrgXaOhHSzk=
160160
k8s.io/klog/v2 v2.130.1/go.mod h1:3Jpz1GvMt720eyJH1ckRHK1EDfpxISzJ7I9OYgaDtPE=
161-
k8s.io/utils v0.0.0-20240921022957-49e7df575cb6 h1:MDF6h2H/h4tbzmtIKTuctcwZmY0tY9mD9fNT47QO6HI=
162-
k8s.io/utils v0.0.0-20240921022957-49e7df575cb6/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
161+
k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e h1:KqK5c/ghOm8xkHYhlodbp6i6+r+ChV2vuAuVRdFbLro=
162+
k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
163163
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 h1:gBQPwqORJ8d8/YNZWEjoZs7npUVDpVXUUOFfW6CgAqE=
164164
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
165-
sigs.k8s.io/structured-merge-diff/v4 v4.4.1 h1:150L+0vs/8DA78h1u02ooW1/fFq/Lwr+sGiqlzvrtq4=
166-
sigs.k8s.io/structured-merge-diff/v4 v4.4.1/go.mod h1:N8hJocpFajUSSeSJ9bOZ77VzejKZaXsTtZo4/u7Io08=
165+
sigs.k8s.io/randfill v0.0.0-20250304075658-069ef1bbf016/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=
166+
sigs.k8s.io/structured-merge-diff/v4 v4.6.0 h1:IUA9nvMmnKWcj5jl84xn+T5MnlZKThmUW1TdblaLVAc=
167+
sigs.k8s.io/structured-merge-diff/v4 v4.6.0/go.mod h1:dDy58f92j70zLsuZVuUX5Wp9vtxXpaZnkPGWeqDfCps=
167168
sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
168169
sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY=

‎test/data/example_config.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -127,3 +127,4 @@ authorization:
127127
log:
128128
level: debug
129129
color: true
130+
outputAuthorizedPrincipalName: false

‎usecase/authz_proxyd.go

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -309,6 +309,13 @@ func newAuthzD(cfg config.Config) (service.Authorizationd, error) {
309309
}
310310
}
311311

312+
var logOpts []authorizerd.Option
313+
if cfg.Log.OutputAuthorizedPrincipalName {
314+
logOpts = []authorizerd.Option{
315+
authorizerd.WithOutputAuthorizedPrincipalLog(),
316+
}
317+
}
318+
312319
authzOptss := [][]authorizerd.Option{
313320
sharedOpts,
314321
pubkeyOpts,
@@ -317,6 +324,7 @@ func newAuthzD(cfg config.Config) (service.Authorizationd, error) {
317324
rcOpts,
318325
atOpts,
319326
jwkOpts,
327+
logOpts,
320328
}
321329
var authzOptsLen int
322330
for _, opts := range authzOptss {

‎usecase/authz_proxyd_test.go

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1117,6 +1117,40 @@ func Test_newAuthzD(t *testing.T) {
11171117
},
11181118
want: true,
11191119
},
1120+
{
1121+
name: "test outputAuthorizedPrincipalName true",
1122+
args: args{
1123+
cfg: config.Config{
1124+
Athenz: config.Athenz{
1125+
URL: "athenz.io",
1126+
Timeout: "30s",
1127+
CAPath: "../test/data/dummyCa.pem",
1128+
},
1129+
Authorization: config.Authorization{
1130+
AthenzDomains: []string{"dummyDom1", "dummyDom2"},
1131+
PublicKey: config.PublicKey{
1132+
SysAuthDomain: "dummy.sys.auth",
1133+
RefreshPeriod: "10s",
1134+
ETagExpiry: "10s",
1135+
ETagPurgePeriod: "10s",
1136+
},
1137+
Policy: config.Policy{
1138+
ExpiryMargin: "10s",
1139+
RefreshPeriod: "10s",
1140+
PurgePeriod: "10s",
1141+
},
1142+
RoleToken: config.RoleToken{
1143+
Enable: true,
1144+
RoleAuthHeader: "Athenz-Role-Auth",
1145+
},
1146+
},
1147+
Log: config.Log{
1148+
OutputAuthorizedPrincipalName: true,
1149+
},
1150+
},
1151+
},
1152+
want: true,
1153+
},
11201154
}
11211155
for _, tt := range tests {
11221156
t.Run(tt.name, func(t *testing.T) {

0 commit comments

Comments
 (0)