kubernetes/plugin/pkg/auth/authorizer/node
Davanum Srinivas 2490cfa4f5
node: fix graph populator fast-path to check ExtendedResourceClaimStatus
Pods using DRAExtendedResource (e.g. nvidia.com/gpu) have no
Spec.ResourceClaims, so ResourceClaimStatuses stays nil. The updatePod
fast-path skipped AddPod when only ExtendedResourceClaimStatus changed,
leaving the synthesized claim→pod→node edge out of the authorization graph.

Add PodExtendedStatusEqual to the fast-path guard, matching what the
scheduler event handler already does in events.go.
2026-05-05 11:50:20 -04:00
..
graph.go Promote PodCertificateRequests to v1beta1 2025-11-02 05:33:44 +00:00
graph_populator.go node: fix graph populator fast-path to check ExtendedResourceClaimStatus 2026-05-05 11:50:20 -04:00
graph_test.go Promote PodCertificateRequests to v1beta1 2025-11-02 05:33:44 +00:00
intset.go Switch node authorizer index to refcounts 2020-02-10 13:24:13 -05:00
intset_test.go Switch node authorizer index to refcounts 2020-02-10 13:24:13 -05:00
metrics.go Improve observability of node authorizer: 2020-11-10 08:40:46 +01:00
node_authorizer.go Drop AuthorizeNodeWithSelectors feature gate 2026-04-28 10:10:52 -07:00
node_authorizer_test.go node: fix graph populator fast-path to check ExtendedResourceClaimStatus 2026-05-05 11:50:20 -04:00
OWNERS Check in OWNERS modified by update-yamlfmt.sh 2021-12-09 21:31:26 -05:00