From a339a2dad3aa8701bc32c45081c93b27278e7f84 Mon Sep 17 00:00:00 2001 From: Jo Date: Fri, 31 Oct 2025 15:37:43 +0100 Subject: [PATCH] AuthZ: Instantiate needed clients for IAM hooks (#113268) build API with zanzana hooks support --- pkg/registry/apis/iam/register.go | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/pkg/registry/apis/iam/register.go b/pkg/registry/apis/iam/register.go index 8c328e9963d..bb722e48670 100644 --- a/pkg/registry/apis/iam/register.go +++ b/pkg/registry/apis/iam/register.go @@ -99,21 +99,26 @@ func RegisterAPIService( return builder, nil } -// TODO zClient, zTickets, reg func NewAPIService( accessClient types.AccessClient, dbProvider legacysql.LegacyDatabaseProvider, features featuremgmt.FeatureToggles, + zClient zanzana.Client, + reg prometheus.Registerer, ) *IdentityAccessManagementAPIBuilder { store := legacy.NewLegacySQLStores(dbProvider) resourcePermissionsStorage := resourcepermission.ProvideStorageBackend(dbProvider) resourceAuthorizer := gfauthorizer.NewResourceAuthorizer(accessClient) + registerMetrics(reg) return &IdentityAccessManagementAPIBuilder{ store: store, display: user.NewLegacyDisplayREST(store), resourcePermissionsStorage: resourcePermissionsStorage, logger: log.New("iam.apis"), features: features, + zClient: zClient, + zTickets: make(chan bool, MaxConcurrentZanzanaWrites), + reg: reg, authorizer: authorizer.AuthorizerFunc( func(ctx context.Context, a authorizer.Attributes) (authorizer.Decision, string, error) { // For now only authorize resourcepermissions resource