K8s: Set X-Remote-Extra-User-Instance-Role header for SignedInUser (#87958)

2024-05-16 12:57:49 +03:00
parent 5c27f223af
commit fbda55316d
1 changed files with 3 additions and 0 deletions
@@ -38,6 +38,9 @@ func signedInUserAuthenticator(req *http.Request) (*authenticator.Response, bool
 	if signedInUser.IDToken != "" {
 		userInfo.Extra["id-token"] = []string{signedInUser.IDToken}
 	}
+	if signedInUser.OrgRole.IsValid() {
+		userInfo.Extra["user-instance-role"] = []string{string(signedInUser.OrgRole)}
+	}

 	return &authenticator.Response{
 		User: userInfo,