Skip to content

parse service name from client_id - #277

Merged
kontik-pk merged 2 commits into
masterfrom
fix/s2i-auth
Aug 4, 2026
Merged

kontik-pk merged 2 commits into
masterfrom
fix/s2i-auth

Conversation

@kontik-pk

@kontik-pk kontik-pk commented Aug 3, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Extends Talos pool-user selection to support s2i|-prefixed clientIds. When a clientId contains a | separator (e.g. s2i|test-service), pg_doorman now also checks for a pool user srv-<service-name> — the part after the separator (e.g. srv-test-service).
Selection order

  1. clientId (personal pool)
  2. srv-<clientId> (service pool)
  3. srv-<service-name> for s2i|-prefixed clientId (e.g. s2i|test-service → srv-test-service)
  4. max token role (owner / read_write / read_only)

@kontik-pk
kontik-pk requested a review from vadv August 3, 2026 12:03
@kontik-pk
kontik-pk merged commit 4a57aed into master Aug 4, 2026
50 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant