fix: address custom audience issue

2026-09-22 13:39:35 +00:00 · 2024-11-28 13:32:40 +08:00
parent 84ff71fef2
commit 105eb70fd9
1 changed files with 2 additions and 1 deletions
--- a/backend/src/services/identity-kubernetes-auth/identity-kubernetes-auth-service.ts
+++ b/backend/src/services/identity-kubernetes-auth/identity-kubernetes-auth-service.ts
@@ -120,7 +120,8 @@ export const identityKubernetesAuthServiceFactory = ({
          apiVersion: "authentication.k8s.io/v1",
          kind: "TokenReview",
          spec: {
-            token: serviceAccountJwt
+            token: serviceAccountJwt,
+            ...(identityKubernetesAuth.allowedAudience ? { audiences: [identityKubernetesAuth.allowedAudience] } : {})
          }
        },
        {