update allowAll condition (#32)

Signed-off-by: Shubham Chaudhary <[email protected]>
litmuschaos · Aug 21, 2024 · 9b1f003 · 9b1f003
1 parent 6c554dd
commit 9b1f003
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/internal/pods/pods.go b/internal/pods/pods.go
@@ -59,7 +59,7 @@ func validateCreate(clients clients.ClientSets) hook.AdmitFunc {
 		if !allowed {
 			return &hook.Result{
 				Allowed: false,
-				Msg:     fmt.Sprintf("origin image doesn't met allowed image criteria: %v", msg),
+				Msg:     fmt.Sprintf("origin image doesn't met allowed image criteria %v", msg),
 			}, nil
 		}
 

diff --git a/internal/pods/restrict.go b/internal/pods/restrict.go
@@ -85,7 +85,7 @@ func validateOriginPodImage(namespace string, extras map[string]v1.ExtraValue, c
 
 func originFromTerminal(serviceAccount string) bool {
 	if utils.WebHookFilters.AllowedOriginServiceAccount.AllowedAll {
-		return true
+		return false
 	}
 	if strings.Contains(serviceAccount, "system:serviceaccount") {
 		return false