in cmd/gke-identity-service-migrator/main.go [504:521]
func (r *subjectRecognizer) GetFederatedUser(sub rbacv1.Subject) (string, bool) {
if sub.APIGroup != "rbac.authorization.k8s.io" {
return "", false
}
if sub.Kind != "User" {
return "", false
}
if strings.HasPrefix(sub.Name, "system:") {
return "", false
}
if !strings.HasPrefix(sub.Name, r.userIncludePrefix) {
return "", false
}
if !strings.HasSuffix(sub.Name, r.userIncludeSuffix) {
return "", false
}
return strings.TrimPrefix(sub.Name, r.userIncludePrefix), true
}