func()

in cmd/gke-identity-service-migrator/main.go [523:540]


func (r *subjectRecognizer) GetFederatedGroup(sub rbacv1.Subject) (string, bool) {
	if sub.APIGroup != "rbac.authorization.k8s.io" {
		return "", false
	}
	if sub.Kind != "Group" {
		return "", false
	}
	if strings.HasPrefix(sub.Name, "system:") {
		return "", false
	}
	if !strings.HasPrefix(sub.Name, r.groupsIncludePrefix) {
		return "", false
	}
	if strings.HasSuffix(sub.Name, r.groupsExcludeSuffix) {
		return "", false
	}
	return strings.TrimPrefix(sub.Name, r.groupsIncludePrefix), true
}