in cmd/gke-identity-service-migrator/main.go [523:540]
func (r *subjectRecognizer) GetFederatedGroup(sub rbacv1.Subject) (string, bool) {
if sub.APIGroup != "rbac.authorization.k8s.io" {
return "", false
}
if sub.Kind != "Group" {
return "", false
}
if strings.HasPrefix(sub.Name, "system:") {
return "", false
}
if !strings.HasPrefix(sub.Name, r.groupsIncludePrefix) {
return "", false
}
if strings.HasSuffix(sub.Name, r.groupsExcludeSuffix) {
return "", false
}
return strings.TrimPrefix(sub.Name, r.groupsIncludePrefix), true
}