From e3eb17c3edb4c2ba58884d475e58d10c9f85b965 Mon Sep 17 00:00:00 2001
From: Aviram Hassan <aviramyhassan@gmail.com>
Date: Sat, 5 Nov 2022 13:29:26 +0200
Subject: [PATCH] add cmd-drop-env to AuthProviderConfig

Co-authored-by: Eirik A <sszynrae@gmail.com>
Signed-off-by: Aviram Hassan <aviramyhassan@gmail.com>
---
 kube-client/src/client/auth/mod.rs | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/kube-client/src/client/auth/mod.rs b/kube-client/src/client/auth/mod.rs
index 20849752a..49337266a 100644
--- a/kube-client/src/client/auth/mod.rs
+++ b/kube-client/src/client/auth/mod.rs
@@ -363,9 +363,16 @@ fn token_from_gcp_provider(provider: &AuthProviderConfig) -> Result<ProviderToke
     // Command-based token source
     if let Some(cmd) = provider.config.get("cmd-path") {
         let params = provider.config.get("cmd-args").cloned().unwrap_or_default();
-
+        // NB: This property does currently not exist upstream in client-go
+        // See https://github.com/kube-rs/kube/issues/1060
+        let drop_env = provider.config.get("cmd-drop-env").cloned().unwrap_or_default();
         // TODO splitting args by space is not safe
-        let output = Command::new(cmd)
+        let mut command = Command::new(cmd);
+        // Do not pass the following env vars to the command
+        for env in drop_env.trim().split(' ') {
+            command.env_remove(env);
+        }
+        let output = command
             .args(params.trim().split(' '))
             .output()
             .map_err(|e| Error::AuthExec(format!("Executing {:} failed: {:?}", cmd, e)))?;