Replace sanitized username with google pattern service account usernames

4 weeks ago · 3ab951f963
parent 0a43b55d53
commit 3ab951f963
1 changed files with 1 additions and 1 deletions
--- a/authority/provisioner/gcp.go
+++ b/authority/provisioner/gcp.go
@ -482,7 +482,7 @@ func (p *GCP) genHostOptions(_ context.Context, claims *gcpPayload) (SignSSHOpti
 func (p *GCP) genUserOptions(_ context.Context, claims *gcpPayload) (SignSSHOptions, string, []string, sshutil.CertType, string) {
 	keyID := claims.Email
 	principals := []string{
-		SanitizeSSHUserPrincipal(claims.Email),
+		fmt.Sprintf("sa_%v", claims.Subject),
 		claims.Email,
 	}