Is it possible to set user and user-group in exec ?

[Seasquash]

Hi there.
I'm trying to execute a command in a pod but have to use a different user/group.
The corresponding command using kubectl would be something like:

kubectl exec --as xxx --as-group xxx:xxx ...

At the moment, I can access the pod and run the command but fails with a 403:

let pods_api: Api<Pod> = Api::namespaced(client, "xxxx".into());
let attached = pods_api.exec(&pod_name, command, &AttachParams {
        container: Some("xxxxxx".into()),
        stderr: false,
        ..Default::default()
    }).await?;

Any hint?

Thanks!

[clux]

Hey there, the impersonation stuff does go into the kubeconfig normally. To do it programmatically you need to override the AuthInfo struct either in Config or in ConfigLoader.

It is also possible to use some of our debug variables for quick tests:

KUBE_RS_DEBUG_IMPERSONATE_USER=xxx KUBE_RS_DEBUG_IMPERSONATE_GROUP=xxx cargo run

[Seasquash]

Ahhh, fair point... I'll try with AuthInfo, cause I did have a go at setting those env variables but with no luck ...
I'm wondering if there's more stuff under the hood that needs wiring up on my side, since the role is handled by Okta, but that's a different story.. 😝
Thanks Erik!

[Seasquash]

Just dropping a wee note: thanks for pointing me in the right direction! Dug into Kubernetes API a bit more and managed to read from the file config and override the AuthInfo with my impersonation properties.