Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Introduce Impersonate-UID header #99961

Merged
merged 1 commit into from
Jul 7, 2021
Merged

Commits on Jul 6, 2021

  1. This introduces an Impersonate-Uid header to server side code.

    UserInfo contains a uid field alongside groups, username and extra.
    This change makes it possible to pass a UID through as an impersonation header like you
    can with Impersonate-Group, Impersonate-User and Impersonate-Extra.
    
    This PR contains:
    
    * Changes to impersonation.go to parse the Impersonate-Uid header and authorize uid impersonation
    * Unit tests for allowed and disallowed impersonation cases
    * An integration test that creates a CertificateSigningRequest using impersonation,
      and ensures that the API server populates the correct impersonated spec.uid upon creation.
    margocrawf committed Jul 6, 2021
    Configuration menu
    Copy the full SHA
    74f5ed6 View commit details
    Browse the repository at this point in the history