impersonation support using become in k8s about kubernetes.core HOT 5 CLOSED

actually impersonation is provided by k8s
https://kubernetes.io/docs/reference/access-authn-authz/authentication/#user-impersonation

from kubernetes.core.

@bmillemathias Wouldn't using params like username & password or kubeconfig provide the same function of switching users? If not, how?

from kubernetes.core.

@bmillemathias Wouldn't using params like username & password or kubeconfig provide the same function of switching users? If not, how?

For me this is different, the idea is I can have one user that can use for changes requiring limited permissions, and use impersonation (like system:admin often) to make changes to install with higher permissions (like CRD for operators).
Having two different users is less convenient.

I thought also using become is a good analogy with the impersonation mechanism to keep the ansible way of escalation permission.

from kubernetes.core.

@fabianvf Are you still working on this?

from kubernetes.core.

@alinabuzachis I haven't really looked at it, and definitely won't have the bandwidth to pick it up anytime soon

from kubernetes.core.