softimpersonation

Documentation

Overview

Package softimpersonation implements "Soft impersonation", which allows carrying the whole description of the user an action is done for, without really impersonating this user and thus impacting the authorizations on the KCP side.

This is particularly useful in virtual workspaces which are connected to KCP as privileged user, but act on behalf of a user, for example when crating a workspace through the `workspaces` virtual workspace.

Index

• func UserInfoFromRequestHeader(r *http.Request) (kuser.Info, error)
• func WithSoftImpersonatedConfig(config *rest.Config, userInfo kuser.Info) (*rest.Config, error)

Functions

func UserInfoFromRequestHeader

func UserInfoFromRequestHeader(r *http.Request) (kuser.Info, error)

UserInfoFromRequestHeader extract a user.Info object from an internal request header set by a softly impersonated client.

func WithSoftImpersonatedConfig

func WithSoftImpersonatedConfig(config *rest.Config, userInfo kuser.Info) (*rest.Config, error)

WithSoftImpersonatedConfig returns a clone of the input rest.Config with an additional header containing the given user info marshalled in Json.