heimdall
heimdall copied to clipboard
Support for k8s TokenReview API
Preflight checklist
- [X] I agree to follow this project's Code of Conduct.
- [X] I have read and am following this repository's Contribution Guidelines."
- [ ] I have discussed this feature request with the community.
Describe the background of your feature request
To allow the usage of k8s built-in authorization resources, there is a need to verify the ServiceAccount token preented in the corresponding request.
Describe your idea
Even that is possible by making use of the JWT authenticator, it would be much more convenient if there would be an authenticator, which would make use of the k8s TokenRequest API.
Are there any workarounds or alternatives?
As written above, one could theoretically use the available JWT authenticator for this purpose. It would however require a pretty complex configuration.
Version
1.13.0-alpha
Additional Context
This FR can be considered as a prerequisite for #1180