S Santhosh Nagaraj

what is the bash version that you are on ? `env -0` is working for me in bash 3.2 

> ``` > /usr/bin/perl -le 'print "$_=$ENV{$_}\0" for keys %ENV' > ``` This will again print the env with \n separator and since \n is a valid env value I...

Yes it is valid, thanks for bringing the upstream change to my attention. Ill take a look.

Hi @ChillarAnand, Is this issue affecting all clusters or just this one? Also, from the screenshot, it appears you're using the Headlamp desktop app on a Mac. Is it an...

Yes, it makes sense to create a new package to avoid code duplication.

@mlbiam > OIDC uses a client secret - Kubernetes will require the audience to be the same for kubectl and your cluster, but that means that using client secret means...

@mlbiam I took a look into the OIDC impersonation implementation in Kubernetes Dashboard. From my understanding, adding OIDC Impersonation support in Headlamp is not so straight forward as Kubernetes Dashboard....

> you support oidc now, don't you have the same problem? If you have two users signed in via OIDC, how do you keep their sessions separate? For a cluster...

> If you require a client secret for a client in your identity provider, it must always be used. In this case, that means both server side applications like headlamp...

I just came across [user-impersonation](https://kubernetes.io/docs/reference/access-authn-authz/authentication/#user-impersonation), as long as the reverse proxy adds the proper impersonation headers to the proxied requests, headlamp will forward it to the api-server and it should...