ContainerImage.Pinniped/internal/concierge
Monis Khan 269db6b7c2
impersonator: always authorize every request
This change updates the impersonator to always authorize every
request instead of relying on the Kuberentes API server to perform
the check on the impersonated request.  This protects us from
scenarios where we fail to correctly impersonate the user due to
some bug in our proxy logic.  We still rely completely on the API
server to perform admission checks on the impersonated requests.

Signed-off-by: Monis Khan <mok@vmware.com>
2021-06-14 12:53:09 -04:00
..
apiserver certauthority.go: Refactor issuing client versus server certs 2021-03-12 16:09:37 -08:00
impersonator impersonator: always authorize every request 2021-06-14 12:53:09 -04:00
scheme Remove metav1.ExportOptions from scheme tests. 2021-04-09 13:00:50 -05:00
server dynamiccert: split into serving cert and CA providers 2021-03-15 12:24:07 -04:00