Ryan Richard 0b300cbe42 Use TokenCredentialRequest instead of base64 token with impersonator ... To make an impersonation request, first make a TokenCredentialRequest to get a certificate. That cert will either be issued by the Kube API server's CA or by a new CA specific to the impersonator. Either way, you can then make a request to the impersonator and present that client cert for auth and the impersonator will accept it and make the impesonation call on your behalf. The impersonator http handler now borrows some Kube library code to handle request processing. This will allow us to more closely mimic the behavior of a real API server, e.g. the client cert auth will work exactly like the real API server. Signed-off-by: Monis Khan <mok@vmware.com>		2021-03-10 10:30:06 -08:00
..
apiservice_updater_test.go	All controller unit tests should not cancel context until test is over	2021-03-04 17:26:01 -08:00
apiservice_updater.go	Use TokenCredentialRequest instead of base64 token with impersonator	2021-03-10 10:30:06 -08:00
certs_expirer_test.go	Use TokenCredentialRequest instead of base64 token with impersonator	2021-03-10 10:30:06 -08:00
certs_expirer.go	Use TokenCredentialRequest instead of base64 token with impersonator	2021-03-10 10:30:06 -08:00
certs_manager_test.go	Use TokenCredentialRequest instead of base64 token with impersonator	2021-03-10 10:30:06 -08:00
certs_manager.go	Use TokenCredentialRequest instead of base64 token with impersonator	2021-03-10 10:30:06 -08:00
certs_observer_test.go	All controller unit tests should not cancel context until test is over	2021-03-04 17:26:01 -08:00
certs_observer.go	Use TokenCredentialRequest instead of base64 token with impersonator	2021-03-10 10:30:06 -08:00
doc.go	Save 2 lines by using inline-style comments for Copyright	2020-09-16 10:35:19 -04:00
update_api_service_test.go	Use new 'go.pinniped.dev/generated/latest' package.	2021-02-16 13:00:08 -06:00
update_api_service.go	Prevent multiple pinnipeds from thrashing on the API service	2020-11-11 20:09:49 -05:00