knative / knative/eventing

Event Lineage: Handle Auth Impersonation

Open
#7,700 2 comments 0 reactions 0 assignees View on GitHub
kind/feature-request triage/accepted
Dominant language
Go
Stars
1.6k
Forks
631
Avg merge
2d 1h
Merged PRs (30d)
6

Description

**Problem**
Event lineage graphs should be constructed to only see the resources that a user has access to. We should set up the library to use auth impersonation with the k8s clients to make sure only the correct resources are displayed.

**[Persona:](https://github.com/knative/eventing/blob/main/docs/personas.md)**
Which persona is this feature for?

**Exit Criteria**
A measurable (binary) test that would indicate that the problem has been resolved.

**Time Estimate (optional):**
How many developer-days do you think this may take to resolve?

**Additional context (optional)**
Add any other context about the feature request here.

Contributor guide

Open the contributing guide

Research direction

Start by locating the event lineage library and the Kubernetes clients it uses, then trace how resources are fetched for lineage graphs. Define how auth impersonation should limit displayed resources and add a binary test showing that inaccessible resources are excluded.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
authorization, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.