Event Lineage: Handle Auth Impersonation
- Dominant language
- Go
- Stars
- 1.6k
- Forks
- 631
- Avg merge
- 2d 1h
- Merged PRs (30d)
- 6
Description
**Problem**
Event lineage graphs should be constructed to only see the resources that a user has access to. We should set up the library to use auth impersonation with the k8s clients to make sure only the correct resources are displayed.
**[Persona:](https://github.com/knative/eventing/blob/main/docs/personas.md)**
Which persona is this feature for?
**Exit Criteria**
A measurable (binary) test that would indicate that the problem has been resolved.
**Time Estimate (optional):**
How many developer-days do you think this may take to resolve?
**Additional context (optional)**
Add any other context about the feature request here.
Contributor guide
Research direction
Start by locating the event lineage library and the Kubernetes clients it uses, then trace how resources are fetched for lineage graphs. Define how auth impersonation should limit displayed resources and add a binary test showing that inaccessible resources are excluded.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- authorization, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100