kubernetes / kubernetes/website

Documentation for user impersonation via kubeconfig

Open
#38,662 10 comments 0 reactions 0 assignees View on GitHub
kind/feature lifecycle/frozen needs-triage priority/backlog sig/auth
Dominant language
HTML
Stars
5.4k
Forks
15.7k
Avg merge
4d 18h
Merged PRs (30d)
204

Description

**This is a Feature Request**

**What would you like to be added**
Currently, only the impersonation of users via headers and kubectl flags is documented. It would be helpful to also explain and describe the possibility to configure user impersonation via kubeconfig.

**Why is this needed**
Its sometimes helpful to configure the user impersonation via kubeconfig, e.g. for external tooling (Example: https://github.com/istio/istio/issues/22365#issuecomment-610419899) but currently you need to know that it is possible and check the API spec for further information.

**Comments**
- https://github.com/istio/istio/issues/22365#issuecomment-610419899)
- https://github.com/kubernetes/client-go/blob/b69cda3e4e09e1b956d42709fbadf12e6c0f24b7/tools/clientcmd/api/types.go#L131-L140

Contributor guide

Open the contributing guide

Research direction

Start with the existing Kubernetes documentation for user impersonation and compare it with the kubeconfig API fields in client-go/tools/clientcmd/api/types.go, lines 131-140. Document how user impersonation can be configured in kubeconfig, including the relevant external-tool use case, and make the new guidance discoverable alongside the existing impersonation instructions.

Written by the indexing model from the issue text.

Assessment

Tech stack
kubernetes
Domain
documentation
Issue type
Documentation
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.