authzed / spicedb-kubeapi-proxy

Secure access to the Kubernetes API using SpiceDB
https://authzed.com/spicedb
Apache License 2.0
21 stars 1 forks source link

flag: --override-upstream will default the upstream apiserver address #37

Closed ecordell closed 1 year ago

ecordell commented 1 year ago

to the one defined by the environment.

This fixes the issue where the proxy in dev:up can't find the upstream. I went back in git and the same exact config worked in the PoC, so my assumption is that something in the clients changed when we bumped to 1.29 (at least, I didn't see anything else obvious).

If this flag is set (which it is by default), the proxy will use the environment to discover the apiserver endpoint instead of whatever is in the kubeconfig.