Open justinas-b opened 3 years ago
When using --extra-user-header-client-ip argument kube-oidc-proxy is unable to impersonate resource userextras/remote-client-ip with following error:
--extra-user-header-client-ip
kube-oidc-proxy
userextras/remote-client-ip
{ "kind": "Status", "apiVersion": "v1", "metadata": { }, "status": "Failure", "message": "userextras.authentication.k8s.io \"10.251.176.235:50924\" is forbidden: User \"system:serviceaccount:kube-oidc-proxy:kube-oidc-proxy\" cannot impersonate resource \"userextras/remote-client-ip\" in API group \"authentication.k8s.io\" at the cluster scope", "reason": "Forbidden", "details": { "name": "10.251.176.235:50924", "group": "authentication.k8s.io", "kind": "userextras" }, "code": 403 }
When using
--extra-user-header-client-ip
argumentkube-oidc-proxy
is unable to impersonate resourceuserextras/remote-client-ip
with following error: