From 8697488126dfabc96cd4b7fc2465c00a2fa4d75d Mon Sep 17 00:00:00 2001 From: Andrew Keesler Date: Tue, 9 Feb 2021 15:28:56 -0500 Subject: [PATCH] internal/concierge/impersonator: use kubeconfig from kubeclient Signed-off-by: Andrew Keesler --- internal/concierge/impersonator/impersonator.go | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/internal/concierge/impersonator/impersonator.go b/internal/concierge/impersonator/impersonator.go index befe390eb..c80957b1e 100644 --- a/internal/concierge/impersonator/impersonator.go +++ b/internal/concierge/impersonator/impersonator.go @@ -20,6 +20,7 @@ import ( "go.pinniped.dev/generated/1.20/apis/concierge/login" loginv1alpha1 "go.pinniped.dev/generated/1.20/apis/concierge/login/v1alpha1" "go.pinniped.dev/internal/controller/authenticator/authncache" + "go.pinniped.dev/internal/kubeclient" ) // allowedHeaders are the set of HTTP headers that are allowed to be forwarded through the impersonation proxy. @@ -39,7 +40,13 @@ type Proxy struct { } func New(cache *authncache.Cache, log logr.Logger) (*Proxy, error) { - return newInternal(cache, log, rest.InClusterConfig) + return newInternal(cache, log, func() (*rest.Config, error) { + client, err := kubeclient.New() + if err != nil { + return nil, err + } + return client.JSONConfig, nil + }) } func newInternal(cache *authncache.Cache, log logr.Logger, getConfig func() (*rest.Config, error)) (*Proxy, error) {