allow group impersonation

2016-08-17 15:42:43 -04:00
parent a594dcb1aa
commit fb56512ea2
4 changed files with 404 additions and 71 deletions
--- a/pkg/apis/authentication/types.go
+++ b/pkg/apis/authentication/types.go
@@ -21,6 +21,15 @@ import (
 	"k8s.io/kubernetes/pkg/api/unversioned"
 )

+const (
+	// ImpersonateUserHeader is used to impersonate a particular user during an API server request
+	ImpersonateUserHeader = "Impersonate-User"
+
+	// ImpersonateGroupHeader is used to impersonate a particular group during an API server request.
+	// It can be repeated multipled times for multiple groups.
+	ImpersonateGroupHeader = "Impersonate-Group"
+)
+
 // +genclient=true
 // +nonNamespaced=true
 // +noMethods=true