My kubeAPI is using OIDC and I’ve enabled both username, and group claims.
I have created a Kubernetes APIService under Kube API aggregation. I need to decode the idToken and use its data. but Kube API only sends limited headers to the API Service:
'x-forwarded-for': 'x.x.x.x,y.y.y.y',
'x-forwarded-host': '10.42.0.183:3000',
'x-forwarded-proto': 'https',
'x-forwarded-scheme': 'https',
'x-forwarded-uri': '/apis/myapi/v1alpha1/namespaces/1707237939748/tickets',
'x-real-ip': 'z.z.z.z',
'x-remote-group': 'owner, system:authenticated',
'x-remote-user': 'demo@example.org'
Is it possible to tell kubeAPI to send the original idToken to the APIService?