ZverGuy 448cd2b5bd feat(observability-proxy): authenticate and authorize with cached reviews ...

The proxy holds no credentials of its own: kube-apiserver answers who a
bearer token belongs to and whether that identity may read a scope, the
same way an aggregated API server would ask through delegated auth.
Both answers are cached briefly so a dashboard polling several panels
does not turn into a review per request, while transport errors are
left uncached so an apiserver blip does not lock users out for the TTL.

Assisted-by: LLM
Signed-off-by: ZverGuy <maximbel2003@gmail.com>

2026-11-09 15:48:57 +07:00

..

auth_test.go

feat(observability-proxy): authenticate and authorize with cached reviews

2026-11-09 15:48:57 +07:00

auth.go

feat(observability-proxy): authenticate and authorize with cached reviews

2026-11-09 15:48:57 +07:00

route_test.go

feat(observability-proxy): parse the four tenant observability roots

2026-11-09 15:48:57 +07:00

route.go

feat(observability-proxy): parse the four tenant observability roots

2026-11-09 15:48:57 +07:00