{"action":"created","issue":{"url":"https://api.github.com/repos/datawire/telepresence/issues/2","repository_url":"https://api.github.com/repos/datawire/telepresence","labels_url":"https://api.github.com/repos/datawire/telepresence/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/datawire/telepresence/issues/2/comments","events_url":"https://api.github.com/repos/datawire/telepresence/issues/2/events","html_url":"https://github.com/datawire/telepresence/issues/2","id":211105246,"number":2,"title":"Don't require kubernetes credentials","user":{"login":"itamarst","id":3266662,"avatar_url":"https://avatars2.githubusercontent.com/u/3266662?v=3","gravatar_id":"","url":"https://api.github.com/users/itamarst","html_url":"https://github.com/itamarst","followers_url":"https://api.github.com/users/itamarst/followers","following_url":"https://api.github.com/users/itamarst/following{/other_user}","gists_url":"https://api.github.com/users/itamarst/gists{/gist_id}","starred_url":"https://api.github.com/users/itamarst/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/itamarst/subscriptions","organizations_url":"https://api.github.com/users/itamarst/orgs","repos_url":"https://api.github.com/users/itamarst/repos","events_url":"https://api.github.com/users/itamarst/events{/privacy}","received_events_url":"https://api.github.com/users/itamarst/received_events","type":"User","site_admin":false},"labels":[{"id":546271574,"url":"https://api.github.com/repos/datawire/telepresence/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-03-01T14:57:09Z","updated_at":"2017-03-10T21:25:07Z","closed_at":null,"body":"Currently `telepresence` requires `kubectl` and corresponding credentials to access the remote Kubernetes cluster. It would be nice if there was another access control mechanism that didn't require giving users full Kubernetes access.\r\n\r\nInterested in this feature? Add a \"thumbs up\" or comment below."},"comment":{"url":"https://api.github.com/repos/datawire/telepresence/issues/comments/285788744","html_url":"https://github.com/datawire/telepresence/issues/2#issuecomment-285788744","issue_url":"https://api.github.com/repos/datawire/telepresence/issues/2","id":285788744,"user":{"login":"binocarlos","id":1676629,"avatar_url":"https://avatars1.githubusercontent.com/u/1676629?v=3","gravatar_id":"","url":"https://api.github.com/users/binocarlos","html_url":"https://github.com/binocarlos","followers_url":"https://api.github.com/users/binocarlos/followers","following_url":"https://api.github.com/users/binocarlos/following{/other_user}","gists_url":"https://api.github.com/users/binocarlos/gists{/gist_id}","starred_url":"https://api.github.com/users/binocarlos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/binocarlos/subscriptions","organizations_url":"https://api.github.com/users/binocarlos/orgs","repos_url":"https://api.github.com/users/binocarlos/repos","events_url":"https://api.github.com/users/binocarlos/events{/privacy}","received_events_url":"https://api.github.com/users/binocarlos/received_events","type":"User","site_admin":false},"created_at":"2017-03-10T21:25:07Z","updated_at":"2017-03-10T21:25:07Z","body":"Would it be possible to somehow use SSH to tunnel the raw HTTP traffic into a sidecar container that could proxy the request onto the api server adding credentials on the way.   Then you are hiding k8s credentials and replacing it with ssh keys which are common and so perhaps a good candidate for `another access control mechanism`?"}}
{"actor":{"display_login":"binocarlos"}}