features

const (
	// ProxyAllNamespaced allows to proxy all the Namespaced objects
	// for all tenant users (DEPRECATED)
	//
	// When enabled, it will discover apis and ensure labels are set
	// for resources in all tenant namespaces resulting in increased memory
	// usage and cluster-wide RBAC permissions (list and watch).
	ProxyAllNamespaced = "ProxyAllNamespaced"

	// SkipImpersonationReview allows to skip the impersonation review
	// for all requests containing impersonation headers (user and groups)
	//
	// DANGER: Enabling this flag allows any user to impersonate as any user or group
	// essentially bypassing any authorization. Only use this option in trusted environments
	// where authorization/authentication is offloaded to external systems.
	SkipImpersonationReview = "SkipImpersonationReview"

	// ProxyClusterScoped allows to proxy all clusterScoped objects
	// for all tenant users. Toggling this flags makes use Global Proxy Settings (https://projectcapsule.dev/docs/proxy/proxysettings/#globalproxysettings)
	// instead of using ProxySettings from the Tenant Specification.
	ProxyClusterScoped = "ProxyClusterScoped"
)