Transparent Token Exchange for multi-cluster kube apiserver requests

[jeffmccune]

Use case: Managed SecretStore per Namespace in a multi-cluster architecture following the sig-multicluster namespace sameness principle.

ChatGPT 5 Report

Cross-Cluster Service Account Token Exchange Proxy.docx

[jeffmccune]

Check out gRPC for Rust maybe. This is impressive:

❯ k top pods
NAME                                 CPU(cores)   MEMORY(bytes)
brainstore-reader-848749dc87-2gxdb   3m           18Mi
brainstore-reader-848749dc87-nw2gk   2m           18Mi
brainstore-writer-b85495fb7-t7f5w    5m           29Mi