Allow DB impersonation

Author: fheinecke

examples/chart/teleport-cluster/templates/auth/config.yaml

@@ -139,6 +139,11 @@ data:
               - read
               - update
               - delete
+        impersonate:
+          users:
+            - Db
+          roles:
+            - Db
       deny: {}
     version: v7
     ---

integrations/operator/controllers/resources/testlib/env.go

@@ -144,6 +144,10 @@ func defaultTeleportServiceConfig(t *testing.T) (*helpers.TeleInstance, string)
 				types.NewRule(types.KindNode, unrestricted),
 				types.NewRule(types.KindDatabase, unrestricted),
 			},
+			Impersonate: &types.ImpersonateConditions{
+				Users: []string{"Db"},
+				Roles: []string{"Db"},
+			},
 		},
 	})
 	require.NoError(t, err)

integrations/operator/hack/fixture-operator-role.yaml

@@ -81,5 +81,10 @@ spec:
           - read
           - update
           - delete
+    impersonate:
+      users:
+        - Db
+      roles:
+        - Db
   deny: {}
 version: v7