Headlamp built an STS client for multi cluster so a single headlamp can access multiple clusters without just relying on a single audience and issuer. Got them to include authenticating to the STS with headlamp's token. Got my dev env setup to test it out with OpenUnison.