Kubectl auth

Internal

• kubectl

Overview

kubectl auth inspects authorization.

It can check whether an action is allowed with:

kubectl auth can-i <verb> [<type>|<type>/<name>|<non-resource-url>

The verb is a logical Kubernetes API verb: "get", "list", "watch", "delete", etc. Type is a kubernetes resource. The name is the name of a particular resource.

It could also reconcile rules for RBAC Role, RoleBinding, ClusterRole, and ClusterRole binding objects.

Usage Examples

• Authorization checks