Comments (5)
I believe this is sufficient:
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: dfpv-role
rules:
- apiGroups: [""]
resources:
- namespaces
- pods
- nodes
- nodes/proxy
verbs: ["get", "list"]
from kubectl-df-pv.
Yup, @ketankr9 check out: https://github.com/yashbhutwala/kubectl-df-pv#requirements !! If that's not clear enough, please free to send a PR.
from kubectl-df-pv.
Checked it already, it just says appropriate RBAC. I was hoping there would be definite permission narrower than cluster-admin.
from kubectl-df-pv.
"specifically, you need a service account with enough RBAC privileges to access api/v1/nodes/ from the kube-apiserver"... I didn't exactly explore what the yaml for that looks like, so you would have to play with the rbac yaml https://kubernetes.io/docs/reference/access-authn-authz/rbac/
from kubectl-df-pv.
You are right @fabiorauber permission over resource nodes/proxy
worked for me π . Forgot to update this thread.
from kubectl-df-pv.
Related Issues (20)
- Installation issue HOT 4
- installation error HOT 3
- current actor interrupted with error HOT 2
- Feature request: customize columns
- Is it possible to display the REQUESTS & CAPACITY of each PVC?
- x509: certificate has expired
- Support kubectl standard flags HOT 1
- ErrorοΌ%IUSED > 100
- FATA[0000] unable to run root command: accepts at most 0 arg(s), received 1 HOT 1
- It ran on my AWS EKS without any issues. HOT 3
- RFE: Disable color when output is not a tty
- Output can be misleading without decimals
- Sort Output HOT 2
- How to get machine readable (e.g. json) output?
- PVC Size shows different HOT 3
- Installation issue: via release binary : Macos HOT 1
- Add feature to resize PVC
- Installatino and running HOT 1
- Feature request: Select PVCs by label
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kubectl-df-pv.