Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

allow passing --as argument to kubectl to impersonate (ex: get elevated permissions) #216

Open
bmm-alc opened this issue Sep 6, 2024 · 0 comments

Comments

@bmm-alc
Copy link

bmm-alc commented Sep 6, 2024

While administration config of my cluster gives us a limited access by default, and require us to pass --as cluster-admin to kubectl to grant admin permissions.
Without this I cannot attach

(⎈|k8s-practical-shamir:default)cheddar at ~/bin ❯ ./kafkactl attach                   
Error from server (Forbidden): pods is forbidden: User "oidc:me@mycompany.com" cannot create resource "pods" in API group "" in the namespace "foobar"
command "/home/me/bin/kubectl" exited with non-zero status

I modified the config file to add

binary: kubectl --as cluster-admin

but it does not work.

@bmm-alc bmm-alc changed the title allow passing --as argument to kubectl to grant elevated permission allow passing --as argument to kubectl to impersonate (ex: get elevated permissions) Sep 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant