diff --git a/pages/common/kubectl-auth.md b/pages/common/kubectl-auth.md new file mode 100644 index 0000000000..f17bf1150a --- /dev/null +++ b/pages/common/kubectl-auth.md @@ -0,0 +1,20 @@ +# kubectl auth + +> Inspect access permissions in a Kubernetes cluster. +> More information: . + +- Check if the current user can perform all actions on all resources in a specific namespace: + +`kubectl auth can-i '*' '*' {{[-n|--namespace]}} {{namespace}}` + +- Check if the current user can perform a specific verb on a specific resource: + +`kubectl auth can-i {{verb}} {{resource}} {{[-n|--namespace]}} {{namespace}}` + +- Check if a specific user or service account can perform an action on a resource: + +`kubectl auth can-i {{verb}} {{resource}} {{[-n|--namespace]}} {{namespace}} --as {{user_or_sa}}` + +- List all actions the current user is allowed to perform in a namespace: + +`kubectl auth can-i --list {{[-n|--namespace]}} {{namespace}}`