Use cases
Request common Kubernetes access patterns with P0
Invoking the Slack request modal
For any Kubernetes access request use case on this page you can invoke the Slack request modal with these steps:
Open the P0 Slack request modal by typing
/p0 request k8s
in any Slack channel. Also see Creating a request.Select "Kubernetes resource" as "Access type"
Select a "Cluster"
1. Admin access to all Kubernetes resources
Using the Slack request modal
Do not change "Resource" - by default your access will apply to all resources of the selected role below.
Type "admin" in the "Role" box and select "admin"
Enter the reason for your access request
Click "Request"
Using the Slack slash command
Alternatively, you can specify the entire request in a single Slack slash command.
A concrete example:
2. Port-forwarding to a pod
Port-forwarding with kubectl port-forward
is a common operation that requires elevated access. Instead of requesting general "edit" or "admin" role you can use P0's curated role, "port-forward", which contains the following rules:
Using the Slack request modal
Enter a search term for your pod in the "Resource" field, or simply type "pod" to see all pods
Enter a search term for "port-forward" in the "Role" box and select "CuratedRole / port-forward"
Enter the reason for your access request
Click "Request"
Using the Slack slash command
Alternatively, you can specify the entire request in a single Slack slash command.
A concrete example that allows port-forwarding to one nginx pod in default
namespace:
3. Port-forwarding to a pod
Shell access to a running container with `kubectl exec` is an operation that requires elevated access. Instead of requesting general "edit" or "admin" role you can use P0's curated role, "exec", which contains the following rules:
Using the Slack request modal
Enter a search term for your pod in the "Resource" field, or simply type "pod" to see all pods
Enter a search term for "exec" in the "Role" box and select "CuratedRole / exec"
Enter the reason for your access request
Click "Request"
Using the Slack slash command
Alternatively, you can specify the entire request in a single Slack slash command.
A concrete example that allows port-forwarding to one nginx pod in default
namespace:
Last updated