Use cases
Request common Kubernetes access patterns with P0
Last updated
Request common Kubernetes access patterns with P0
Last updated
For any Kubernetes access request use case on this page you can invoke the Slack request modal with these steps:
Open the P0 Slack request modal by typing /p0 request k8s in any Slack channel. Also see Creating a request.
Select "Kubernetes resource" as "Access type"
Select a "Cluster"
Do not change "Resource" - by default your access will apply to all resources of the selected role below.
Type "admin" in the "Role" box and select "admin"
Enter the reason for your access request
Click "Request"
Alternatively, you can specify the entire request in a single Slack slash command.
A concrete example:
Port-forwarding with kubectl port-forward is a common operation that requires elevated access. Instead of requesting general "edit" or "admin" role you can use P0's curated role, "port-forward", which contains the following rules:
Enter a search term for your pod in the "Resource" field, or simply type "pod" to see all pods
Enter a search term for "port-forward" in the "Role" box and select "CuratedRole / port-forward"
Enter the reason for your access request
Click "Request"
Alternatively, you can specify the entire request in a single Slack slash command.
A concrete example that allows port-forwarding to one nginx pod in default namespace:
Shell access to a running container with `kubectl exec` is an operation that requires elevated access. Instead of requesting general "edit" or "admin" role you can use P0's curated role, "exec", which contains the following rules:
Enter a search term for your pod in the "Resource" field, or simply type "pod" to see all pods
Enter a search term for "exec" in the "Role" box and select "CuratedRole / exec"
Enter the reason for your access request
Click "Request"
Alternatively, you can specify the entire request in a single Slack slash command.
A concrete example that allows port-forwarding to one nginx pod in default namespace:
