diff --git a/pages/common/kubectl-auth.md b/pages/common/kubectl-auth.md new file mode 100644 index 00000000000000..451e6af0ed0e05 --- /dev/null +++ b/pages/common/kubectl-auth.md @@ -0,0 +1,20 @@ +# kubectl auth + +> Inspect access permissions in a Kubernetes cluster. +> More information: . + +- Check if the current user can perform all actions on all resources in a specific namespace: + +`kubectl auth can-i '*' '*' -n {{namespace}}` + +- Check if the current user can perform a specific verb on a specific resource: + +`kubectl auth can-i {{verb}} {{resource}} -n {{namespace}}` + +- Check if a specific user or service account can perform an action on a resource: + +`kubectl auth can-i {{verb}} {{resource}} -n {{namespace}} --as {{user_or_sa}}` + +- List all actions the current user is allowed to perform in a namespace: + +`kubectl auth can-i --list -n {{namespace}}`