kubernetes/docs
Kubernetes Submit Queue a1490926d6 Merge pull request #41077 from deads2k/cli-01-cani
Automatic merge from submit-queue (batch tested with PRs 41814, 41922, 41957, 41406, 41077)

add kubectl can-i to see if you can perform an action

Adds `kubectl auth can-i <verb> <resource> [<name>]` so that a user can see if they are allowed to perform an action.

@kubernetes/sig-cli-pr-reviews @fabianofranz 

This particular command satisfies the immediate need of knowing if you can perform an action without trying that action.  When using RBAC in a script that is adding permissions, there is a lag between adding the permission and the permission being realized in the RBAC cache.  As a user on the CLI, you almost never see it, but as a script adding a binding and then using that new power, you hit it quite often.

There are natural follow-ons to the same area (hence the `auth` subcommand) to figure out if someone else can perform an action, what actions you can perform in total, and who can perform a given action.  Someone else is an API we have already, what-can-i-do was a proposed API a while back and a very useful one for interfaces, and who-can is common question if someone is administering a namespace.
2017-02-26 10:22:54 -08:00
..
admin run hack/update-generated-docs.sh to strip munge tags 2017-02-16 10:17:17 -08:00
api-reference Revert "Merge pull request #40088 from jsafrane/storage-ga-v1" 2017-02-25 22:35:15 -05:00
design replace contents of docs/design with stubs 2017-01-11 08:23:44 -05:00
devel replace contents of docs/devel with stubs 2016-12-21 20:26:48 -05:00
getting-started-guides Fix broken link to logging documentation 2017-01-15 00:14:12 -08:00
images Updated for v1.2.0. 2016-03-18 14:20:56 -07:00
man/man1 add kubectl can-i to see if you can perform an action 2017-02-23 09:12:35 -05:00
proposals replace contents of docs/proposals with stubs 2016-12-21 21:15:09 -05:00
user-guide add kubectl can-i to see if you can perform an action 2017-02-23 09:12:35 -05:00
yaml/kubectl add kubectl can-i to see if you can perform an action 2017-02-23 09:12:35 -05:00
.generated_docs add kubectl can-i to see if you can perform an action 2017-02-23 09:12:35 -05:00
api.md fix munge-docs build errors 2016-11-17 16:49:00 +01:00
BUILD Enable auto-generating sources rules 2017-01-05 14:14:13 -08:00
OWNERS Move .generated_docs to docs/ so docs OWNERS can review / approve 2017-02-16 10:11:57 -08:00
README.md fix munge-docs build errors 2016-11-17 16:49:00 +01:00
reporting-security-issues.md Remove 'this is HEAD' warning on docs 2016-10-26 00:06:59 +02:00

Kubernetes Documentation: releases.k8s.io/HEAD

Analytics