Skip to content
This repository was archived by the owner on Mar 10, 2026. It is now read-only.

Blog post for creating an unprivileged k8s account#49

Merged
datho7561 merged 1 commit intoredhat-developer:mainfrom
datho7561:k8s-unprivleged-user
May 17, 2024
Merged

Blog post for creating an unprivileged k8s account#49
datho7561 merged 1 commit intoredhat-developer:mainfrom
datho7561:k8s-unprivleged-user

Conversation

@datho7561
Copy link
Copy Markdown
Contributor

Signed-off-by: David Thompson davthomp@redhat.com

@datho7561 datho7561 requested a review from vrubezhny May 14, 2024 18:47
@datho7561
Copy link
Copy Markdown
Contributor Author

@vrubezhny this is the write up on setting up a kind cluster with restricted permissions. let me know if these steps work for you.

@datho7561
Copy link
Copy Markdown
Contributor Author

I updated the docs so that the service account that's created in the walkthrough is allowed to view details about individual pods and watch for changes in pods as well.

Copy link
Copy Markdown

@vrubezhny vrubezhny left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me.

Used a Kind cluster "restricted" service account to test redhat-developer/vscode-openshift-tools#4122 - all works as expected.

Probably it worth mentioning the limited lifetime of the issued token (can be changed by using --duration=10h-like argument) .

Thanks!

@datho7561 datho7561 force-pushed the k8s-unprivleged-user branch from 2ee3b5a to 773a714 Compare May 17, 2024 14:19
Signed-off-by: David Thompson <davthomp@redhat.com>
@datho7561 datho7561 force-pushed the k8s-unprivleged-user branch from 773a714 to 7bfd8a2 Compare May 17, 2024 14:21
@datho7561
Copy link
Copy Markdown
Contributor Author

I added the --duration flag to the token creation step, and updated the publish date to today

@datho7561 datho7561 merged commit 20c881d into redhat-developer:main May 17, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

2 participants