Hey guys how do I disable kubectl shell for some role rancher-users #general

Title

eager-refrigerator-66976

07/20/2022, 10:27 AM

Hey guys, how do I disable “kubectl shell” for some role?

tall-school-18125

07/20/2022, 7:02 PM

If you gave someone the base user role (login only access) they would be able to use kubectl, but the commands wouldn't return any data.

I'm not sure if that works for your use case

Generally speaking, if a users has permission to do something in the UI, they also have permission to the same operation with kubectl.

eager-refrigerator-66976

07/21/2022, 9:19 AM

thanks @tall-school-18125 🙇 for now I’ve just used read-only and cluster-member role that allows very limited actions I think it works for me but Ideally would be if I can just hide download kubeconfig and kubectl shell for some users at all.

2 Views

#general Join Slack