K
Q

How is the verb "proxy" determined in the audit logs?

1/16/2020

According to the kubernetes documentation, those are the following verbs:

https://kubernetes.io/docs/reference/access-authn-authz/authorization/#determine-the-request-verb enter image description here

I've been looking at kubernetes-dashboard Role, and i saw this:

  - apiGroups:
    - ""
    resourceNames:
    - heapster
    - dashboard-metrics-scraper
    resources:
    - services
    verbs:
    - proxy

This is the role of kubernetes-dashboard

I didn't see any indication that in the audits they use the "proxy" verb. Any clearance would be great

-- ArielB
kubernetes

Similar Questions

0/3 nodes are available: 1 node(s) had taints that the pod didn't tolerate, 2 Insufficient cpu. MR3 Hive
Unable to do sh/bash to any pods created in newly attached worker node in kubernetes cluster
Can Nginx be used to balance TCP traffic inside Kubernetes?
Django in kubernetes with ingress-nginx is not serving static files
Can't connect to database using ExternalName on GKE in an ExpressJS Application

1 Answer

1/16/2020

When you perform kubectl proxy the request goes to API Server which calls POST /api/v1/namespaces/{namespace}/services/{name}/proxy the proxy api of services as documented here.

Proxy is not a verb, it's a sub resource exposed by Kubelet.

-- Arghya Sadhu
Source: StackOverflow