1KUBERNETES(1)(kubernetes) KUBERNETES(1)(kubernetes)
2
3
4
5Eric Paris Jan 2015
6
7
9 kubectl auth - Inspect authorization
10
11
12
14 kubectl auth [OPTIONS]
15
16
17
19 Inspect authorization
20
21
22
24 --as="" Username to impersonate for the operation. User could be a
25 regular user or a service account in a namespace.
26
27
28 --as-group=[] Group to impersonate for the operation, this flag
29 can be repeated to specify multiple groups.
30
31
32 --as-uid="" UID to impersonate for the operation.
33
34
35 --azure-container-registry-config="" Path to the file containing
36 Azure container registry configuration information.
37
38
39 --cache-dir="/builddir/.kube/cache" Default cache directory
40
41
42 --certificate-authority="" Path to a cert file for the certificate
43 authority
44
45
46 --client-certificate="" Path to a client certificate file for TLS
47
48
49 --client-key="" Path to a client key file for TLS
50
51
52 --cluster="" The name of the kubeconfig cluster to use
53
54
55 --context="" The name of the kubeconfig context to use
56
57
58 --disable-compression=false If true, opt-out of response compres‐
59 sion for all requests to the server
60
61
62 --insecure-skip-tls-verify=false If true, the server's certificate
63 will not be checked for validity. This will make your HTTPS connections
64 insecure
65
66
67 --kubeconfig="" Path to the kubeconfig file to use for CLI re‐
68 quests.
69
70
71 --match-server-version=false Require server version to match
72 client version
73
74
75 -n, --namespace="" If present, the namespace scope for this CLI
76 request
77
78
79 --password="" Password for basic authentication to the API server
80
81
82 --profile="none" Name of profile to capture. One of
83 (none|cpu|heap|goroutine|threadcreate|block|mutex)
84
85
86 --profile-output="profile.pprof" Name of the file to write the
87 profile to
88
89
90 --request-timeout="0" The length of time to wait before giving up
91 on a single server request. Non-zero values should contain a corre‐
92 sponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't time‐
93 out requests.
94
95
96 -s, --server="" The address and port of the Kubernetes API server
97
98
99 --tls-server-name="" Server name to use for server certificate
100 validation. If it is not provided, the hostname used to contact the
101 server is used
102
103
104 --token="" Bearer token for authentication to the API server
105
106
107 --user="" The name of the kubeconfig user to use
108
109
110 --username="" Username for basic authentication to the API server
111
112
113 --version=false Print version information and quit
114
115
116 --warnings-as-errors=false Treat warnings received from the server
117 as errors and exit with a non-zero exit code
118
119
120
122 kubectl(1), kubectl-auth-can-i(1), kubectl-auth-reconcile(1), kubectl-
123 auth-whoami(1),
124
125
126
128 January 2015, Originally compiled by Eric Paris (eparis at redhat dot
129 com) based on the kubernetes source material, but hopefully they have
130 been automatically generated since!
131
132
133
134Manuals User KUBERNETES(1)(kubernetes)