Version: 0.9

kore access cluster

kore access cluster#

Provides short-lived access to a cluster owned by your team


Provides kubectl access to a cluster and/or namespace in your team.

Choose a role representing the access you need to receive time-limited permission to perform activities against your namespace or cluster.

When this access expires simply re-run kore access cluster.

Run without any parameters to be prompted for all values.

kore access cluster [flags]


# General usage:
$ kore access cluster [clustername [namespacename]] [--role rolename]
# Get access as a namespace admin in a cluster:
$ kore access cluster clustername namespacename --role namespace.admin
# To be prompted for possible clusters, namespaces and roles, omit those
# parameters, e.g.:
$ kore access cluster
$ kore access cluster clustername
# Use kubectl after using kore access cluster, for example:
$ kubectl -n namespacename get pods
# Get access without changing your current kubectl context:
$ kore access cluster clustername namespacename --role namespace.admin --no-context-change
# With --no-context-change you must use the correct context with kubectl:
$ kubectl --context teamname.clustername -n namespacename
# Using kore access cluster clustername namespacename --role rolename is
# equivalent to running these two commands:
$ kore assume rolename --cluster clustername --namespace namespacename
$ kore kubeconfig --cluster clustername --namespace namespacename


--dry-run shows the role assumption details to be applied, but does not apply or create
--expire duration expiration of the role assumption (default 8h0m0s)
-h, --help help for cluster
--no-context-change leaves your current kubectl default context unchanged
-r, --role string role to assume

Options inherited from parent commands#

--debug Indicates we should use debug / trace logging (default: false)
--force Used to force an operation to happen (default: false)
--no-wait Indicates we should not wait for resources to provision
-o, --output string Output format of the resource (json,yaml,table,template) (default "table")
--profile string Use a profile other than your default for this command
--show-headers Indicates we should display headers on table out (default true)
-t, --team string The team you are operating within
--verbose Enables verbose logging for debugging purposes (default: false)