Skip to main content

Time-bound Access to Namespaces

< clusters | time-bound access

By default, you will not have privileges to access resources in the namespace. Request short-term access as needed.

In the CLI, you can specifically request access to namespaces. In the Web Interface, you request access to namespaces through the Cluster and AppEnv sections in the respective Admin and Workspace sections.

info

Any user who has an access policy permitting the use of a role which gives them access to the pod (such as 'namespace.view' or 'namespace.troubleshooting') can perform these steps. See the Time-Bound Access Overview section for more information.


CLI Instructions

Use wf access namespace --cluster CLUSTER NAMESPACE -w WORKSPACE to set up the configuration and get privileges you need. Select the role and other required values as prompted:

Time-bound Access to Namespace


wf access namespace --cluster ci-demo-2 demo-nspc -w wfwspace


Web Interface Instructions

In the Web Interface, you request access to namespaces through the Cluster and Environment sections in the UI.


Administation section

Namespace: Time-bound access to a pod



Within Wayfinder's web interface:

  • Navigate to Admin and then select Kubernetes > Clusters
  • Select a Cluster
  • Select a Namespace
  • Time-bound Access (if you don't already have access)
    • Click on the Get Access button
    • Select an appropriate Role for the access you need (e.g., cluster.admin or namespace.troubleshooting)
    • Specify the Duration of how long you need access using that role
    • Click the Request Access button
  • Select the name of a pod
  • You are presented with the logs for the type of container within the specified pod


Workspace section

Environment: Time-bound access to a pod

Within Wayfinder's web interface:

  • Navigate to Workspaces and then select the name of your workspace
  • Select Applications and then select the name of your application
  • Select the name of your Environment
  • Select your component's name on the Components tab
  • Select the relevant pod name on the Pods tab
  • If needed, click on the Get Access button
    • Select an appropriate Role for the access you need (e.g., cluster.admin)
    • Specify the Duration of how long you need access using that role
    • Click the Request Access button
  • You are presented with the logs for the type of container within the specified pod


Cluster: Timebound access to a pod

Within Wayfinder's web interface:

  • Navigate to Workspaces and then select the name of your workspace
  • Select Clusters and then select the name of your cluster
  • Select the name of your Namespace
  • Select the relevant pod name on the Pods tab
  • If needed, click on the Get Access button
    • Select an appropriate Role for the access you need (e.g., cluster.admin)
    • Specify the Duration of how long you need access using that role
    • Click the Request Access button
  • You are presented with the logs for the type of container within the specified pod


What comes next?

Learn how to gain time-bound, short-term access to: