Time-bound Access to Namespaces
By default, you will not have privileges to access resources in the namespace. Request short-term access as needed.
In the CLI, you can specifically request access to namespaces. In the Web Interface, you request access to namespaces through the Cluster and AppEnv sections in the respective Admin and Workspace sections.
Any user who has an access policy permitting the use of a role which gives them access to the pod (such as 'namespace.view' or 'namespace.troubleshooting') can perform these steps. See the Time-Bound Access Overview section for more information.
CLI Instructions
Use wf access namespace --cluster CLUSTER NAMESPACE -w WORKSPACE
to set up the configuration and get privileges you need. Select the role and other required values as prompted:
wf access namespace --cluster ci-demo-2 demo-nspc -w wfwspace
Web Interface Instructions
In the Web Interface, you request access to namespaces through the Cluster and Environment sections in the UI.
Administation section
Namespace: Time-bound access to a pod
Within Wayfinder's web interface:
- Navigate to Admin and then select Kubernetes > Clusters
- Select a Cluster
- Select a Namespace
- Time-bound Access (if you don't already have access)
- Click on the Get Access button
- Select an appropriate Role for the access you need (e.g., cluster.admin or namespace.troubleshooting)
- Specify the Duration of how long you need access using that role
- Click the Request Access button
- Select the name of a pod
- You are presented with the logs for the type of container within the specified pod
Workspace section
Environment: Time-bound access to a pod
Within Wayfinder's web interface:
- Navigate to Workspaces and then select the name of your workspace
- Select Applications and then select the name of your application
- Select the name of your Environment
- Select your component's name on the Components tab
- Select the relevant pod name on the Pods tab
- If needed, click on the Get Access button
- Select an appropriate Role for the access you need (e.g., cluster.admin)
- Specify the Duration of how long you need access using that role
- Click the Request Access button
- You are presented with the logs for the type of container within the specified pod
Cluster: Timebound access to a pod
Within Wayfinder's web interface:
- Navigate to Workspaces and then select the name of your workspace
- Select Clusters and then select the name of your cluster
- Select the name of your Namespace
- Select the relevant pod name on the Pods tab
- If needed, click on the Get Access button
- Select an appropriate Role for the access you need (e.g., cluster.admin)
- Specify the Duration of how long you need access using that role
- Click the Request Access button
- You are presented with the logs for the type of container within the specified pod
What comes next?
Learn how to gain time-bound, short-term access to:
Related Reading
- Groups, Roles and Access Policies
- Troubleshooting Logs
- Troubleshooting Shell
- [Troubleshooting YAML]