wf access namespace

wf access namespace

Provides short-lived access to a namespace in the cluster owned by your workspace

Synopsis

Provides kubectl access to a namespace in your workspace for specific cluster.

Choose a role representing the access you need to receive time-limited permission to perform activities against your cluster.

When this access expires simply re-run wf access namespace.

Run without any parameters to be prompted for all values.

wf access namespace [flags]

Examples

# General usage:
$ wf access namespace namespacename --cluster [clustername] [--role rolename]

# Get access as a namespace admin in a cluster:
$ wf access namspace namespacename --cluster [clustername] --role namespace.admin

# To be prompted for possible clusters, namespaces and roles, omit those
# parameters, e.g.:
$ wf access namespace
$ wf access namespace namespacename --cluster [clustername]

# Use kubectl after using $ wf access namespace, for example:
$ kubectl get pods

Options

  -c, --cluster string      cluster to access
      --expire duration     Expiration of the role assumption. If provided, implies --force-new. Defaults to 1hr if not provided.
      --explain             provides an explanation as to why the role cannot be assumed
      --force-new           Forces creation of a new role assumption even if an existing session is active and still valid. Automatically set if an explicit --expire is provided.
  -h, --help                help for namespace
  -n, --namespace string    namespace to access
      --no-context-change   leaves your current kubectl default context unchanged
      --no-role             prepares kube context without assuming a role (default if using an access token)
      --quiet               Suppresses all non-essential output
  -r, --role string         role to assume
      --timeout duration    Timeout for access to be granted. Defaults to 20s if not provided. (default 30s)
      --use-auth-proxy      Uses the legacy auth proxy (pre-v2.4) to access the cluster

Options inherited from parent commands

      --debug              Indicates we should use debug / trace logging (default: false)
      --force              Used to force an operation to happen (default: false)
      --no-wait            Indicates we should not wait for resources to provision
  -o, --output string      Output format of the resource (json,yaml,table,template) (default "table")
      --profile string     Use a profile other than your default for this command
      --show-headers       Indicates we should display headers on table out (default true)
      --verbose            Enables verbose logging for debugging purposes (default: false)
  -w, --workspace string   The workspace you are operating within

SEE ALSO

• wf access - Gains access to a Wayfinder-managed resource