Skip to main content
Version: 2.3

wf access namespace

wf access namespace

Provides short-lived access to a namespace in the cluster owned by your workspace


Provides kubectl access to a namespace in your workspace for specific cluster.

Choose a role representing the access you need to receive time-limited permission to perform activities against your cluster.

When this access expires simply re-run wf access namespace.

Run without any parameters to be prompted for all values.

wf access namespace [flags]


# General usage:
$ wf access namespace namespacename --cluster [clustername] [--role rolename]

# Get access as a namespace admin in a cluster:
$ wf access namspace namespacename --cluster [clustername] --role namespace.admin

# To be prompted for possible clusters, namespaces and roles, omit those
# parameters, e.g.:
$ wf access namespace
$ wf access namespace namespacename --cluster [clustername]

# Use kubectl after using $ wf access namespace, for example:
$ kubectl get pods


  -c, --cluster string      cluster to access
--dry-run shows the role assumption details to be applied, but does not apply or create
--expire duration expiration of the role assumption (default 8h0m0s)
--explain provides an explanation as to why the role cannot be assumed
-h, --help help for namespace
-n, --namespace string namespace to access
--no-context-change leaves your current kubectl default context unchanged
--no-role prepares kube context without assuming a role (default if using an access token)
-r, --role string role to assume

Options inherited from parent commands

      --debug              Indicates we should use debug / trace logging (default: false)
--force Used to force an operation to happen (default: false)
--no-wait Indicates we should not wait for resources to provision
-o, --output string Output format of the resource (json,yaml,table,template) (default "table")
--profile string Use a profile other than your default for this command
--show-headers Indicates we should display headers on table out (default true)
--verbose Enables verbose logging for debugging purposes (default: false)
-w, --workspace string The workspace you are operating within


  • wf access - Gains access to a Wayfinder-managed resource