Thanks Giovanni.
I've tried to setup auth (ABAC mode), but when I try to access ressources
with admin account (using example file of documentation), I always have
following message " Error from server: the server does not allow access to
the requested resource (get pods)"
However, admin is in authorization file (
{"apiVersion": "abac.authorization.kubernetes.io/v1beta1", "kind":
"Policy", "spec": {"user":"admin", "namespace": "*", "resource": "*",
"apiGroup": "*" }}
)
I use client certificate for accessig API
Thomas
Le lundi 16 mai 2016 16:22:00 UTC+2, Giovanni Tirloni a écrit :
>
> On Thu, May 12, 2016 at 10:22 AM, toms <[email protected] <javascript:>>
> wrote:
> > Hi all,
> > I read k8s documentation about authentication
> > (http://kubernetes.io/docs/admin/authentication/), but it is light
> about
> > groups in token mode
>
> You're looking for authorization policies:
> http://kubernetes.io/docs/admin/authorization/
>
> Giovanni
>
--
You received this message because you are subscribed to the Google Groups
"Containers at Google" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/google-containers.
For more options, visit https://groups.google.com/d/optout.
