On this page

Show all

Help Center/ Cloud Container Engine_Autopilot/ FAQs/ Permissions/ Can I Use kubectl If the Cluster Management Permissions Are Not Configured?

Can I Use kubectl If the Cluster Management Permissions Are Not Configured?

Updated on 2025-01-22 GMT+08:00

View PDF

IAM authentication is not required for running kubectl commands. Therefore, you can run kubectl commands without configuring cluster management (IAM) permissions. The prerequisite is that the kubectl configuration file (kubeconfig) with the namespace permissions needs to be obtained. In the following scenarios, information leakage may occur during file transmission.

Scenario 1
If an IAM user has been configured with the cluster management permissions and namespace permissions, downloads the kubeconfig authentication file and then deletes the cluster management permissions (reserving the namespace permissions), kubectl can still be used to perform operations on Kubernetes clusters. If you want to permanently delete the user's permissions, you must also delete the cluster management permissions and namespace permissions of the user.
Scenario 2
An IAM user has certain cluster management and namespace permissions and downloads the kubeconfig authentication file. CCE Autopilot determines which Kubernetes resources can be accessed by kubectl based on the user information. Essentially, the user's authentication information is stored in kubeconfig, which can be used by anyone to access the cluster.

Parent Topic: Permissions

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot