All geek questions in one place

How to restrict users of the Kubernete dashboard from viewing secrets?

The Kubernetes toolbar allows users to see all the secrets, including their original values, in just a couple of clicks. These secrets probably contain very important data, such as production database passwords and private keys.

How do you restrict dashboard users so that they cannot see sensitive data?

+4
source share
1 answer

This is a known issue , and at the moment it is not officially supported officially - Dashboard is a superuser-level administration tool. This one does not have to be forever, but additional help is needed to get it.

There are several workarounds in this issue that are currently working. Here are some notable quirks around them that you need to know in advance:

  • If the control panel is under the control panel user and is limited to this? If this is the case, like Anidrud, you can use the auxiliary parts of the toolbar and they will work fine and get 403s if they get access to the Secrets panel.
  • , ? , kubectl proxy - - MITM auth , .
+2

Source: https://habr.com/ru/post/1669429/

More articles:


All Articles