KUBERNETES(1)(kubernetes)
π NAME π
kubectl auth β bestie, this is the vibe check for authorization. Like, who's allowed to do what? Let's find out. β¨
π¦ SYNOPSIS π¦
kubectl auth [OPTIONS]
π DESCRIPTION π
Inspect authorization. That's the whole thing, no cap β it's your little detective moment where you go peek at what permissions exist and who's got them. Iconic behavior, honestly. π
π OPTIONS INHERITED FROM PARENT COMMANDS π
These are the ones you got handed down from the parent command, like family heirlooms but for flags. π«Ά
--as=""β Username you're impersonating for this operation. Could be a regular user, could be a service account chillin' in a namespace. Either way, you're cosplaying as them. π--as-group=[]β Group you're impersonating for the operation. Repeat this flag as many times as you want to stack up multiple groups. β¨--as-uid=""β The UID you're impersonating for the operation.--as-user-extra=[]β Extra user stuff to impersonate for the operation. Repeat the flag to give multiple values for the same key. π--cache-dir="/home/username/.kube/cache"β The default cache directory. Cozy little home for your cached stuff. π--certificate-authority=""β Path to a cert file for the certificate authority.--client-certificate=""β Path to a client certificate file for TLS.--client-key=""β Path to a client key file for TLS.--cluster=""β The name of the kubeconfig cluster to use.--context=""β The name of the kubeconfig context to use.--disable-compression=falseβ Iftrue, you opt out of response compression for every single request to the server. Raw dogging the bytes, as it were. π--insecure-skip-tls-verify=falseβ Iftrue, the server's certificate will not be checked for validity. This makes your HTTPS connections insecure. Genuinely dangerous, bestie β do not do this casually. π--kubeconfig=""β Path to the kubeconfig file to use for CLI requests.--kuberc=""β Path to the kuberc file to use for preferences. You can turn this off by exporting theKUBECTL_KUBERC=falsefeature gate, or by switching off the feature withKUBERC=off. ποΈ--match-server-version=falseβ Require the server version to match the client version. Matchy matchy, no mismatches allowed. π―-n,--namespace=""β If present, this sets the namespace scope for this CLI request.--password=""β Password for basic authentication to the API server.--profile="none"β Name of the profile to capture. One of(none|cpu|heap|goroutine|threadcreate|block|mutex|trace). Pick your fighter. βοΈ--profile-output="profile.pprof"β Name of the file to write the profile to.--proxy-url=""β Proxy URL to use for requests to the API server.--request-timeout="0"β How long to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (like1s,2m,3h). A value of zero means don't timeout requests at all β infinite patience, main character energy. π§ββοΈ-s,--server=""β The address and port of the Kubernetes API server.--tls-server-name=""β Server name to use for server certificate validation. If you don't provide it, the hostname used to contact the server gets used instead.--token=""β Bearer token for authentication to the API server. ποΈ--user=""β The name of the kubeconfig user to use.--username=""β Username for basic authentication to the API server.--version=falseβ--version,--version=rawprints version information and quits;--version=vX.Y.Z...sets the reported version. Tell me who you are, queen. π--warnings-as-errors=falseβ Treat warnings received from the server as errors and exit with a non-zero exit code. No more "lol whatever" β warnings become full-on drama. π¨
π SEE ALSO π
Go read these next, they're all in the same friend group:
π HISTORY π
January 2015 β originally compiled by Eric Paris (eparis at redhat dot com), based on the kubernetes source material. But hopefully they've been automatically generated since! π (Which, honestly? Growth. We love to see it.)
And that's a wrap, bestie β this page came to you from the Manuals source, User section, under KUBERNETES(1)(kubernetes). Slay responsibly. π
β¨
π¦ where this page comes from
- arch rolling: kubectl 1.37.2-1 Β· Apache-2.0
- fedora 43: kubernetes1.37-client 1.37.0-3.fc43
- fedora 43: kubernetes1.37-client 1.37.1-1.fc43 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-HP AND CC-BY-4.0 AND ISC AND MIT AND MPL-2.0
- fedora 44: kubernetes1.37-client 1.37.0-3.fc44
- fedora 44: kubernetes1.37-client 1.37.1-1.fc44 Β· Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND BSD-3-Clause-HP AND CC-BY-4.0 AND ISC AND MIT AND MPL-2.0
- nixpkgs unstable: kubectl 1.37.2
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms