Skip to content

[v12] docs: add tip on Kubernetes resources #26279

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
stevenGravy merged 6 commits into from
May 15, 2023
+9 −0
Merged

[v12] docs: add tip on Kubernetes resources #26279

Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
c61aa38
Add tip on Kubernetes resources
stevenGravy Mar 13, 2023
3b3eb9b
remove space
stevenGravy Mar 13, 2023
ea27f71
update wording
stevenGravy Apr 24, 2023
222143a
update wording
stevenGravy Apr 24, 2023
3c1b9f3
Update docs/pages/kubernetes-access/controls.mdx
stevenGravy Apr 24, 2023
c66eba0
update language
stevenGravy May 15, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions docs/pages/kubernetes-access/controls.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -445,6 +445,15 @@ value begins with `^` and ends in `$`, the Kubernetes Service will treat it as a
regular expression using Go's `re2` syntax (see the `re2`
[README](https://github.com/google/re2/wiki/Syntax)).

<Notice type="tip" >
For a user to access a pod named in a role's `kubernetes_resources` field, the user
must be assigned a Teleport role that contains at least one value within
`kubernetes_groups` or `kubernetes_users`. Teleport does not alter Kubernetes
roles to allow or deny access. Read the next section for an explanation of how the
Kubernetes Service evaluates Teleport roles in order to allow or deny access to
pods in a cluster.
</Notice>

## How the Kubernetes Service evaluates Teleport roles

When a Teleport user makes a request to a Kubernetes cluster's API server, the
Expand Down