-
Notifications
You must be signed in to change notification settings - Fork 1.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[v16] Add doc on new field request.kubernetes_resources
#48654
Conversation
This pull request is automatically being deployed by Amplify Hosting (learn more). |
🤖 Vercel preview here: https://docs-pbla5ly8e-goteleport.vercel.app/docs/ver/preview |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
For the v16 backport I think you should mention the specific v16 version that is required (and I assume that auth and kube agents all need to be on this minimum version for this feature to work).
v16 is pretty far along in its release cycle, so the options mentioned here won't work in the majority of v16 releases. That's a frustrating experience for a user who reads the docs and finds it doesn't work.
@@ -406,6 +406,73 @@ Requesting access to a Kubernetes Namespace allows you to access all resources | |||
in that namespace but you won't be able to access any other supported resources | |||
in the cluster. | |||
|
|||
##### Restrict Access Requests to specific Kubernetes resource kinds | |||
|
|||
Starting version 16.4.7, the `request.kubernetes_resources` field allows you to restrict what kinds of Kubernetes |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
suggestion to make it clear that it's just auth services that need to be on 16.4.7
Starting version 16.4.7, the `request.kubernetes_resources` field allows you to restrict what kinds of Kubernetes | |
<Admonition type="note"> | |
The `request.kubernetes_resources` field was released in Teleport 16.4.7. | |
All Auth Services must be on version 16.4.7+ before the kubernetes resource restrictions will be enforced. | |
</Admonition> | |
The `request.kubernetes_resources` field allows you to restrict what kinds of Kubernetes |
🤖 Vercel preview here: https://docs-ebnltscmx-goteleport.vercel.app/docs/ver/preview |
aa80f1d
to
9a6e80d
Compare
🤖 Vercel preview here: https://docs-8h6l9ytyi-goteleport.vercel.app/docs/ver/preview |
9a6e80d
to
4152d46
Compare
🤖 Vercel preview here: https://docs-ez4rn4xxf-goteleport.vercel.app/docs/ver/preview |
Backport #48480 to branch/v16