Does the verb watch in account role give access to view logs on a pod ? Any docu . . .

Kubernetes-Slack Discussions
#1

Ravi Shanker:
Does the verb watch in account role give access to view logs on a pod ? Any documents which provides description and list of resources which can be used for role.

#2

unnivkn:
Good question Ravi… please try this.

#3

unnivkn:
kind: Role
apiVersion: http://rbac.authorization.k8s.io/v1|rbac.authorization.k8s.io/v1
metadata:
namespace: log-namespace
name: display-logs
rules:

  • apiGroups: [“”]
    resources: [“pods”, “pods/log”, pods/portforward]
    verbs: [“get”, “list”, “create”]
#4

Ravi Shanker:
Is there a document which showed the option “pods/log” ?

#5

Ravi Shanker:
Thanks got it here https://kubernetes.io/docs/reference/access-authn-authz/rbac/