How is the verb "proxy" determined in the audit logs?

0
votes

According to the kubernetes documentation, those are the following verbs:

https://kubernetes.io/docs/reference/access-authn-authz/authorization/#determine-the-request-verb enter image description here

I've been looking at kubernetes-dashboard Role, and i saw this:

  - apiGroups:
    - ""
    resourceNames:
    - heapster
    - dashboard-metrics-scraper
    resources:
    - services
    verbs:
    - proxy

This is the role of kubernetes-dashboard

I didn't see any indication that in the audits they use the "proxy" verb. Any clearance would be great

1
kubernetes

1 Answers

1
votes

When you perform kubectl proxy the request goes to API Server which calls POST /api/v1/namespaces/{namespace}/services/{name}/proxy the proxy api of services as documented here.

Proxy is not a verb, it's a sub resource exposed by Kubelet.