How to grant limited user access for Kubernetes?

Linode Staff

I'm inviting a partner to cooperate on a kubernetes projects with me, but when I set limited access to only nodes, nodebalancer, blockstorage etc… they cannot see the kubernetes section.

It always shows "unauthorized access".

They can see the nodes from that cluster fine in the Linodes section but they cannot download Kubeconfig etc… Just everything from Kubernetes is unavailable.

The only way to give access to Kubernetes is with full accounting access.

I think there is a bug in the permissions section.

2 Replies

This is currently a limitation with LKE and limited users that the LKE team is aware of. We don't have an ETA for when this will be addressed.

One potential workaround could be the following:

  1. Create a new api token (https://cloud.linode.com/profile/tokens) that gives read/write access to Kubernetes only.
  2. Have the developer run the following curl command with the new token:
curl -H "Authorization: Bearer $KUBE_TOKEN" \
      https://api.linode.com/v4/lke/clusters/14292/kubeconfig

The output will be in base64 format, which can be decoded using something like this:
https://www.base64decode.org/

If needed, here is our documentation on getting started with the Linode API. They'd need to first store the token as a temporary (or environmental) variable. For example:

KUBE_TOKEN=<token_string>

For more information regarding what can be done with Kubernetes via our API, please see the following:
https://www.linode.com/docs/api/linode-kubernetes-engine-lke/

I can't work collaboratively if I can't grant specific permissions to LKE. I really need this to be fixed.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct