7 ms·
> You'd need get permissions for that. I'm afraid not. HTTP GET on a collection endpoint (which is the operation represented by the list verb) returns the full
by xnxn 5y ago
> You'd need get permissions for that.
I'm afraid not. HTTP GET on a collection endpoint (which is the operation represented by the list verb) returns the full object content.
https://kubernetes.io/docs/reference/access-authn-authz/authorization/#determine-the-request-verb https://kubernetes.io/docs/reference/access-authn-authz/auth...
- cassianoleal 5y agoInteresting, thanks for the reference. This is at best surprising, at worst sloppy security design IMO.